Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
File: LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft (raw, json)
Hash identifier: 7jgNYc5AXSNu435TnceqlzR4I0hghMIG3YlhYttqi+c=
Subject key identifier: 0A:A1:78:18:9F:6C:D1:0A:33:13:6B:76:E2:01:1A:E2:6F:26:E1:47
Authority key identifier: 2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF
Certificate issuer: /CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf
Certificate serial: 019D28F2B29D6DE79891D287759D1658792B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
Manifest number: 11BB
Signing time: Thu 26 Mar 2026 07:01:27 +0000
Manifest this update: Thu 26 Mar 2026 07:01:27 +0000
Manifest next update: Fri 27 Mar 2026 07:01:27 +0000
Files and hashes: 1: LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl (hash: LwKdui6SL4vpOmMTmobzgx4bsMR0Fulnv9ayPeGTzIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:b2:9d:6d:e7:98:91:d2:87:75:9d:16:58:79:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf
Validity
Not Before: Mar 26 07:01:27 2026 GMT
Not After : Mar 27 07:01:27 2026 GMT
Subject: CN=0aa178189f6cd10a33136b76e2011ae26f26e147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4a:03:89:30:99:e3:cf:85:d6:79:07:ff:91:
15:47:15:6f:aa:d1:e0:92:8c:32:b9:ef:a4:d1:e6:
78:b0:62:ff:f1:94:f9:9a:3e:82:09:37:88:26:cf:
72:89:85:70:71:c4:27:50:51:83:71:d0:45:16:c4:
b1:36:6f:37:ff:d2:c8:aa:4d:29:59:cc:8d:55:c6:
f1:a1:b8:c8:6f:6d:51:07:b7:f1:fa:6b:cb:cd:c7:
71:1b:7e:eb:06:6b:f9:81:28:37:0d:96:85:69:56:
89:1a:63:a8:3e:33:3a:40:0b:1e:a0:8d:69:3f:87:
f7:53:bb:ec:d4:57:06:f8:6a:75:18:dc:e9:db:5c:
36:40:5f:44:9a:4a:54:e9:93:b3:ea:95:07:74:df:
ff:1b:db:38:24:ff:1c:78:08:bb:d0:2f:fd:67:45:
74:a0:9c:eb:c1:dd:90:e6:8c:ac:44:a8:aa:43:09:
c2:ff:36:8f:93:c3:d8:17:f7:e4:33:27:7b:2a:c5:
fd:cd:e5:2d:0f:19:2b:15:14:d6:8d:cc:a4:76:a0:
e6:de:7a:c7:e3:da:66:44:30:7d:1e:35:da:69:dd:
98:fd:86:6e:d2:a5:0a:cd:d2:8c:fc:da:e9:99:fb:
e4:d2:3b:3b:58:a9:4f:24:76:a4:d0:6f:fd:76:be:
ec:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A1:78:18:9F:6C:D1:0A:33:13:6B:76:E2:01:1A:E2:6F:26:E1:47
X509v3 Authority Key Identifier:
keyid:2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ec:0f:c6:d2:e5:33:f6:0f:4e:14:60:f9:5a:78:0f:ac:47:
65:e6:04:d3:27:6f:4b:a4:1d:37:06:3f:da:06:da:7b:c6:a2:
f2:7f:7e:d7:92:80:0d:e7:ef:6a:6f:96:27:3b:76:56:e9:03:
d9:4a:d6:0c:87:b2:5a:d5:33:d0:c0:d9:19:e1:c6:49:f6:65:
c2:13:78:59:30:43:f6:61:f9:17:5d:78:f4:b9:cf:f9:95:a8:
cf:31:31:55:db:d2:84:6e:36:11:d0:df:ce:3b:17:a5:e9:9b:
68:35:13:68:76:9a:b8:71:f9:d8:59:39:40:31:09:9e:26:cb:
2d:3b:4c:a8:77:5e:ca:27:43:5e:72:ec:63:26:df:2e:27:cb:
06:f5:b9:ef:ea:11:44:43:fc:7f:ac:f0:68:ec:dd:bc:c8:a8:
98:4d:6a:2e:bd:a3:06:0b:8d:55:c5:e1:76:28:c2:70:73:1f:
2a:b5:5c:15:0a:81:21:6e:4e:e2:44:80:07:0e:db:6f:3e:6b:
75:e9:d6:9b:9f:c3:a7:00:8f:ce:7e:62:62:8c:12:7a:f5:31:
a4:7f:85:5e:0c:c3:70:61:e3:3d:63:83:60:ff:19:0f:07:3c:
a0:ef:35:74:82:89:d8:47:c7:26:3c:1c:ec:37:0f:08:2c:d4:
fe:9c:67:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8rKdbeeYkdKHdZ0WWHkrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYWJmNTc1NGZmZTFhMWNmYjg5YjRmMmIwYmYxMDY1ODIz
YjEyY2YwHhcNMjYwMzI2MDcwMTI3WhcNMjYwMzI3MDcwMTI3WjAzMTEwLwYDVQQD
EygwYWExNzgxODlmNmNkMTBhMzMxMzZiNzZlMjAxMWFlMjZmMjZlMTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEoDiTCZ48+F1nkH/5EVRxVvqtHg
kowyue+k0eZ4sGL/8ZT5mj6CCTeIJs9yiYVwccQnUFGDcdBFFsSxNm83/9LIqk0p
WcyNVcbxobjIb21RB7fx+mvLzcdxG37rBmv5gSg3DZaFaVaJGmOoPjM6QAseoI1p
P4f3U7vs1FcG+Gp1GNzp21w2QF9EmkpU6ZOz6pUHdN//G9s4JP8ceAi70C/9Z0V0
oJzrwd2Q5oysRKiqQwnC/zaPk8PYF/fkMyd7KsX9zeUtDxkrFRTWjcykdqDm3nrH
49pmRDB9HjXaad2Y/YZu0qUKzdKM/Nrpmfvk0js7WKlPJHak0G/9dr7snwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqheBifbNEKMxNrduIBGuJvJuFHMB8GA1UdIwQY
MBaAFCyr9XVP/hoc+4m08rC/EGWCOxLPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEt2MWRVXy1HaHo3aWJUeXNMOFFaWUk3RXM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lNGI3ODktM2MwZi00YTNiLTgxNWYt
MDY5NzhmMThjNzM0LzEvTEt2MWRVXy1HaHo3aWJUeXNMOFFaWUk3RXM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9lNGI3ODktM2MwZi00YTNiLTgxNWYtMDY5NzhmMThjNzM0
LzEvTEt2MWRVXy1HaHo3aWJUeXNMOFFaWUk3RXM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+wPxtLl
M/YPThRg+Vp4D6xHZeYE0ydvS6QdNwY/2gbae8ai8n9+15KADefvam+WJzt2VukD
2UrWDIeyWtUz0MDZGeHGSfZlwhN4WTBD9mH5F1149LnP+ZWozzExVdvShG42EdDf
zjsXpembaDUTaHaauHH52Fk5QDEJnibLLTtMqHdeyidDXnLsYybfLifLBvW57+oR
REP8f6zwaOzdvMiomE1qLr2jBguNVcXhdijCcHMfKrVcFQqBIW5O4kSABw7bbz5r
denWm5/DpwCPzn5iYowSevUxpH+FXgzDcGHjPWODYP8ZDwc8oO81dIKJ2EfHJjwc
7DcPCCzU/pxnQQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:48:06 2026 by rpki-client