Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
File: LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json)
Hash identifier: 459dNnvwOf+FZV01SiS2a6MhCWpP8teYbwON2319YAk=
Subject key identifier: 1F:2E:B0:A8:5B:85:70:DD:E2:28:3B:75:F4:F3:A9:F9:13:EB:9E:9B
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 019D2628BA791634B996A540FDD0506ED7B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
Manifest number: 188E
Signing time: Wed 25 Mar 2026 18:01:36 +0000
Manifest this update: Wed 25 Mar 2026 18:01:36 +0000
Manifest next update: Thu 26 Mar 2026 18:01:36 +0000
Files and hashes: 1: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: cwM2XfsAys7h7RED7e8VA5Id9uOl/Pf1M9LHvLcr0Xc=)
2: csavTgWbEnAnj2FE7wmf-6_xsDo.roa (hash: NZc1W28oYgzZGInvZ1xUa3lyDRZmfm8SXHqRaJX4eiA=)
3: kciLrIkaNokpbwgdgmqHhosEQAA.roa (hash: lRqsBb/ckM2u20pZEo0aziVALwxR00NbO8g2ocSg11k=)
4: rDqpWECW0pza-2J9_z5v1QcmMYM.roa (hash: BlCKHTq9I2NrgHH11AE9oJ3PcBo5UMsZimSMaB2XjYs=)
5: tGV4YPNnQsDRzdIlgaAMjflbyZc.roa (hash: mek/U6Kf3m68n3h5nQGxZ1IWYVE3zIoWHPx7TmOAqIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:ba:79:16:34:b9:96:a5:40:fd:d0:50:6e:d7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Mar 25 18:01:36 2026 GMT
Not After : Mar 26 18:01:36 2026 GMT
Subject: CN=1f2eb0a85b8570dde2283b75f4f3a9f913eb9e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:7d:42:c6:73:11:a2:1c:f5:2d:5d:e6:a2:
73:43:31:51:79:5d:e2:68:f6:b1:2e:a5:cd:42:3d:
b1:33:2b:ef:e2:f8:e7:67:9f:e8:83:01:db:ff:c8:
30:34:51:22:4d:50:a5:9f:7c:70:c7:70:bc:f8:e7:
e2:b7:3c:20:b5:7c:72:fa:58:c5:e8:89:30:b0:c3:
22:d9:d4:71:82:a9:47:bd:4d:41:94:64:f9:7c:40:
78:bf:b9:f3:44:57:a9:67:2b:2f:e7:f4:ef:47:20:
dd:ea:2c:19:0b:88:e0:40:97:c9:f2:85:91:fd:f7:
c8:cb:9c:ba:ea:13:73:93:70:54:a4:1a:c0:95:49:
a3:2c:51:1c:8e:f3:1f:91:76:43:c0:1f:ab:eb:15:
fd:6e:20:f0:e3:32:94:78:e7:93:fc:60:ec:7b:04:
f3:a0:be:13:bc:38:d7:89:e2:04:84:b5:16:c8:7f:
8e:79:51:68:01:98:f3:93:70:23:b0:74:f5:65:80:
93:a4:fd:6a:f2:d6:d1:44:d2:b1:05:f7:a8:66:81:
b9:0f:f6:3a:57:07:45:e2:0c:7b:9a:0d:79:14:c5:
fc:03:95:1a:a2:08:1b:e3:17:3c:cb:15:11:3c:15:
bf:a3:81:12:72:84:a5:29:9a:26:30:b1:4f:f3:3c:
7a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2E:B0:A8:5B:85:70:DD:E2:28:3B:75:F4:F3:A9:F9:13:EB:9E:9B
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:4f:2e:76:4e:21:83:74:cb:3d:36:43:3d:23:1b:64:b3:bf:
9d:04:c0:32:b5:b2:39:8f:66:dc:75:77:b5:a3:5a:55:e5:9d:
ca:b1:6f:c0:0e:fd:8a:b0:21:c4:4f:b6:c2:f0:bc:c0:7f:25:
1a:14:ee:6c:aa:e1:2a:66:82:bd:2a:25:79:f3:91:0b:b4:3b:
09:9d:2c:2c:3d:3b:32:03:d1:b2:f0:37:ab:e9:41:3f:d2:48:
77:5d:46:fc:c6:b8:08:54:0c:94:e1:67:3b:56:40:2c:a8:26:
4c:c3:9b:17:ea:c6:9d:de:dd:dd:57:91:c6:80:de:96:b0:f4:
bf:78:6d:1a:74:c0:e0:a2:f9:37:09:3e:03:23:92:ee:8f:90:
69:70:fa:d7:93:9e:a6:10:77:4a:f5:95:ac:6a:0e:eb:63:fc:
cf:9c:af:03:90:9a:19:aa:17:d4:39:e1:80:33:d3:c3:77:9a:
55:0a:99:06:c9:df:f2:5e:78:53:0c:cc:f8:0d:66:29:35:04:
d7:d7:7b:9d:1d:48:cb:0c:54:49:60:03:da:9a:2f:2f:0f:76:
59:e3:34:50:c0:53:d3:f4:88:e0:65:c0:ec:f5:be:35:e2:d1:
6a:67:9d:26:67:a9:9d:56:31:ce:af:06:f6:7a:65:28:6a:cd:
e4:16:ff:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:51 2026 by rpki-client