Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
File: lkdopthwizYxQ6qIEeXZdoJk718.mft (raw, json)
Hash identifier: //C0wFncVOHnL/m/0pKo53G+sWW1No4+el1VO8ndASY=
Subject key identifier: 4C:7F:C0:22:2A:0B:C6:DC:A5:02:89:9A:F5:57:9D:83:12:A7:3F:71
Authority key identifier: 96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
Certificate issuer: /CN=964768a6d8708b363143aa8811e5d9768264ef5f
Certificate serial: 019E1DFE9C8FBA1FF3E062AA70EF91E3C967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 21:01:25 +0000
Manifest this update: Tue 12 May 2026 21:01:25 +0000
Manifest next update: Wed 13 May 2026 21:01:25 +0000
Files and hashes: 1: lkdopthwizYxQ6qIEeXZdoJk718.crl (hash: jNlm+8mJLIv+ggeJ8W1tWoi649JUPrC+zm7fDw+Yx24=)
2: y_2SHxKhfe_rgzbIS6eSd_GEWIw.roa (hash: /4b4cJ0+NGqltrpZyUr4ICghwSOnPUDvjMTMvvgLSLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:9c:8f:ba:1f:f3:e0:62:aa:70:ef:91:e3:c9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964768a6d8708b363143aa8811e5d9768264ef5f
Validity
Not Before: May 12 21:01:25 2026 GMT
Not After : May 13 21:01:25 2026 GMT
Subject: CN=4c7fc0222a0bc6dca502899af5579d8312a73f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:76:26:5b:3f:98:04:10:da:7e:d9:17:16:a6:
55:d8:77:a3:04:0f:e3:59:bd:4b:c9:19:46:fe:9c:
35:28:62:1a:f8:02:3d:cd:e4:81:17:dc:a4:b3:91:
99:fe:c6:ea:b6:36:f4:25:b9:dd:b6:09:3e:8f:5b:
d0:15:69:19:02:7c:ee:61:19:b3:9c:7f:06:87:0e:
13:a3:da:a2:35:60:bd:98:83:85:74:01:82:91:35:
f3:b8:44:10:93:fd:47:45:97:dd:25:4c:e9:8e:72:
60:a9:11:87:d6:6a:20:5e:32:57:4a:cc:b1:19:d4:
b2:64:f0:22:68:a9:2f:fc:ea:f6:32:ba:84:c3:3e:
d6:55:90:e8:08:1f:fc:50:49:63:94:49:6e:e3:19:
a5:8c:b2:96:46:ac:f2:65:9e:a3:6a:dc:eb:07:65:
20:d8:2b:06:9c:11:a3:e9:02:91:b8:8e:47:28:1f:
f7:24:f0:4d:6e:f1:32:7d:32:13:44:05:d1:ad:c2:
fe:3f:30:f3:c1:4b:b8:39:5f:7d:e4:4a:bb:0e:84:
e3:71:d4:17:73:8a:77:bf:54:08:fd:ad:55:1e:27:
c3:4b:75:92:6a:f7:36:62:e4:b6:ba:f5:16:62:22:
70:48:49:c8:ad:6c:27:1e:46:f9:3e:4d:18:b8:ad:
0f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7F:C0:22:2A:0B:C6:DC:A5:02:89:9A:F5:57:9D:83:12:A7:3F:71
X509v3 Authority Key Identifier:
keyid:96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a9:3b:33:b0:2e:4f:fb:91:15:bc:74:83:cc:71:17:d0:89:
87:08:d0:11:a2:cb:31:42:c2:40:44:a5:f5:a9:9c:dc:88:61:
ed:b3:d0:2a:22:5e:92:c8:74:17:77:ef:ef:50:ea:89:ae:17:
aa:b9:50:90:9a:83:d8:0b:eb:3e:92:ea:56:61:e6:3c:ee:53:
b2:e4:cb:83:0f:59:0b:3e:5f:8a:23:53:2b:9c:7e:f1:99:78:
0c:ae:30:2a:a4:b2:56:51:95:bd:79:77:69:37:52:e1:e9:34:
00:76:e7:55:72:b7:94:6a:5e:4b:28:43:a8:5f:2e:01:93:a0:
85:32:ef:cb:82:e3:e7:30:d4:b3:d9:ec:78:61:03:93:08:e3:
d4:66:ed:5e:c7:89:b1:66:02:e5:ee:d3:5c:0a:0d:15:08:7e:
c7:ed:9f:13:eb:f4:cb:15:29:1b:c8:c6:ad:8e:79:29:96:32:
c0:e6:98:66:82:96:34:cd:59:6f:4c:a4:91:3c:db:23:ec:a7:
a2:39:d0:3a:e4:ff:af:de:12:82:dc:04:5d:f5:fd:15:25:9e:
2e:ea:ba:22:65:cd:54:16:23:37:59:04:53:53:92:a9:88:39:
2c:f9:0d:83:65:c2:1b:84:cd:75:52:99:fc:6e:36:91:12:69:
12:8f:d0:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/pyPuh/z4GKqcO+R48lnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NDc2OGE2ZDg3MDhiMzYzMTQzYWE4ODExZTVkOTc2ODI2
NGVmNWYwHhcNMjYwNTEyMjEwMTI1WhcNMjYwNTEzMjEwMTI1WjAzMTEwLwYDVQQD
Eyg0YzdmYzAyMjJhMGJjNmRjYTUwMjg5OWFmNTU3OWQ4MzEyYTczZjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3YmWz+YBBDaftkXFqZV2HejBA/j
Wb1LyRlG/pw1KGIa+AI9zeSBF9yks5GZ/sbqtjb0Jbndtgk+j1vQFWkZAnzuYRmz
nH8Ghw4To9qiNWC9mIOFdAGCkTXzuEQQk/1HRZfdJUzpjnJgqRGH1mogXjJXSsyx
GdSyZPAiaKkv/Or2MrqEwz7WVZDoCB/8UEljlElu4xmljLKWRqzyZZ6jatzrB2Ug
2CsGnBGj6QKRuI5HKB/3JPBNbvEyfTITRAXRrcL+PzDzwUu4OV995Eq7DoTjcdQX
c4p3v1QI/a1VHifDS3WSavc2YuS2uvUWYiJwSEnIrWwnHkb5Pk0YuK0PvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEx/wCIqC8bcpQKJmvVXnYMSpz9xMB8GA1UdIwQY
MBaAFJZHaKbYcIs2MUOqiBHl2XaCZO9fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGtkb3B0aHdpell4UTZxSUVlWFpkb0prNzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81ZWE0MjUtYWYxYS00ZTMwLThiYjAt
YmZhNjM2ODc3ZTkwLzEvbGtkb3B0aHdpell4UTZxSUVlWFpkb0prNzE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC81ZWE0MjUtYWYxYS00ZTMwLThiYjAtYmZhNjM2ODc3ZTkw
LzEvbGtkb3B0aHdpell4UTZxSUVlWFpkb0prNzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWak7M7Au
T/uRFbx0g8xxF9CJhwjQEaLLMULCQESl9amc3Ihh7bPQKiJeksh0F3fv71Dqia4X
qrlQkJqD2AvrPpLqVmHmPO5TsuTLgw9ZCz5fiiNTK5x+8Zl4DK4wKqSyVlGVvXl3
aTdS4ek0AHbnVXK3lGpeSyhDqF8uAZOghTLvy4Lj5zDUs9nseGEDkwjj1GbtXseJ
sWYC5e7TXAoNFQh+x+2fE+v0yxUpG8jGrY55KZYywOaYZoKWNM1Zb0ykkTzbI+yn
ojnQOuT/r94SgtwEXfX9FSWeLuq6ImXNVBYjN1kEU1OSqYg5LPkNg2XCG4TNdVKZ
/G42kRJpEo/QTQ==
-----END CERTIFICATE-----
Generated at Wed May 13 09:08:16 2026 by rpki-client