Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
File: lkdopthwizYxQ6qIEeXZdoJk718.mft (raw, json)
Hash identifier: xzeA7MYZOK3ngMPV+BzgmqRELIKaRZCQpdSBpgscPhw=
Subject key identifier: C1:B9:EA:B1:B6:45:6F:00:AB:59:50:11:0E:B8:DB:0B:19:69:12:F2
Authority key identifier: 96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
Certificate issuer: /CN=964768a6d8708b363143aa8811e5d9768264ef5f
Certificate serial: 019F92B61120F4E1839C46B93CAACDFA3424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 06:00:33 +0000
Manifest this update: Fri 24 Jul 2026 06:00:33 +0000
Manifest next update: Sat 25 Jul 2026 06:00:33 +0000
Files and hashes: 1: lkdopthwizYxQ6qIEeXZdoJk718.crl (hash: gslse0KQMmKxZgCnlXwF3xGqdbPpZvaLw8M6nw92M6c=)
2: y_2SHxKhfe_rgzbIS6eSd_GEWIw.roa (hash: /4b4cJ0+NGqltrpZyUr4ICghwSOnPUDvjMTMvvgLSLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:11:20:f4:e1:83:9c:46:b9:3c:aa:cd:fa:34:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964768a6d8708b363143aa8811e5d9768264ef5f
Validity
Not Before: Jul 24 06:00:33 2026 GMT
Not After : Jul 25 06:00:33 2026 GMT
Subject: CN=c1b9eab1b6456f00ab5950110eb8db0b196912f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:53:ee:6c:11:02:48:9d:9f:b5:74:16:26:a3:
fb:eb:b0:a7:97:17:c0:b8:2b:32:d2:d0:43:fd:ed:
d8:6f:1a:ef:f9:dd:9a:27:4e:c0:54:25:9f:df:87:
cf:10:20:69:3f:14:cd:e0:ed:5c:53:9d:e4:ac:fd:
4a:f6:1e:8f:c3:6c:32:e1:eb:20:26:f2:aa:a9:34:
e9:d7:24:9a:04:59:e4:09:09:1e:fb:1d:70:21:f1:
3f:5e:98:80:69:97:ee:5e:e9:a8:b1:82:91:b0:31:
46:87:ad:3a:5d:c2:b4:64:ad:12:37:a6:71:2b:96:
7b:a4:3a:7f:c4:f7:31:98:94:fd:69:1f:81:b7:e7:
17:42:b1:e3:c8:ba:c9:8c:49:0b:6a:3e:fa:f3:9e:
21:a5:08:12:87:30:6a:3c:74:bb:96:65:51:d3:53:
98:2e:d1:15:04:4d:c9:89:0a:c1:53:bc:05:69:72:
fc:61:2b:e8:11:33:34:3f:1b:3d:ce:22:9b:2e:71:
67:55:58:c1:83:13:04:19:19:ab:12:09:71:ce:15:
50:dc:e5:fb:31:97:cb:ee:62:2a:aa:56:75:7f:64:
0e:7d:8a:44:de:5e:38:77:eb:b3:92:63:65:0d:02:
69:ed:7a:27:b9:df:ee:55:5c:6e:b7:f9:8d:f4:04:
06:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B9:EA:B1:B6:45:6F:00:AB:59:50:11:0E:B8:DB:0B:19:69:12:F2
X509v3 Authority Key Identifier:
keyid:96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e8:84:13:9a:13:f8:6e:1b:8b:62:75:54:5e:56:c5:ff:77:
2e:da:59:46:a6:00:22:f0:f0:a4:ef:69:b7:ab:83:b5:97:13:
71:16:12:70:ab:13:0f:4c:aa:00:18:43:83:a0:56:c3:f8:8c:
10:63:68:07:cd:fa:9c:6d:44:00:b9:0b:77:01:dc:5d:ae:52:
05:96:d3:52:32:bc:64:2c:5b:60:5e:4c:b4:07:32:e8:82:1d:
54:58:b8:cb:31:83:ec:19:49:3b:d1:a2:ba:60:82:12:d2:84:
f5:87:73:6c:7c:8c:ca:f1:cd:1d:b2:f6:10:27:3a:a4:4c:4d:
a7:60:ca:ad:e9:13:8d:8d:3c:f2:c1:6f:6f:c0:54:0f:38:d9:
73:8c:ae:7e:04:58:e0:8e:df:cd:e6:d0:8a:e6:f5:36:5c:18:
59:44:60:49:fd:01:38:d1:94:ca:7b:87:94:9c:02:c1:c5:4d:
c8:9f:f7:20:bb:8b:03:8e:5e:da:92:ab:0c:07:57:f3:c9:f0:
f2:2f:fd:be:89:fd:5b:20:07:0c:d7:55:9a:49:75:ed:fd:0a:
02:b0:d0:87:c9:ee:1f:b6:b0:d6:b2:7a:01:26:2b:ef:a8:8e:
08:9b:7e:96:f4:fd:93:33:22:77:cc:2c:96:3d:ff:8b:ed:c9:
51:0f:31:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:10:21 2026 by rpki-client