
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft
File: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft (raw, json)
Hash identifier: q4C/w1IlN+RSDYvSXZzyhK895OS6tvS2KH67G90JFKM=
Subject key identifier: E0:31:29:B2:F9:4D:73:7A:9A:82:45:45:65:AB:26:3E:EE:35:45:DC
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 019D26CD944C1B4C573E2F3C41414E9F7C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft
Manifest number: 1113
Signing time: Wed 25 Mar 2026 21:01:40 +0000
Manifest this update: Wed 25 Mar 2026 21:01:40 +0000
Manifest next update: Thu 26 Mar 2026 21:01:40 +0000
Files and hashes: 1: 0T1AgadQnTT1ndiweRyvS_vkm-A.roa (hash: /3Ju2hidnDzh8I33GDIaLYQdRHbtjqqOqVBYvQZmXDw=)
2: 1-PeUZDh2-1Afu1QRFV_yHzYhPCM.roa (hash: OuunDL6LgvQ6D8lmFD9dFkeAYcQl23IGkOT49tokdT4=)
3: 3JYzRFMomy3SIlmvc60lTNqVY2w.roa (hash: u90fZWL82/Hup0ed0gRl+iG6TY3ZCd/LRMwj8fnJF0E=)
4: ArhgU7rp7FQT9A4LoyMGhcr3cLs.roa (hash: oHGGq9BCjwsGbigK1i0tvnkd8z9zUxF68PL08Pmocf8=)
5: Be3WyMsg4Z1uGznIaamQbZpb7RU.roa (hash: tleesENUxphJmxbIc0LjFcojfwFjurtbi0voCnAJsFM=)
6: CIWFwZHpllyhItc6ZafwS9V0Jvw.roa (hash: FLaHSv17cLAfaJ7PpG0zmIipTskF+c0L1m1jMEvYS7o=)
7: J1FSzAyYltrbXWRp1hQ6ae8Jwz4.roa (hash: PrA2PJs5TSn3H+asdA2g/RA7lWRRSyMMok+HJEOvi0U=)
8: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl (hash: sKDZWC3fprNBpcPAr/rJP898Hk5+YYw5RqI1Go+c7Fk=)
9: O5b_7tKwlPMatzVkYYKBgBMnfM8.roa (hash: 260wtgrIyMYyB5Lq3vWLFsUlojYNN6+upJ5BFAmQs2c=)
10: PRDpqr__phj4tP6vnFDWrcpfKxA.roa (hash: uHPAo/HsN4Jrrpq/omD/PHKhS8n8qFVXJSt+wnrhtig=)
11: SH-dZUoP-4wqp-OfFzRIcmNOCkw.roa (hash: ToWHKGjEIsq+7lwa0nIU+umA7zL6SRVtFJSLvV3VgFo=)
12: Tm_OIsXDaO190gkMynE2KF1a_Lg.roa (hash: wWOhNkWAvhE/1NrGHUdttjXxcj8mx9lhL8rWBqR0cP4=)
13: XM6w5HowZWBtpHPnnj9Mwr-w-qw.roa (hash: sO/zxb0InsWF34Hr/VTHqeD4EmRo9FGLqjvxwwn51/c=)
14: Y5g5oBOGc1untW-b8R0nkKOlMYM.roa (hash: zoXYFGWu10XAJabbTcHy0gp5U0/ZFRaMgSjLnS5OevA=)
15: e17RwhgnfhbbPqBDUmotA7NGqF0.roa (hash: 8UAIiRosHyt54pppcCRrXWyOAjKor7ewGANqepos+1c=)
16: eFg69EJOf-kPIJa-UZ4VA5X44DY.roa (hash: taVC9yah86Lzo3bSt+z850n7YnEiqp0UW4LWcp/iA5I=)
17: gTIIxrJJD-NoTdqMNJJLRMS0lQs.roa (hash: 0rFeNQFoSCuvCIBm913ksBYysYgLDykpUQhP0c/QksE=)
18: ifZRe-uWcqKwNo_M2vAzvpT9OUU.roa (hash: s3kSZnJOaNBcLJk6I6FfrLp2Zy1y2JcndjzephM3GAA=)
19: ybGOVfya0JJH14IWQC-d-Y3nVIw.roa (hash: t0pVqgHknRDwOdfYkcVxATIE3U9MoB5xTK9HaX4a6b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:94:4c:1b:4c:57:3e:2f:3c:41:41:4e:9f:7c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Mar 25 21:01:40 2026 GMT
Not After : Mar 26 21:01:40 2026 GMT
Subject: CN=e03129b2f94d737a9a82454565ab263eee3545dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d7:3b:f7:98:69:a4:98:eb:30:34:f3:d1:9b:
36:e1:79:d4:0a:3b:c6:5d:de:18:2f:61:97:49:a0:
ad:9e:b2:2d:34:14:46:e1:f3:f6:20:4a:ca:b9:c0:
ce:af:65:22:1a:12:df:df:6e:6d:13:55:98:64:19:
79:bb:19:65:f3:90:2e:4f:50:3f:c8:11:74:1c:ec:
b9:9f:57:b7:cd:5e:eb:61:65:d9:81:18:cd:73:c6:
90:77:aa:15:e5:62:3e:b2:42:69:cf:04:b7:60:55:
71:b6:3c:72:31:3e:0a:a9:92:2d:2f:c8:84:f3:7b:
ca:e0:ce:93:c8:43:56:ba:20:84:bc:fd:93:13:61:
4e:4f:0e:af:b6:54:7a:de:89:90:50:52:ee:e6:7d:
af:a0:cf:98:05:89:ab:e4:f5:3e:f3:96:7d:80:9d:
be:76:2f:18:4e:9b:a1:a7:1c:70:e5:19:3c:c0:db:
52:40:62:29:df:8b:a7:8a:85:55:96:0f:76:89:37:
4f:3b:0c:e3:20:23:89:30:7b:73:f8:e5:33:a2:ae:
98:65:c2:c8:e7:bc:d8:27:56:37:c4:d1:20:a0:ca:
c0:b5:15:42:d1:cc:e2:33:0b:d9:c4:a2:f4:2b:77:
39:70:b4:59:3b:75:af:f7:a0:10:b7:27:9a:4e:98:
3f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:31:29:B2:F9:4D:73:7A:9A:82:45:45:65:AB:26:3E:EE:35:45:DC
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a5:1f:c8:ba:73:82:05:c3:8c:ce:04:3f:9b:44:6e:86:dd:
53:ab:17:7d:3e:f4:85:6a:91:c0:54:f4:f2:74:7a:82:24:43:
34:62:58:76:3e:8e:29:f3:78:6b:d0:1f:0e:c8:5b:bb:2c:00:
6d:fc:3f:71:45:48:70:9e:cf:79:67:2e:91:ca:9e:3d:7b:1f:
ee:ff:f3:32:bf:5f:76:62:9f:13:23:aa:5f:a9:12:c1:22:71:
cc:df:e6:cd:d4:87:6f:40:b6:ce:ba:5b:22:57:23:b5:fc:e7:
4f:a3:7d:ab:c2:0d:0e:2e:99:4a:3b:83:e6:47:85:99:d5:27:
e3:f3:2c:2d:08:de:96:5f:9f:9f:33:d2:fb:79:14:66:5b:ec:
e8:da:5c:3d:51:12:18:f9:a6:ab:bd:45:a9:68:1f:0b:4b:ca:
c3:14:ee:41:10:02:2f:34:5e:0e:56:07:6f:6b:fe:65:a0:1a:
6f:08:b5:98:97:1c:59:3f:39:3c:f5:42:2e:8f:92:79:6c:6f:
3c:84:53:98:a0:b5:41:37:3e:3c:96:91:89:61:d5:e5:df:2b:
a5:14:25:5d:d1:ba:1f:5e:42:60:ab:f6:28:0f:e6:af:ed:2a:
78:58:7a:23:75:6d:3e:4d:96:c1:28:8a:c7:0a:0f:bd:f8:9e:
cd:c4:ba:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:43:25 2026 by rpki-client