Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
File: lkdopthwizYxQ6qIEeXZdoJk718.mft (raw, json)
Hash identifier: zETWgB2pzN3rc6+oc1R8DqpFwO+5wpQbgXeIvI/VWxM=
Subject key identifier: 7E:5D:0A:83:C7:FE:6C:8E:95:EF:1D:C6:8A:EE:88:54:E1:27:6A:4F
Authority key identifier: 96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
Certificate issuer: /CN=964768a6d8708b363143aa8811e5d9768264ef5f
Certificate serial: 019D2AA9CE7D7FE4803860ABD301CC2B34FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 15:01:04 +0000
Manifest this update: Thu 26 Mar 2026 15:01:04 +0000
Manifest next update: Fri 27 Mar 2026 15:01:04 +0000
Files and hashes: 1: lkdopthwizYxQ6qIEeXZdoJk718.crl (hash: YuzKq5tYdFXmEXQ6BfBkz41qDaHIc69z4VGkBEcgwDg=)
2: y_2SHxKhfe_rgzbIS6eSd_GEWIw.roa (hash: /4b4cJ0+NGqltrpZyUr4ICghwSOnPUDvjMTMvvgLSLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:ce:7d:7f:e4:80:38:60:ab:d3:01:cc:2b:34:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964768a6d8708b363143aa8811e5d9768264ef5f
Validity
Not Before: Mar 26 15:01:04 2026 GMT
Not After : Mar 27 15:01:04 2026 GMT
Subject: CN=7e5d0a83c7fe6c8e95ef1dc68aee8854e1276a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b5:6c:0d:c1:02:cf:16:ce:49:95:92:9a:99:
ec:62:51:19:97:c2:e6:4e:89:0e:55:20:35:57:2e:
88:80:50:ac:ce:d9:07:3a:f5:17:3a:00:a4:b0:0f:
be:a1:9c:b1:3c:4f:f7:c9:93:d7:a4:a6:5c:7c:68:
49:9c:b0:22:3a:f4:96:79:17:12:eb:54:00:1a:a8:
3f:3f:43:0d:d8:16:1a:14:ac:f9:b4:15:bf:7f:41:
e2:b0:50:c2:fc:f7:e5:7b:d6:1d:68:c2:24:cf:1b:
8e:8b:e5:c7:b9:18:23:a5:ba:44:4c:7c:0c:7d:d2:
2f:c2:9d:4f:fd:15:54:be:d5:33:ab:b1:af:f5:33:
2e:11:20:86:d9:aa:02:53:a9:44:e9:aa:71:e6:9c:
ec:51:2a:5d:9d:51:14:b1:36:c3:56:bd:62:72:99:
84:7c:a1:35:e3:10:22:51:53:af:08:4d:90:e0:5c:
a3:3c:4a:3c:f4:85:9c:07:21:68:8b:f5:a1:60:43:
e0:3f:6a:ef:c0:06:98:09:dc:de:db:d2:5d:2c:61:
8b:29:ef:3d:69:d9:d4:21:28:2f:41:5d:af:40:c1:
ab:6d:0d:69:a3:fa:96:a4:76:00:b0:74:94:be:99:
e6:c0:9a:98:aa:bf:0a:79:34:d2:e2:33:af:36:ab:
a1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5D:0A:83:C7:FE:6C:8E:95:EF:1D:C6:8A:EE:88:54:E1:27:6A:4F
X509v3 Authority Key Identifier:
keyid:96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:11:4a:2b:34:d1:bd:87:bd:4c:24:ee:b8:7e:e8:4c:28:ea:
f4:82:33:56:2e:4c:82:23:95:4e:b0:25:27:8d:3f:f5:af:3a:
52:a9:a9:0f:7b:75:41:a0:5b:29:01:39:21:20:99:b7:a0:41:
bd:e8:82:59:63:07:3d:7f:55:ef:e3:59:2a:83:bc:56:b3:c1:
4d:b1:3f:26:42:8b:3a:c6:90:15:30:9a:cd:68:1c:49:5e:4e:
45:c0:0d:52:77:99:ed:c7:fd:ed:5b:09:28:53:09:28:67:95:
8a:6b:5c:eb:69:07:e4:a1:53:5d:e8:62:61:c6:2a:84:dd:85:
d9:21:b9:35:2e:94:d3:ef:5e:2d:48:de:b6:75:25:72:1c:ad:
d2:fb:7f:7d:a1:70:f1:50:ed:62:df:17:c6:0f:c7:e2:3b:db:
00:c3:bb:87:ed:03:ba:9c:bd:34:da:eb:9e:88:25:b3:2a:cd:
7f:8e:c0:ed:3d:e0:9c:36:96:5a:4d:b8:17:2d:71:de:d8:1a:
b4:5c:cb:e7:54:cc:3d:bc:cd:88:3e:7d:bd:21:a4:1a:cd:da:
de:c7:97:76:6e:00:76:8e:a0:54:15:b8:59:17:29:ec:9c:9a:
8f:9a:ff:6f:c8:89:65:18:25:71:1a:e6:40:98:9f:3d:b7:82:
b6:e4:f8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:53:57 2026 by rpki-client