Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
File: lKOAb3QqvNXbEgT1KPTKbd6x6do.mft (raw, json)
Hash identifier: 1KYQey1gsgHI5f/Xgj8EtchsF15nw478H5ZqPq4Ai2A=
Subject key identifier: 48:6A:B1:44:C9:12:F5:58:5D:E1:83:36:BE:1B:FF:FF:F3:22:53:D3
Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Certificate serial: 019E1D91278D24E7818BFED5752AC6477BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
Manifest number: 104B
Signing time: Tue 12 May 2026 19:01:52 +0000
Manifest this update: Tue 12 May 2026 19:01:52 +0000
Manifest next update: Wed 13 May 2026 19:01:52 +0000
Files and hashes: 1: lKOAb3QqvNXbEgT1KPTKbd6x6do.crl (hash: tIf0r1wrabh6NEU31wFSGLX4FNGQE/n4ftIHsMobmrs=)
2: yA5GH7gLA1HVBnxPLthwZlHoljY.roa (hash: ZrNoguXr/VbPxJyma5te3bY/LH0TrJlliompzvOOHkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:27:8d:24:e7:81:8b:fe:d5:75:2a:c6:47:7b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Validity
Not Before: May 12 19:01:52 2026 GMT
Not After : May 13 19:01:52 2026 GMT
Subject: CN=486ab144c912f5585de18336be1bfffff32253d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:2e:f7:8a:5b:33:21:dd:c4:aa:3e:46:f2:
d4:52:36:71:00:f0:e4:c2:01:56:36:a0:3c:f6:5d:
38:ec:96:cd:e9:cd:39:5c:b9:5b:29:4d:4c:8b:ff:
20:15:7b:33:5b:13:75:65:cc:6b:6b:7c:63:70:b6:
78:85:e2:86:ed:3a:f3:ad:45:fc:f8:9d:6f:fa:16:
a8:ac:d0:8a:76:b3:9e:a1:91:6d:34:0a:b7:05:56:
f0:8d:2e:68:97:61:11:1d:68:f4:c3:d5:de:f8:05:
2a:8d:3a:84:6c:6c:68:50:bf:bb:05:fd:67:b9:5e:
28:d0:8d:3c:fa:a1:25:84:92:7a:69:73:78:56:8a:
96:51:3e:cf:d3:c5:36:0d:3b:80:ca:59:7f:80:b9:
3b:20:35:80:3d:9a:6f:bb:47:a3:2e:21:44:2a:62:
12:b2:bf:a0:d2:40:49:1f:51:fd:ea:b8:cb:ab:fe:
c7:e6:11:4c:bb:d9:ad:e7:35:46:b7:9e:63:58:a3:
08:c8:8d:b7:23:6e:ef:7c:7f:0b:2f:1d:91:1a:c6:
f8:79:92:1d:4f:64:e0:9f:4e:83:41:58:04:60:cd:
c1:e9:0a:c4:37:f4:59:3d:b3:40:1c:73:09:61:f0:
28:f0:01:be:d5:27:66:be:02:90:43:5c:6e:cd:48:
ce:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6A:B1:44:C9:12:F5:58:5D:E1:83:36:BE:1B:FF:FF:F3:22:53:D3
X509v3 Authority Key Identifier:
keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:31:30:f9:4e:3b:0c:81:8e:f3:ec:97:9a:cd:72:d3:f8:5c:
bd:56:c4:71:ea:42:87:2c:67:ec:41:91:61:33:ba:63:b6:7a:
45:e8:06:86:08:42:e5:1e:a1:e3:0e:c2:de:27:62:ab:dd:cd:
14:30:ab:dd:d4:ed:7c:fd:85:f3:6b:59:18:1f:c9:81:f8:7f:
75:ac:7a:3f:c5:eb:3f:5e:8b:cc:3d:de:99:7f:03:78:03:f9:
1d:3e:44:34:57:ec:4a:9a:1b:0c:fc:ef:f4:24:83:d7:0c:b9:
ff:4e:aa:f0:ac:b4:c7:29:31:a9:e5:e2:0e:f4:b2:bb:9a:98:
f9:b8:27:27:fa:e1:e2:a7:c4:39:88:d2:05:15:28:07:5e:fa:
38:a9:0b:7b:66:e2:1f:5c:fb:38:2e:a5:49:ea:05:72:10:76:
9b:7f:b4:5b:8e:77:f6:37:10:7a:94:54:59:de:48:f8:96:b0:
c9:00:06:28:76:c6:67:5e:cd:d7:44:d5:37:c5:a8:66:90:b2:
29:72:69:1c:f1:0e:f3:69:2f:a5:06:c6:f4:d3:a0:82:a0:c6:
db:1e:87:ee:19:42:9b:64:9a:1a:a2:67:fa:66:f2:64:4a:36:
e2:b6:d8:98:4e:3e:b8:cd:51:26:88:a5:bc:69:58:82:8e:97:
a0:18:b8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:44:09 2026 by rpki-client