Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
File: lkdopthwizYxQ6qIEeXZdoJk718.mft (raw, json)
Hash identifier: gUc/2VlXpaeZ7Z2CFB5LkY00wkEENI3XnL0Th4EAM4o=
Subject key identifier: 21:FB:57:3F:8A:48:99:91:9D:AD:5B:A2:90:B6:A3:B6:CB:1E:35:21
Authority key identifier: 96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
Certificate issuer: /CN=964768a6d8708b363143aa8811e5d9768264ef5f
Certificate serial: 01A0E0CF69785C78E841FF59731E5B6A1312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
Manifest number: 1A73
Signing time: Sun 27 Sep 2026 03:01:24 +0000
Manifest this update: Sun 27 Sep 2026 03:01:24 +0000
Manifest next update: Mon 28 Sep 2026 03:01:24 +0000
Files and hashes: 1: lkdopthwizYxQ6qIEeXZdoJk718.crl (hash: qyZRWERlECLQkgt+EHOG4nPWgeVccYKF5zDjXMnK+h0=)
2: y_2SHxKhfe_rgzbIS6eSd_GEWIw.roa (hash: /4b4cJ0+NGqltrpZyUr4ICghwSOnPUDvjMTMvvgLSLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:69:78:5c:78:e8:41:ff:59:73:1e:5b:6a:13:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964768a6d8708b363143aa8811e5d9768264ef5f
Validity
Not Before: Sep 27 03:01:24 2026 GMT
Not After : Sep 28 03:01:24 2026 GMT
Subject: CN=21fb573f8a4899919dad5ba290b6a3b6cb1e3521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b5:a0:20:f4:4e:e2:2a:3f:a6:52:c5:54:83:
7c:b4:92:82:64:43:0c:9c:f3:d5:dc:a2:7b:05:c9:
5a:75:c6:cc:cf:e7:e8:7a:de:60:8b:6a:30:42:98:
5c:96:ec:48:de:4e:39:eb:18:b2:65:61:67:70:65:
4f:e3:65:db:f1:3a:05:9b:d0:ed:be:1b:af:de:10:
86:e9:b3:c0:6f:4b:58:a7:2d:9a:e9:4b:32:f7:b9:
ae:13:a7:9f:3e:6f:4e:da:1f:d5:db:62:c3:e3:09:
f8:29:64:cb:7e:86:54:1c:90:57:6a:53:92:4d:a8:
bb:16:fc:8d:0e:53:f9:bc:19:ca:83:d0:86:97:91:
40:05:d8:62:8c:0c:02:95:06:03:da:bf:07:b0:64:
82:4f:27:c9:a3:79:18:82:9d:13:86:8e:19:4c:75:
f9:e7:fd:bb:53:4d:58:36:28:18:be:0c:4d:2d:4b:
6a:d2:69:c0:12:e1:e5:d8:4e:39:90:bd:b7:d1:7f:
f5:a4:03:83:ea:b7:fd:1f:5c:48:dd:9d:2b:5c:3c:
e3:17:7d:a2:49:17:85:f4:83:2f:b0:73:d5:86:a3:
97:7d:7b:6e:77:8b:40:3f:b6:5c:aa:f4:9e:c1:65:
5d:45:1b:fd:dc:7d:82:26:6c:81:9f:cf:4f:43:2a:
f2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FB:57:3F:8A:48:99:91:9D:AD:5B:A2:90:B6:A3:B6:CB:1E:35:21
X509v3 Authority Key Identifier:
keyid:96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1b:11:a1:1b:be:a5:fa:3e:da:c6:4a:9c:fd:9b:dd:32:01:
ad:71:08:84:72:11:47:df:4e:82:31:f0:ed:b4:a4:05:06:ea:
ec:40:c4:f4:76:71:fa:2d:fb:7f:23:63:35:6f:0d:32:88:1c:
be:64:24:ae:29:21:fd:1a:ff:d4:26:f8:5f:5a:1e:fc:3f:c9:
f6:f3:43:c2:09:c0:d5:3a:9a:2a:91:b1:39:be:69:3f:f6:98:
24:c3:10:5c:e0:6c:07:e8:e6:57:6b:24:8c:78:2f:7c:7e:03:
63:6a:df:56:71:07:e3:16:1d:44:f3:1d:a7:6b:fc:52:c1:6f:
5a:81:b4:e8:17:77:f1:d0:2f:d1:a9:35:4e:d4:65:51:9f:39:
17:2b:5d:f2:16:f2:9c:77:05:7e:2a:62:8e:ba:d5:b1:30:95:
be:49:5d:06:43:fa:92:7f:a3:80:08:86:a1:9d:35:0d:90:cd:
79:ff:92:ea:85:83:a1:a7:3e:93:f0:fb:18:49:bb:a1:31:ad:
4d:6d:9f:4b:b9:c3:1c:70:8f:aa:3c:c5:4c:41:9a:b4:de:6d:
a7:4a:bf:fa:af:58:df:aa:2b:cc:77:54:20:87:bf:6a:8d:93:
67:c6:c7:c6:f4:b0:fa:4d:b1:84:98:11:2d:2d:a4:cf:5f:f5:
e6:3f:ce:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:11:25 2026 by rpki-client