Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
File: LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json)
Hash identifier: 0M0TXYJOPYnuIX4G+qviV4rpIJhLmK3d/Lkx0wyVFrk=
Subject key identifier: C0:49:CE:92:85:6E:9C:C5:BE:AB:38:BE:6E:42:3C:C7:C6:11:AC:31
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 019F90C7FEEE72E87CB85F45177BB6920A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
Manifest number: 19D1
Signing time: Thu 23 Jul 2026 21:00:53 +0000
Manifest this update: Thu 23 Jul 2026 21:00:53 +0000
Manifest next update: Fri 24 Jul 2026 21:00:53 +0000
Files and hashes: 1: 9TWBsQcYt_3DqrpIxhr7ZchkbEs.roa (hash: S+4/zNMH2kmuHN+0Pj1sw0CtTfECJrrhZmhXHKALpLQ=)
2: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: CQBnucjJcgdpqROO2xpKzO20vpypJlycN2A7hv3LUfc=)
3: csavTgWbEnAnj2FE7wmf-6_xsDo.roa (hash: NZc1W28oYgzZGInvZ1xUa3lyDRZmfm8SXHqRaJX4eiA=)
4: hWYYYTPX5BW-YlQJP7a7zSBSnAs.roa (hash: KB7u9iqoxD3Dcgosf4P5H0oRDToXUib7RpHigbMrFSE=)
5: kciLrIkaNokpbwgdgmqHhosEQAA.roa (hash: lRqsBb/ckM2u20pZEo0aziVALwxR00NbO8g2ocSg11k=)
6: t2zUFpxy4LQGct9r9ZJ0asDpLFw.roa (hash: 024FwN2O3pbhYVF2lJCnVAQHX9MDtHOalE1ahWO/jyA=)
7: tGV4YPNnQsDRzdIlgaAMjflbyZc.roa (hash: mek/U6Kf3m68n3h5nQGxZ1IWYVE3zIoWHPx7TmOAqIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:fe:ee:72:e8:7c:b8:5f:45:17:7b:b6:92:0a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Jul 23 21:00:53 2026 GMT
Not After : Jul 24 21:00:53 2026 GMT
Subject: CN=c049ce92856e9cc5beab38be6e423cc7c611ac31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:ba:ae:c4:3e:a3:96:88:b9:ae:1c:2f:82:
0b:42:70:e2:4a:80:57:d6:07:d2:b3:4c:14:36:73:
64:af:3d:83:ca:c4:be:8e:7c:11:1e:88:33:49:a1:
da:41:d2:3d:b0:06:a4:56:ff:bb:d4:5f:2c:26:b7:
c8:2a:40:e0:bb:82:84:1d:76:fe:c7:41:8a:a3:5a:
13:16:5c:aa:b7:f3:d8:5b:71:13:7f:82:ea:ef:a5:
77:49:43:d6:51:ba:7b:ad:1a:cb:40:b9:c4:63:be:
c6:28:2e:9c:11:5c:00:fb:59:1b:99:d7:a9:9c:2e:
a1:d3:ad:07:af:f9:dd:f6:10:18:d5:f2:8f:0a:9a:
59:6f:49:a9:81:4a:b4:e6:7d:25:e2:1a:87:17:80:
57:73:c1:a6:f0:97:f3:00:b5:4c:8f:91:13:26:f5:
8a:29:92:69:ee:ce:62:d3:ad:c3:d0:00:08:37:6a:
e5:83:1b:a1:03:01:c3:da:1c:c0:f4:55:be:2b:99:
98:13:37:09:f1:73:ae:60:20:97:f2:ec:04:b3:96:
5e:c0:b8:80:09:ba:84:bf:46:d0:52:9a:8f:60:c4:
29:58:df:6e:ca:41:a9:6a:ed:7c:ae:1c:f5:93:37:
95:0c:33:41:16:b8:bc:54:b0:55:3c:94:ce:ea:6f:
1c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:49:CE:92:85:6E:9C:C5:BE:AB:38:BE:6E:42:3C:C7:C6:11:AC:31
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c4:7d:a7:d1:e2:ad:84:7b:1f:85:0c:d8:ad:14:f7:c0:1a:
8a:b4:d4:67:6b:4a:6a:36:8a:eb:ec:6b:a9:6c:b5:e6:c4:22:
c2:7f:e2:e7:38:2e:a8:76:42:6f:3d:ff:5f:36:44:ec:16:77:
c3:61:a8:21:b4:10:3a:a0:c6:67:a1:86:e4:85:01:b1:eb:b4:
e9:dc:12:6d:95:90:ff:a7:b0:a6:78:40:53:d4:47:c3:71:d0:
8b:9b:4a:fe:c6:6d:bc:c7:52:ab:86:01:67:78:78:f6:22:69:
d4:33:49:f5:3a:24:02:ae:12:6b:96:2e:ec:65:3e:08:e5:09:
9d:9b:12:44:20:0b:6b:06:ad:60:ce:f2:39:d4:08:c7:85:e6:
b9:ee:e1:81:f9:25:9d:2a:58:8e:44:9d:45:f8:49:3e:b7:94:
df:8a:99:7b:6f:87:86:e3:a0:d6:26:17:c1:3d:c9:82:7d:8e:
5e:40:64:4c:28:09:47:44:c0:f9:77:7c:1f:a7:84:32:9b:91:
85:71:b8:98:c3:a9:8a:09:00:1c:7e:28:fb:3a:00:b9:35:c0:
b3:5c:18:12:4b:39:8d:9e:a7:8f:40:9e:ee:6b:54:f3:e9:a5:
91:a2:a5:90:b7:89:ae:f8:c5:f0:99:76:f0:8d:de:b4:65:c8:
1a:52:52:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:46:52 2026 by rpki-client