Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
File: lkM1Vj2bb54-KN42jYWYi8FBNx4.mft (raw, json)
Hash identifier: KMWWnJ8TVSJ+Tdn63gv7lwfFx9I2+TRJT6Ypqkib5/s=
Subject key identifier: 41:48:85:53:4D:5E:5A:22:03:1F:0F:34:9F:11:13:4F:2B:EE:C3:9A
Authority key identifier: 96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
Certificate issuer: /CN=964335563d9b6f9e3e28de368d85988bc141371e
Certificate serial: 019F9323C28D5B3A20ACE96C4D6A3DD9B105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
Manifest number: 180F
Signing time: Fri 24 Jul 2026 08:00:21 +0000
Manifest this update: Fri 24 Jul 2026 08:00:21 +0000
Manifest next update: Sat 25 Jul 2026 08:00:21 +0000
Files and hashes: 1: 3j-9iaSKXJ2L7jlRSEs0qAlyRzk.roa (hash: kn2dNNNAcDT9/tnxgSN6E9lAiJiIXAqVGnn+Z6zefmM=)
2: WxK98FtTbTtBWK0NDqa7PLSHh-4.roa (hash: 6Do9u90Y5TD8a3hd4jqlXjVJP1K6MfYLEiK3okcKW40=)
3: lkM1Vj2bb54-KN42jYWYi8FBNx4.crl (hash: knRP2mcRVzVlRZXWxa7yGGimi1+GKUDURLt7HxL38Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:c2:8d:5b:3a:20:ac:e9:6c:4d:6a:3d:d9:b1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964335563d9b6f9e3e28de368d85988bc141371e
Validity
Not Before: Jul 24 08:00:21 2026 GMT
Not After : Jul 25 08:00:21 2026 GMT
Subject: CN=414885534d5e5a22031f0f349f11134f2beec39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b6:31:6c:b6:f5:0b:1b:55:7b:85:30:aa:af:
4a:be:d0:d8:03:80:b1:e3:04:81:7f:d0:18:ab:9e:
9c:28:92:64:71:f2:0d:d8:ec:2a:a8:a2:a7:53:06:
fb:33:bc:52:83:b0:01:d9:fe:7d:7e:07:d5:4b:e1:
6b:37:cd:ed:16:69:58:c3:e2:4d:8e:d3:6b:dc:b3:
21:bb:e6:91:75:2a:6e:a6:ba:02:df:5c:cd:01:5d:
5e:9d:13:86:80:ba:6c:dc:99:b6:93:03:42:d9:6b:
11:8e:1b:d2:a1:40:37:9a:27:6a:32:84:6d:09:18:
6b:63:85:76:8d:15:25:a9:cd:19:9a:07:d3:5d:ab:
88:a3:0f:6f:ea:14:4a:aa:0e:a0:72:d1:80:0f:29:
48:73:eb:4b:c6:88:74:1b:02:23:2b:88:44:60:47:
b7:fe:8b:a8:b6:15:ca:26:cc:c9:79:fb:8d:f4:ba:
35:df:a3:f0:43:cf:d9:c5:99:ee:b5:b2:94:81:0f:
1f:71:59:5b:2a:42:2b:38:23:80:93:0e:5e:18:69:
ca:25:55:02:fb:df:9d:fb:7b:8f:02:2f:40:4a:ad:
ca:91:3f:fb:ce:21:b1:20:aa:06:f7:83:c2:e0:63:
b1:c2:a7:00:7b:e1:5a:24:03:37:4c:01:fa:ac:97:
ca:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:48:85:53:4D:5E:5A:22:03:1F:0F:34:9F:11:13:4F:2B:EE:C3:9A
X509v3 Authority Key Identifier:
keyid:96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e3:9c:94:80:a1:4e:59:69:f9:2c:2a:bf:3b:b5:80:9e:00:
97:9c:c7:af:a3:b7:d9:07:00:44:44:8b:d3:41:b1:18:8a:95:
6d:14:8b:4d:e1:ee:10:cc:42:36:c2:15:20:9c:f8:60:6e:26:
39:0b:d6:d2:34:c6:c7:7e:fd:52:20:ff:1a:fc:13:6b:b9:14:
a7:43:5d:5d:c8:00:4d:59:af:d4:f4:dd:5c:69:44:3a:6f:cf:
26:ce:35:0d:29:f2:07:c8:8d:97:17:67:73:12:ec:96:65:15:
43:03:44:7b:3e:e5:0b:a3:27:32:e8:bc:39:f8:77:0a:7a:e8:
cd:1b:b2:6c:49:96:c2:70:3a:20:51:f3:83:4a:3e:51:6f:b4:
92:2f:9d:4d:09:73:b2:c0:d9:2f:f1:43:ac:a9:5f:cb:dc:05:
a2:f3:11:a5:fc:64:9d:6c:e4:7c:bb:ff:73:9c:d2:df:ef:48:
8d:88:5c:7e:f8:9d:4e:97:a5:9c:bb:0c:ab:7c:8f:7d:5a:a7:
b5:c4:2e:03:af:50:71:ef:cc:90:24:cc:07:75:fe:4f:1b:46:
51:fd:4b:8d:57:a5:1c:41:42:f2:ce:2d:16:9a:3a:bc:70:b1:
35:c2:4d:6d:49:71:d6:d5:8a:b3:58:9e:5b:60:a3:be:d5:2f:
eb:2d:25:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:54:36 2026 by rpki-client