Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.mft
File: 1LkIqddLShCqH0wOiu1qhKO3kAU.mft (raw, json)
Hash identifier: lTUeMH1Dz8IVo1x5fy0JPUinDGFkqv4Vzd8tN7rNQ68=
Subject key identifier: 34:57:76:AB:BA:FE:8B:38:54:8B:D2:B9:73:E7:55:2D:D9:9B:86:77
Authority key identifier: D4:B9:08:A9:D7:4B:4A:10:AA:1F:4C:0E:8A:ED:6A:84:A3:B7:90:05
Certificate issuer: /CN=d4b908a9d74b4a10aa1f4c0e8aed6a84a3b79005
Certificate serial: 019E1D59CC4C877311519D1F5D0A9B03AB3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LkIqddLShCqH0wOiu1qhKO3kAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.mft
Manifest number: 98
Signing time: Tue 12 May 2026 18:01:24 +0000
Manifest this update: Tue 12 May 2026 18:01:24 +0000
Manifest next update: Wed 13 May 2026 18:01:24 +0000
Files and hashes: 1: 1LkIqddLShCqH0wOiu1qhKO3kAU.crl (hash: L5OcSLsRXwtpNPJzE+2e/ypgdwMElQt9C1NFrLQscek=)
2: FEgeYcFLPGsn_DF04vy60HLH3eU.roa (hash: mvXQQ+TxCYuDnGKabkqj9L+d+yyQb/h/Oz4Zigg1PAE=)
3: oMAU4cDFxFwhA1NEpG0dXZO6zCQ.asa (hash: WY020cbiNFXtPn2WDWywnrSUq7C1vkRuGv5i2lQyac4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LkIqddLShCqH0wOiu1qhKO3kAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:cc:4c:87:73:11:51:9d:1f:5d:0a:9b:03:ab:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b908a9d74b4a10aa1f4c0e8aed6a84a3b79005
Validity
Not Before: May 12 18:01:24 2026 GMT
Not After : May 13 18:01:24 2026 GMT
Subject: CN=345776abbafe8b38548bd2b973e7552dd99b8677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:7f:98:cc:c6:44:98:6c:7c:42:86:5c:81:
9b:e5:85:d6:be:66:e0:de:ba:01:dd:f7:e4:c1:55:
2f:a8:2e:f8:2a:18:0d:11:ba:76:9c:1f:1b:e8:98:
47:6f:63:7b:01:c1:f5:fe:80:90:7e:85:92:e3:67:
2b:b8:3d:fa:aa:89:0f:7f:2f:ac:6d:07:7a:c0:5d:
33:9c:8d:76:2f:7c:a9:bb:7f:18:79:09:bd:12:9f:
38:4c:43:8b:67:a7:51:19:6b:33:4a:a8:6a:05:f7:
96:4d:94:cc:18:e6:be:d2:ff:de:f8:44:c0:35:92:
ce:02:0e:20:f4:2f:1f:c8:a5:8b:a2:84:99:1a:ca:
09:6e:89:9f:25:aa:be:1f:95:7e:8b:a0:a5:4e:e2:
19:46:5b:79:4c:50:e2:6c:a3:62:05:a1:03:fa:7e:
83:7f:ea:28:ab:45:3a:d3:03:e9:9d:d2:90:8e:88:
4a:e0:33:6a:ec:27:48:b9:e7:b6:07:26:f4:64:d7:
02:6d:7c:9f:04:a9:e1:35:e1:d8:7e:91:b6:15:97:
bc:05:a6:97:7d:dc:f6:e9:64:9a:d7:bf:87:ce:cb:
a4:a7:e0:9a:54:d8:0b:7d:a1:9f:01:b2:ac:b0:53:
ea:fd:ff:3b:20:e0:d6:30:24:68:3b:7c:ec:f1:cb:
6b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:57:76:AB:BA:FE:8B:38:54:8B:D2:B9:73:E7:55:2D:D9:9B:86:77
X509v3 Authority Key Identifier:
keyid:D4:B9:08:A9:D7:4B:4A:10:AA:1F:4C:0E:8A:ED:6A:84:A3:B7:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LkIqddLShCqH0wOiu1qhKO3kAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/98e249-797a-48df-a69a-1275efb8b055/1/1LkIqddLShCqH0wOiu1qhKO3kAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4b:3f:be:c0:f9:aa:9c:b8:9c:d3:f8:0f:a3:c2:85:2d:d0:
63:0a:e3:79:44:7d:7d:9d:49:81:31:57:f9:a2:7a:ec:0b:8c:
d9:8e:23:bf:09:bb:2a:e5:9d:1f:00:bc:31:58:a7:0f:58:51:
2a:18:7a:b7:04:5c:7c:ba:38:59:17:74:5c:89:1e:6c:29:03:
71:ac:d3:39:02:d4:89:ed:22:07:8c:2c:ee:e3:73:ed:65:20:
8b:ad:e8:cd:24:08:b4:c5:71:2f:38:d5:cf:14:ca:0d:bf:93:
dd:00:08:10:f9:91:6d:47:49:89:fe:3a:75:bf:3b:6f:1f:02:
bc:99:41:43:fa:b5:2d:59:45:08:57:23:95:ea:33:f6:8d:be:
3f:b8:9d:65:b6:f8:76:5a:1c:9f:3d:a1:3c:47:48:7c:b3:6b:
53:02:9a:a5:28:bf:8c:cd:1b:66:26:0c:2a:0e:f0:1a:09:5b:
27:c8:5e:bd:e1:d7:16:94:bc:0a:b9:66:60:94:f5:91:98:3e:
44:73:20:c8:7a:7b:c7:4d:fb:57:d1:80:77:47:91:54:c6:10:
58:fb:7b:46:3f:6c:7a:61:21:2c:f0:8c:f6:96:00:21:0e:e2:
11:5f:b0:44:35:c9:ee:f4:95:d0:98:06:07:95:22:3d:70:c0:
01:75:50:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:30 2026 by rpki-client