Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
File: lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft (raw, json)
Hash identifier: +acU2EwkrAGOSKg1YccfVtppjmME+qepwx0ELKk0LAI=
Subject key identifier: 31:CC:D0:5F:AE:8A:68:E2:AE:79:08:E8:25:55:58:DD:A8:54:A5:50
Authority key identifier: 96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A
Certificate issuer: /CN=96448e840d272a3e3159192d1df11f100e506f6a
Certificate serial: 019D2695FE238DB8D85A6E41573A4AE7BBE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
Manifest number: 0AB0
Signing time: Wed 25 Mar 2026 20:00:57 +0000
Manifest this update: Wed 25 Mar 2026 20:00:57 +0000
Manifest next update: Thu 26 Mar 2026 20:00:57 +0000
Files and hashes: 1: gtKo7QAi2WcSoZ12HmBm24qw-r4.roa (hash: qnaglWaJ+iAOcdqIITkJYy4ZOlNoiaJCiuIcC9Lr3R4=)
2: lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl (hash: A1TnBeWiLdSQmcuEOwPLE1vrh7QEEEy4Wm8zRE2UYrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:fe:23:8d:b8:d8:5a:6e:41:57:3a:4a:e7:bb:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96448e840d272a3e3159192d1df11f100e506f6a
Validity
Not Before: Mar 25 20:00:57 2026 GMT
Not After : Mar 26 20:00:57 2026 GMT
Subject: CN=31ccd05fae8a68e2ae7908e8255558dda854a550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:fc:ad:28:b7:ad:03:dd:cd:ce:37:21:e1:
07:27:4b:9a:6e:e5:a4:6a:7c:4b:4a:1b:b1:f6:77:
63:55:21:19:e7:ed:f9:8b:0e:27:77:9d:cd:99:64:
c3:05:3d:0b:f5:c4:db:a0:c8:f3:2c:60:44:f8:94:
f6:cb:c7:51:d3:53:a6:b6:b8:f6:a9:2f:1e:ce:b9:
60:07:bc:fb:25:f8:e7:a6:e8:35:15:1f:10:5b:dd:
dc:11:03:eb:ad:47:ca:eb:28:ce:de:3b:0f:1b:a6:
be:c2:be:51:02:4f:ba:f5:92:ef:96:b2:10:d5:05:
8f:43:cc:11:99:dc:4c:34:4d:4b:3f:ec:f5:6b:f7:
46:bb:9a:80:b7:92:31:47:67:90:5c:02:ff:fe:49:
5d:ef:8e:f0:88:9a:f0:db:3b:3c:29:28:03:1b:b1:
b4:39:1e:5e:62:c1:b8:b8:f4:30:b1:4b:33:3c:ef:
21:20:3e:3b:2d:f8:c1:27:b8:9a:a1:a1:0d:c7:5f:
cc:63:02:55:a7:90:64:11:60:39:5b:0a:fe:89:05:
01:89:34:d7:e1:7b:35:88:b2:59:1d:11:fb:cc:14:
72:c3:d2:e8:6c:06:22:70:98:79:14:b6:2d:8a:09:
f7:e8:d3:53:e5:86:e9:02:ff:53:f8:bd:63:2d:a3:
dd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CC:D0:5F:AE:8A:68:E2:AE:79:08:E8:25:55:58:DD:A8:54:A5:50
X509v3 Authority Key Identifier:
keyid:96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f6:92:24:e0:68:de:99:bc:ce:75:4f:c2:8b:57:4c:6f:9a:
3c:00:70:9b:71:38:83:ad:63:b4:cf:d8:1e:8d:c2:2f:d0:c2:
5e:ca:d2:de:97:ce:e9:8f:4d:5e:23:33:bc:75:fa:7e:6f:34:
d7:fa:97:fb:95:45:6c:e8:aa:c0:68:f3:90:17:55:aa:df:53:
0f:2e:8a:fe:bd:e4:c7:0a:f0:c6:78:90:fd:d5:09:f2:2b:46:
e1:54:bf:e2:56:9e:59:db:2c:c1:a6:85:b6:cd:ef:40:8f:56:
56:96:75:7f:bb:0f:0c:3e:41:fc:44:16:c9:9b:b3:bc:cf:33:
46:81:be:bc:a7:3a:9c:44:ec:7c:d2:b3:f1:72:68:0e:d2:3f:
6a:4f:9d:cc:67:a0:fa:94:94:95:95:06:a6:b1:86:36:a6:ee:
a4:aa:79:82:0f:ad:91:bb:12:7d:a0:40:a0:78:9e:96:fb:0c:
6d:5d:33:ea:1f:ec:1b:7a:80:91:d8:46:2c:59:3b:3a:1d:8e:
6d:a2:b8:d3:9d:c9:7e:cf:36:fb:00:8a:21:98:bd:ed:65:cc:
ac:f9:70:5b:f5:72:69:c3:6b:06:db:c8:da:92:1b:eb:20:52:
e0:21:5a:6b:6c:8c:b8:d7:90:bc:24:58:97:4c:8d:57:31:18:
6e:1a:d7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:57 2026 by rpki-client