Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
File: LKVMSc_kyVm2nIriZoMm8QX2K50.mft (raw, json)
Hash identifier: x+46ff6Y2UD9aJWmn4MkAoddvo2SGXZCgrhkUY8nqwU=
Subject key identifier: 34:4B:16:1D:78:B7:BD:4B:D1:BB:26:EB:D2:92:7A:7F:4A:A5:70:5F
Authority key identifier: 2C:A5:4C:49:CF:E4:C9:59:B6:9C:8A:E2:66:83:26:F1:05:F6:2B:9D
Certificate issuer: /CN=2ca54c49cfe4c959b69c8ae2668326f105f62b9d
Certificate serial: 019D2816BC88989ADBB66D5D45FE62F0B227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
Manifest number: 0868
Signing time: Thu 26 Mar 2026 03:01:11 +0000
Manifest this update: Thu 26 Mar 2026 03:01:11 +0000
Manifest next update: Fri 27 Mar 2026 03:01:11 +0000
Files and hashes: 1: LKVMSc_kyVm2nIriZoMm8QX2K50.crl (hash: xy/uCZvKhzCrrBFOCoRjZUV+D0Q0A0q4zKIakxvq7BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:bc:88:98:9a:db:b6:6d:5d:45:fe:62:f0:b2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca54c49cfe4c959b69c8ae2668326f105f62b9d
Validity
Not Before: Mar 26 03:01:11 2026 GMT
Not After : Mar 27 03:01:11 2026 GMT
Subject: CN=344b161d78b7bd4bd1bb26ebd2927a7f4aa5705f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:3b:0b:1c:8d:52:74:c3:cf:ea:45:c9:6f:
e0:ef:74:e3:65:4f:5b:06:6d:13:9a:11:9f:a9:8b:
8d:b9:c3:1c:61:32:32:97:8d:d6:a9:65:b0:50:36:
65:ae:80:f1:a7:6e:15:5c:2b:93:69:27:09:eb:22:
c3:30:51:1c:91:06:ec:66:fc:71:6e:1e:d2:5c:66:
d5:fa:fc:5a:48:33:a8:66:2a:72:ba:65:e6:9b:b7:
fa:b8:a1:fe:83:78:ba:c3:0f:cc:a7:9e:6e:63:52:
b1:f4:76:11:ab:7e:1e:a6:4b:75:d0:2b:79:7d:9a:
d0:d2:05:c1:43:1c:29:23:61:ef:fe:d9:cc:30:b1:
53:82:8e:39:66:ba:22:95:1f:21:80:73:fc:7f:09:
c1:1f:4f:fe:40:8e:20:90:89:4d:e4:cb:ee:d9:00:
e6:e2:0c:03:fc:40:54:b8:e2:e5:1a:5f:39:64:4a:
a6:2c:60:0f:1b:b0:6b:c5:03:89:60:d2:2b:19:41:
e6:59:df:3d:66:a6:91:2a:49:da:ae:14:bc:dc:be:
0e:a5:41:b3:09:ad:ae:f5:f6:29:dd:5c:a2:6d:18:
fc:b0:cb:8c:fd:c9:9a:d6:b3:9b:38:89:3b:78:4a:
f3:c0:28:fc:a4:dc:f2:43:34:79:b3:3d:e6:88:9e:
de:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4B:16:1D:78:B7:BD:4B:D1:BB:26:EB:D2:92:7A:7F:4A:A5:70:5F
X509v3 Authority Key Identifier:
keyid:2C:A5:4C:49:CF:E4:C9:59:B6:9C:8A:E2:66:83:26:F1:05:F6:2B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8a:b3:b5:7f:73:77:c8:eb:f0:20:71:58:a3:a1:8e:06:32:
3c:96:cb:16:93:50:6f:38:4c:4d:33:cd:49:53:aa:9f:31:0d:
0c:31:d7:f7:65:69:24:fd:d9:a3:19:cd:cc:f9:95:3c:05:76:
d7:fd:49:fd:1f:63:a7:c2:f4:99:f0:b4:a7:88:30:12:0b:ad:
55:50:42:5d:d8:a9:21:99:89:f6:56:44:89:67:01:86:05:c7:
40:e6:1c:7a:7b:79:cf:27:0f:ab:c6:28:04:13:61:b4:06:c3:
cd:4e:c8:ab:44:99:93:5a:db:09:70:5c:2f:fb:57:38:f2:ec:
da:8b:16:6e:24:19:2d:d7:a9:0d:69:2c:27:2f:88:69:8d:97:
1a:3f:7b:39:d9:7d:46:68:81:08:26:e4:70:d4:e6:05:a3:3a:
7f:34:02:b0:cd:c5:99:e0:4b:3c:b9:f8:87:df:78:17:1f:7c:
6c:1e:37:73:f8:b2:6a:c7:87:d9:67:cf:c5:2d:6e:98:ff:8e:
23:5a:97:c7:39:e4:73:4f:33:08:ff:8a:5a:c1:58:dd:46:4a:
b0:c5:a1:f5:cc:44:71:69:ca:38:23:f5:69:8f:ab:92:e4:69:
8e:0a:06:c1:51:8e:b8:0c:66:4a:a9:e0:cb:71:58:aa:9c:70:
05:6a:0d:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFryImJrbtm1dRf5i8LInMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYTU0YzQ5Y2ZlNGM5NTliNjljOGFlMjY2ODMyNmYxMDVm
NjJiOWQwHhcNMjYwMzI2MDMwMTExWhcNMjYwMzI3MDMwMTExWjAzMTEwLwYDVQQD
EygzNDRiMTYxZDc4YjdiZDRiZDFiYjI2ZWJkMjkyN2E3ZjRhYTU3MDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAE7CxyNUnTDz+pFyW/g73TjZU9b
Bm0TmhGfqYuNucMcYTIyl43WqWWwUDZlroDxp24VXCuTaScJ6yLDMFEckQbsZvxx
bh7SXGbV+vxaSDOoZipyumXmm7f6uKH+g3i6ww/Mp55uY1Kx9HYRq34epkt10Ct5
fZrQ0gXBQxwpI2Hv/tnMMLFTgo45ZroilR8hgHP8fwnBH0/+QI4gkIlN5Mvu2QDm
4gwD/EBUuOLlGl85ZEqmLGAPG7BrxQOJYNIrGUHmWd89ZqaRKknarhS83L4OpUGz
Ca2u9fYp3VyibRj8sMuM/cma1rObOIk7eErzwCj8pNzyQzR5sz3miJ7ehQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRLFh14t71L0bsm69KSen9KpXBfMB8GA1UdIwQY
MBaAFCylTEnP5MlZtpyK4maDJvEF9iudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEtWTVNjX2t5Vm0ybklyaVpvTW04UVgySzUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80YjFmOWUtODhmZS00OTM5LWFkNTgt
ZjIzZjI5Y2VmZWU2LzEvTEtWTVNjX2t5Vm0ybklyaVpvTW04UVgySzUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80YjFmOWUtODhmZS00OTM5LWFkNTgtZjIzZjI5Y2VmZWU2
LzEvTEtWTVNjX2t5Vm0ybklyaVpvTW04UVgySzUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIqztX9z
d8jr8CBxWKOhjgYyPJbLFpNQbzhMTTPNSVOqnzENDDHX92VpJP3ZoxnNzPmVPAV2
1/1J/R9jp8L0mfC0p4gwEgutVVBCXdipIZmJ9lZEiWcBhgXHQOYcent5zycPq8Yo
BBNhtAbDzU7Iq0SZk1rbCXBcL/tXOPLs2osWbiQZLdepDWksJy+IaY2XGj97Odl9
RmiBCCbkcNTmBaM6fzQCsM3FmeBLPLn4h994Fx98bB43c/iyaseH2WfPxS1umP+O
I1qXxznkc08zCP+KWsFY3UZKsMWh9cxEcWnKOCP1aY+rkuRpjgoGwVGOuAxmSqng
y3FYqpxwBWoNnw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:55:18 2026 by rpki-client