Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
File: lkdopthwizYxQ6qIEeXZdoJk718.mft (raw, json)
Hash identifier: LH/iisUxgZTZE+E9HTyT9asTIttqrb+Y6Hsv958vQrM=
Subject key identifier: 8A:CF:80:94:F0:39:33:4E:EB:64:BA:69:CA:C4:33:29:C4:52:3D:34
Authority key identifier: 96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
Certificate issuer: /CN=964768a6d8708b363143aa8811e5d9768264ef5f
Certificate serial: 01A1DFBA2F2FA4F8C2B2C53D92BB41BC998D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 15:01:23 +0000
Manifest this update: Sun 15 Nov 2026 15:01:23 +0000
Manifest next update: Mon 16 Nov 2026 15:01:23 +0000
Files and hashes: 1: lkdopthwizYxQ6qIEeXZdoJk718.crl (hash: Gv3+NDDR1ZKnfyoOnQ7fMqJ5W3awtj8GwoblxdsDFEE=)
2: y_2SHxKhfe_rgzbIS6eSd_GEWIw.roa (hash: /4b4cJ0+NGqltrpZyUr4ICghwSOnPUDvjMTMvvgLSLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:2f:2f:a4:f8:c2:b2:c5:3d:92:bb:41:bc:99:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964768a6d8708b363143aa8811e5d9768264ef5f
Validity
Not Before: Nov 15 15:01:23 2026 GMT
Not After : Nov 16 15:01:23 2026 GMT
Subject: CN=8acf8094f039334eeb64ba69cac43329c4523d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:73:3c:3c:51:47:d1:82:09:5f:13:87:72:60:
da:18:d5:99:1c:c9:ca:67:65:83:50:91:39:85:95:
d6:d1:a2:a6:60:83:25:e8:56:de:f0:e1:a8:05:c7:
98:79:29:d2:7a:99:19:4d:11:98:bb:4c:82:fb:18:
78:f0:82:33:86:62:18:36:5c:35:c0:08:50:44:7d:
74:21:d7:d2:4e:60:b2:50:a9:79:7d:be:4c:06:20:
33:b8:67:83:81:2d:75:b3:7c:6d:5e:6b:84:3a:5e:
12:ac:ea:62:bf:0d:1a:95:22:8c:fb:aa:88:3b:34:
e0:fe:de:d1:e9:de:2f:86:59:60:7a:c6:b1:85:aa:
e1:21:14:6c:17:5c:cb:f5:d6:15:4f:99:7d:e5:35:
54:b2:4c:8e:57:d2:e4:14:12:d5:45:4d:73:9a:09:
38:17:96:0e:cd:06:b8:8a:76:fa:37:ac:36:8a:a5:
cf:df:21:13:38:f6:e8:7b:e0:15:f8:cd:7e:07:fe:
35:08:19:49:3c:8f:8a:74:26:62:00:06:a6:87:e5:
55:cd:43:51:d1:fa:7a:07:7c:f0:68:b6:77:27:50:
7a:0a:21:79:85:76:28:58:25:c7:cf:51:b5:f8:8f:
89:e9:7d:32:04:e1:dd:e5:72:54:24:71:b1:11:08:
9f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CF:80:94:F0:39:33:4E:EB:64:BA:69:CA:C4:33:29:C4:52:3D:34
X509v3 Authority Key Identifier:
keyid:96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:90:44:80:42:ea:7f:61:2d:e4:57:64:6d:aa:34:a9:55:6b:
41:d6:11:bc:b7:ec:83:17:75:e0:ba:d6:9d:7a:64:3c:e1:3a:
73:00:45:0a:b8:6e:76:d0:52:28:5d:3e:5b:a5:fd:eb:b1:09:
dd:12:a7:d1:8c:84:67:a7:f7:a9:9d:81:a5:ab:39:41:44:bd:
e8:55:3b:ab:fc:e4:87:94:34:9b:47:3e:69:75:c2:ee:21:3e:
7a:f9:98:77:4d:f3:9a:2c:c4:b9:65:f2:74:ab:85:27:f1:aa:
b9:09:a2:9f:f3:f2:37:d7:a1:64:d2:69:00:c6:38:6c:84:9d:
02:8e:73:7f:eb:b9:a1:ed:70:0d:a7:c6:0a:75:67:00:7e:c0:
4b:e5:78:1b:62:ba:de:68:3b:51:76:07:f6:8e:5c:64:fe:e0:
79:36:2d:05:48:4b:06:5a:be:f3:b1:7c:6f:a9:08:16:0a:77:
57:ff:53:0c:a8:b2:d4:bb:0a:b2:08:65:00:61:47:8c:ef:df:
f3:16:97:e7:43:8e:17:18:ab:81:7e:03:c2:d2:fd:1f:be:29:
5b:6d:12:1d:b6:22:d7:2b:bf:83:37:18:9a:e6:7d:9d:53:be:
69:a8:ba:9d:45:a8:a9:3c:05:36:fb:57:3c:23:3f:35:7e:86:
2f:ac:1b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:52:10 2026 by rpki-client