Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
File: LKYTd0lZnAPHtHLxQscZaAAGtuY.mft (raw, json)
Hash identifier: eWO00ALxTKgTpJtc7a28PA4RBUifDQpNJnm+TZVXpOA=
Subject key identifier: FF:14:F8:64:FB:EA:6B:6D:52:8C:6D:BE:D7:22:C5:91:2A:85:21:91
Authority key identifier: 2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6
Certificate issuer: /CN=2ca6137749599c03c7b472f142c719680006b6e6
Certificate serial: 019D27046F8DC4813FD5D0430BB3558C960C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
Manifest number: 151A
Signing time: Wed 25 Mar 2026 22:01:35 +0000
Manifest this update: Wed 25 Mar 2026 22:01:35 +0000
Manifest next update: Thu 26 Mar 2026 22:01:35 +0000
Files and hashes: 1: DjKvHGkxm9JLkDzr5jJuPNohrKM.roa (hash: 4xyJPy+sZSw3rF0C0CNhWMzSFjnYCLyNFxo1nQPPkU4=)
2: LKYTd0lZnAPHtHLxQscZaAAGtuY.crl (hash: nydxqtPmXLlmpj4TYPRxcBkRN4B5Cy8reEOtp+lXqO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:6f:8d:c4:81:3f:d5:d0:43:0b:b3:55:8c:96:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca6137749599c03c7b472f142c719680006b6e6
Validity
Not Before: Mar 25 22:01:35 2026 GMT
Not After : Mar 26 22:01:35 2026 GMT
Subject: CN=ff14f864fbea6b6d528c6dbed722c5912a852191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:66:39:7d:62:a1:7a:c5:6e:58:39:66:f2:b4:
4b:cd:44:7b:36:d7:5c:97:7c:d1:d2:75:ea:11:97:
cd:c2:d3:e1:94:72:7c:d8:08:b3:98:5a:89:00:5e:
46:6d:1b:02:e5:67:1e:a6:0c:c0:b5:ee:83:62:9d:
30:46:cd:bd:bf:35:bf:7b:4d:37:8d:99:66:cf:a8:
82:46:ee:03:d6:2b:21:fb:4f:be:2f:67:1c:ef:ce:
d3:6b:9a:8c:f3:21:e6:e7:45:b7:42:18:20:04:fd:
6f:3f:86:4c:5c:35:2e:8e:03:ef:43:8d:85:35:7a:
f8:c3:46:34:56:a9:0f:91:1d:85:f2:67:a1:f2:19:
f2:88:16:29:1f:7f:ec:f2:b3:96:79:7a:fd:01:9a:
44:c3:0c:68:17:b1:fe:1b:0b:cd:97:38:97:0e:c6:
e5:54:b0:f7:45:24:25:7a:0c:3b:74:e5:cc:b0:3e:
58:ce:3f:7e:85:8e:2d:d9:ba:3c:71:dc:30:06:27:
3b:b4:5a:11:fa:d2:5e:7d:e5:e3:e9:57:00:c3:a7:
4b:16:52:9c:9e:a3:ec:1b:a3:2b:52:c3:ac:d3:27:
b5:4f:90:b7:fc:a1:38:1d:25:23:1a:bc:01:0a:48:
e8:03:cb:5b:c6:89:9e:57:c8:4e:84:d3:4d:44:b6:
cb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:14:F8:64:FB:EA:6B:6D:52:8C:6D:BE:D7:22:C5:91:2A:85:21:91
X509v3 Authority Key Identifier:
keyid:2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:55:bf:c2:c1:7a:a7:39:3f:90:e6:07:3d:44:fa:c2:56:5c:
49:4f:00:cd:ba:dc:73:03:20:8e:c1:b8:48:92:79:e2:46:31:
cd:d5:95:03:99:ea:a5:1a:cc:42:81:04:89:ba:48:b2:2c:69:
a8:05:12:aa:55:68:19:02:55:42:88:88:57:f8:1c:16:41:63:
85:1b:f5:36:6c:e3:c9:53:5a:63:45:56:ac:09:21:2d:34:08:
aa:22:90:17:68:c9:a1:1a:7c:1f:36:f6:53:50:8b:c5:22:e4:
a4:e3:f9:c2:7f:e1:fd:e5:cf:33:7d:0b:22:8d:52:00:fd:3c:
df:37:6c:32:a3:c0:2a:78:ec:8c:e2:d9:2a:70:89:18:17:6f:
e6:8d:8b:b6:49:41:97:a1:0f:a2:b0:14:01:e1:c9:b1:37:e1:
ef:26:c0:2f:6b:ae:ec:7b:87:9f:f2:64:3f:7b:f6:70:21:78:
31:02:e8:d2:84:24:5c:88:a7:45:07:d6:6a:bc:ac:ed:50:f5:
92:b4:f9:80:98:23:00:86:ee:3e:b7:cd:3e:56:86:ef:b7:03:
c2:93:07:06:a6:10:88:31:e1:7e:90:2c:bd:97:03:4e:21:a5:
c8:5d:94:fe:91:3e:c4:df:2b:7f:73:21:65:dc:43:cb:cb:47:
cd:4a:7b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:14 2026 by rpki-client