Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
File: LkWQWSMqS7ky9j-w37ZUk-ucgng.mft (raw, json)
Hash identifier: Jo03j65I23JpL4+zxZmIytDojceUBb5kwxg4O/ghIBc=
Subject key identifier: 8C:88:97:53:EB:9D:EA:66:01:82:84:BD:8C:62:0E:CC:2B:BD:3A:2F
Authority key identifier: 2E:45:90:59:23:2A:4B:B9:32:F6:3F:B0:DF:B6:54:93:EB:9C:82:78
Certificate issuer: /CN=2e459059232a4bb932f63fb0dfb65493eb9c8278
Certificate serial: 019D27042ADB0E7A694F4EC67682A1FAC776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
Manifest number: 1815
Signing time: Wed 25 Mar 2026 22:01:17 +0000
Manifest this update: Wed 25 Mar 2026 22:01:17 +0000
Manifest next update: Thu 26 Mar 2026 22:01:17 +0000
Files and hashes: 1: LkWQWSMqS7ky9j-w37ZUk-ucgng.crl (hash: flBF2/uEn0Li68xvnY7xMyoAffdn87/8wQYyRB7p1xI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:2a:db:0e:7a:69:4f:4e:c6:76:82:a1:fa:c7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e459059232a4bb932f63fb0dfb65493eb9c8278
Validity
Not Before: Mar 25 22:01:17 2026 GMT
Not After : Mar 26 22:01:17 2026 GMT
Subject: CN=8c889753eb9dea66018284bd8c620ecc2bbd3a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:b1:76:65:be:59:59:4c:f3:9f:a3:8e:b5:
80:0c:bb:85:cc:3e:bb:c1:78:41:aa:78:92:2a:a4:
b0:f1:e4:f3:14:dd:1f:36:55:c3:54:ee:2e:f4:ef:
86:33:15:af:8a:19:96:4a:11:70:9e:58:1f:51:7c:
a0:27:cc:df:78:92:c3:9c:ea:5b:92:86:ea:ea:62:
9b:65:6f:c6:e7:4f:25:4e:b7:42:fe:d0:24:7e:b6:
03:ce:2b:38:0c:56:e8:32:9b:5f:15:74:a7:67:15:
af:28:61:81:10:04:7e:89:2f:20:c4:e1:e0:6e:9b:
07:f5:64:a6:b4:58:5d:7a:c9:45:10:74:57:ba:fb:
ba:19:f3:7b:9a:0e:2f:6a:df:dc:76:e3:4b:63:a4:
6f:7b:4d:ff:ec:b3:ee:77:6a:31:c4:20:34:80:e6:
e2:8c:fe:aa:29:31:09:11:af:ed:fc:01:d7:82:72:
cb:3d:bb:18:81:4d:d7:10:2a:93:58:ca:1a:49:87:
f2:0a:0a:12:cd:ca:a8:0b:6f:b6:df:87:55:f2:53:
18:e7:21:72:2c:0e:37:21:19:87:48:63:df:13:f2:
64:50:c9:11:c6:ab:d8:6b:19:73:2a:fc:79:f3:62:
af:02:4e:9c:41:61:8a:60:47:4a:2c:31:bb:b8:6f:
3d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:88:97:53:EB:9D:EA:66:01:82:84:BD:8C:62:0E:CC:2B:BD:3A:2F
X509v3 Authority Key Identifier:
keyid:2E:45:90:59:23:2A:4B:B9:32:F6:3F:B0:DF:B6:54:93:EB:9C:82:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b9:e5:63:e6:28:88:a8:5b:6c:21:f9:8f:9d:4a:c6:bf:0c:
5a:6e:fd:39:24:cb:b8:0d:37:e1:a4:f4:27:36:2e:98:9b:34:
4c:03:ab:fc:0a:e3:dd:8b:a6:78:e6:23:22:01:f3:1e:66:d2:
af:b7:27:96:68:87:e6:a1:a0:26:38:b1:3c:96:bf:0c:3b:be:
21:0e:45:72:e1:47:ba:75:c7:ba:64:95:d8:2c:da:70:77:1a:
2c:8c:16:58:f6:5a:8a:e1:52:d8:e7:09:32:a6:e0:33:c0:6a:
75:63:d6:29:1e:63:07:bb:d3:f9:ba:42:fd:29:77:fe:1d:75:
db:57:8b:79:d5:70:fc:95:62:55:72:23:95:5e:da:16:a1:6e:
20:d3:b8:2d:04:4b:79:60:0d:ee:c0:8d:6b:d9:bc:b6:f3:ce:
4e:ca:f4:f6:f1:8c:db:0a:1d:02:e4:a8:a4:c9:f9:49:09:dd:
16:ce:f4:99:9c:5a:4a:0e:5c:b2:a8:ab:c5:2d:f1:29:d6:26:
45:4a:52:e1:c5:f1:64:7a:fd:54:6a:63:e0:56:8f:c2:6d:c1:
31:42:18:03:1a:c8:43:34:6e:af:bf:b5:cd:ea:8d:12:0f:20:
84:34:94:d9:01:04:ac:94:f7:15:47:fa:b2:69:b6:84:e4:cb:
7c:cb:6c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:30 2026 by rpki-client