Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
File: lkM1Vj2bb54-KN42jYWYi8FBNx4.mft (raw, json)
Hash identifier: SIYSWMerhSfnxRhPynX5qF71cA0VVylGCBo1tYVJ7t8=
Subject key identifier: F7:9B:5D:57:98:62:C6:99:E1:2C:4B:60:D6:93:E7:75:B1:69:68:03
Authority key identifier: 96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
Certificate issuer: /CN=964335563d9b6f9e3e28de368d85988bc141371e
Certificate serial: 019E205A5E6EE83E4342678F028A3960835E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
Manifest number: 174F
Signing time: Wed 13 May 2026 08:00:53 +0000
Manifest this update: Wed 13 May 2026 08:00:53 +0000
Manifest next update: Thu 14 May 2026 08:00:53 +0000
Files and hashes: 1: 3j-9iaSKXJ2L7jlRSEs0qAlyRzk.roa (hash: kn2dNNNAcDT9/tnxgSN6E9lAiJiIXAqVGnn+Z6zefmM=)
2: WxK98FtTbTtBWK0NDqa7PLSHh-4.roa (hash: 6Do9u90Y5TD8a3hd4jqlXjVJP1K6MfYLEiK3okcKW40=)
3: lkM1Vj2bb54-KN42jYWYi8FBNx4.crl (hash: boN/kju/LBWxMfZagrNr0W+rl2BvTsDX8VXj+AJAL3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:5e:6e:e8:3e:43:42:67:8f:02:8a:39:60:83:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964335563d9b6f9e3e28de368d85988bc141371e
Validity
Not Before: May 13 08:00:53 2026 GMT
Not After : May 14 08:00:53 2026 GMT
Subject: CN=f79b5d579862c699e12c4b60d693e775b1696803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ca:cf:52:e1:d9:fb:55:ce:ed:03:5b:eb:79:
ab:fb:ee:bd:7a:e3:ff:4e:52:e9:64:96:94:c4:3d:
6a:63:f5:36:20:92:41:23:f4:4b:ae:d9:3c:b7:59:
a2:44:c1:8f:9b:39:62:98:8d:9d:fa:16:84:c3:b4:
31:3e:ba:aa:39:5e:04:79:5f:e1:d8:c2:54:22:3a:
18:51:a4:7f:60:38:f2:a2:0b:32:41:a4:ac:ee:c7:
01:e0:64:b6:c0:5e:42:28:72:b0:54:12:ac:fc:a6:
4d:4d:5f:c9:7a:60:e5:db:9d:f6:ef:89:4b:b8:96:
08:84:26:6e:ce:4a:67:eb:4e:ac:51:4d:16:e0:9a:
1b:e1:c4:45:c0:de:c4:25:73:94:88:c5:36:1b:63:
4e:42:02:0d:32:6b:c0:5c:d5:44:ec:58:50:85:d7:
fe:59:56:a1:91:d1:98:b7:0c:cc:cf:b2:e1:30:87:
ef:21:7d:1b:5a:89:14:9a:7b:c5:5e:93:0e:db:f7:
07:06:ca:c2:8a:82:2a:e4:e1:83:70:0a:54:18:bf:
20:16:6b:2a:2c:49:1c:cf:2f:64:6f:71:f8:80:c1:
cf:c9:44:f4:9b:99:47:d9:f0:29:0a:b9:a7:ea:c5:
23:20:df:05:2b:4b:83:a7:49:38:7a:61:e4:31:15:
d8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9B:5D:57:98:62:C6:99:E1:2C:4B:60:D6:93:E7:75:B1:69:68:03
X509v3 Authority Key Identifier:
keyid:96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3b:80:49:ba:a7:26:f5:af:34:01:0a:5e:29:f7:0f:d4:37:
80:10:85:02:bf:52:f0:ac:64:a5:19:7b:25:67:cc:4d:c5:73:
13:0f:65:af:d6:c2:3f:14:24:49:bf:9c:11:28:85:0e:0a:f0:
34:c4:08:4c:94:60:4d:3f:5d:98:15:d9:01:5b:46:95:ab:be:
45:3f:17:4e:ae:d1:dc:ec:ae:86:a2:40:75:f8:08:87:f0:d2:
a5:12:7a:62:26:d3:af:94:91:c8:e5:da:9f:a4:bc:cf:16:3b:
b5:2a:72:00:b4:c9:e3:e0:0e:bc:67:65:91:13:dd:76:6e:2d:
fe:fc:21:c6:6f:fd:2c:f4:10:da:16:52:f2:ce:d4:98:30:77:
5b:0f:24:86:b7:19:80:94:49:b0:cb:49:65:d9:bb:39:69:e8:
53:8a:6d:c3:f3:f5:9c:e3:91:ca:32:20:5d:5a:67:fd:76:1a:
53:15:57:06:4a:a9:42:73:e2:71:07:55:59:9a:c9:73:90:b9:
b1:13:17:02:c0:45:ec:d5:b6:1c:33:a2:ed:09:7a:64:e4:ad:
49:13:c1:ff:cc:60:4d:93:02:b0:3f:29:2a:2e:f1:97:ec:71:
06:2b:29:6c:30:5b:ac:e9:05:c5:61:d8:10:c4:f8:b2:df:cf:
90:9c:18:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:34:36 2026 by rpki-client