Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
File: LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json)
Hash identifier: tCcslCJwTJ0L9lo5u5MJNuYJcc/Yx0rqoiCHPdjvFRk=
Subject key identifier: AD:42:6D:6C:A1:62:B4:63:8A:7B:4A:35:8A:30:A6:6C:46:EF:8B:F5
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 01A0D91784D234606AC713D13A340BAA5285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
Manifest number: 1A7B
Signing time: Fri 25 Sep 2026 15:03:12 +0000
Manifest this update: Fri 25 Sep 2026 15:03:12 +0000
Manifest next update: Sat 26 Sep 2026 15:03:12 +0000
Files and hashes: 1: 9TWBsQcYt_3DqrpIxhr7ZchkbEs.roa (hash: S+4/zNMH2kmuHN+0Pj1sw0CtTfECJrrhZmhXHKALpLQ=)
2: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: UM0RnXpCtm79nQEcLYvASyYM7inHdprqFyj5xc+QHfc=)
3: csavTgWbEnAnj2FE7wmf-6_xsDo.roa (hash: NZc1W28oYgzZGInvZ1xUa3lyDRZmfm8SXHqRaJX4eiA=)
4: hWYYYTPX5BW-YlQJP7a7zSBSnAs.roa (hash: KB7u9iqoxD3Dcgosf4P5H0oRDToXUib7RpHigbMrFSE=)
5: kciLrIkaNokpbwgdgmqHhosEQAA.roa (hash: lRqsBb/ckM2u20pZEo0aziVALwxR00NbO8g2ocSg11k=)
6: t2zUFpxy4LQGct9r9ZJ0asDpLFw.roa (hash: 024FwN2O3pbhYVF2lJCnVAQHX9MDtHOalE1ahWO/jyA=)
7: tGV4YPNnQsDRzdIlgaAMjflbyZc.roa (hash: mek/U6Kf3m68n3h5nQGxZ1IWYVE3zIoWHPx7TmOAqIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:84:d2:34:60:6a:c7:13:d1:3a:34:0b:aa:52:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Sep 25 15:03:12 2026 GMT
Not After : Sep 26 15:03:12 2026 GMT
Subject: CN=ad426d6ca162b4638a7b4a358a30a66c46ef8bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c2:6b:32:84:48:e8:21:87:a6:64:31:51:4d:
7b:a8:fe:62:69:12:e0:ec:35:d3:37:d1:5d:59:d6:
b2:5d:6f:68:44:5a:0a:dd:ba:73:c0:a2:4a:8e:2c:
db:b1:97:33:b6:b9:02:e9:48:5e:ca:62:fb:42:f6:
21:a6:71:d4:f2:a2:eb:04:c5:84:3f:13:1d:71:c6:
4b:07:62:ca:f3:db:b5:cb:63:99:5c:a5:e4:77:15:
2d:bc:d8:81:f5:d6:15:0a:50:8d:72:51:d7:af:e1:
d1:9d:57:60:4c:d6:e1:93:c4:60:d3:5c:e9:28:61:
52:49:0f:52:0e:71:f9:12:dd:8f:36:d8:60:0e:e1:
77:9f:df:4b:23:0f:11:3c:8e:50:e6:51:20:e6:9c:
53:a3:b5:d7:e5:9e:50:da:95:ab:bf:6d:f2:85:93:
90:d0:28:3b:6a:6b:a0:19:97:46:95:c1:9c:26:34:
b5:93:65:81:bb:5d:98:f7:60:1b:dc:a1:00:2a:ae:
02:40:ad:19:34:dd:11:61:6f:a0:06:2c:2a:d2:76:
e6:50:6b:e6:71:9d:f1:e9:30:36:0a:46:4b:b8:44:
d8:4a:60:a3:36:b4:51:6d:74:80:0c:0c:66:2b:c4:
7a:8c:7a:45:6e:a3:40:bf:6b:86:53:db:d0:fd:db:
1a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:42:6D:6C:A1:62:B4:63:8A:7B:4A:35:8A:30:A6:6C:46:EF:8B:F5
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:06:79:21:71:61:62:a1:b5:15:3f:c4:ca:fe:fc:85:95:0d:
bd:1f:85:ce:a6:e6:f7:25:ac:7e:3a:c3:6f:21:06:7e:75:1d:
4f:3b:c5:04:74:4b:96:9d:1f:21:3a:f9:63:ed:f0:06:a5:96:
86:72:23:fc:06:b6:40:e1:51:d0:e3:20:99:22:3f:89:39:e7:
42:88:c9:0f:29:f2:17:e9:2f:af:92:0b:51:7e:ab:d6:17:2e:
ec:97:58:18:9f:c5:1d:d1:93:ed:58:d3:fa:29:06:a0:08:54:
97:53:3e:d0:82:83:3a:b5:6d:11:bd:01:cb:16:cd:57:09:4c:
d9:b5:3a:1e:ea:42:85:cc:bd:14:16:c7:24:c5:70:f2:d1:51:
19:a3:12:d6:54:66:d4:bf:58:82:9c:5a:7c:b2:22:58:ae:cf:
83:8d:fe:d1:30:8b:dd:a2:5f:8b:ac:46:00:dd:b6:a1:cc:c2:
56:5b:52:65:83:52:92:f8:a9:e5:65:87:79:c0:0b:f0:85:42:
da:c8:34:9a:3b:d8:24:d1:2d:a2:61:d6:09:23:c7:94:fc:a5:
a5:c6:74:6f:8b:ac:d6:50:90:1b:46:7f:e3:a6:91:ad:81:02:
3d:e0:b1:c3:a9:fb:0d:7b:4b:11:ca:6c:19:ed:c3:5e:1b:0f:
ea:06:f7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:22:23 2026 by rpki-client