Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
File: LkFFfaHqbHmxtr6lLGSnobXylkg.mft (raw, json)
Hash identifier: xNYcJiZezoiQ1QVwM/20gha2uEjieCiRI2xpwY5FOao=
Subject key identifier: EF:FE:FF:A0:1A:E0:76:F4:76:AA:1E:89:C0:CE:96:F9:58:EA:B3:6E
Authority key identifier: 2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
Certificate issuer: /CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Certificate serial: 019D2695DEC6A3A88A6EB766CB6A0A5017D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 20:00:49 +0000
Manifest this update: Wed 25 Mar 2026 20:00:49 +0000
Manifest next update: Thu 26 Mar 2026 20:00:49 +0000
Files and hashes: 1: 41BadyilkbxexUsN9_QCLE-lN9U.roa (hash: mKipKbsOuZUI5PBjgwAvlkxPu0eVLjnhl1jdP6GuFz8=)
2: LkFFfaHqbHmxtr6lLGSnobXylkg.crl (hash: wtptsWTWY+fx2QR0fKY/Rwk5ZGf7Up/36nQwG6G/GOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:de:c6:a3:a8:8a:6e:b7:66:cb:6a:0a:50:17:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Validity
Not Before: Mar 25 20:00:49 2026 GMT
Not After : Mar 26 20:00:49 2026 GMT
Subject: CN=effeffa01ae076f476aa1e89c0ce96f958eab36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a2:a5:52:ed:ff:67:d3:29:77:95:2b:36:e3:
93:f1:5d:1e:06:b8:41:30:c6:28:5a:16:a3:29:2d:
d8:2c:dd:da:be:9f:83:bd:08:e5:25:e4:10:a2:07:
f3:a9:77:a8:7c:be:f2:08:9b:2a:88:49:82:bc:3d:
09:3a:57:47:90:a6:de:dd:ec:3f:2f:05:ca:9d:ce:
65:f6:df:ab:11:34:d7:95:26:4e:40:b0:e2:d9:b4:
dc:70:ce:e5:f2:d9:f1:81:52:cf:32:4a:d0:42:c3:
8a:1c:e2:ba:ba:75:e7:29:8f:b9:0d:ca:e7:0c:fb:
93:06:65:a2:29:6a:0b:ae:06:e9:74:99:54:38:75:
e0:e8:36:e1:ae:00:45:ef:48:78:b5:02:5f:69:fd:
72:3a:e9:83:bb:91:5d:22:df:47:10:58:e4:5e:99:
65:36:78:16:54:3c:00:30:0e:62:e6:fb:f5:55:bc:
96:87:82:a4:0e:eb:ea:3b:36:d0:b1:8e:f2:41:ab:
b9:69:38:7e:32:a5:94:09:dc:58:9f:c7:50:31:1b:
46:c7:b9:bc:88:97:ca:3a:5a:9d:66:37:4f:66:62:
8f:80:f8:bd:74:4a:c0:05:e2:30:9c:5f:57:24:64:
66:d0:0e:ab:87:1e:9a:2b:36:ff:0d:6f:20:79:e2:
6c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FE:FF:A0:1A:E0:76:F4:76:AA:1E:89:C0:CE:96:F9:58:EA:B3:6E
X509v3 Authority Key Identifier:
keyid:2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:65:90:fc:39:b7:1d:5c:b8:49:6b:fe:1d:97:7b:90:0a:0f:
08:65:15:67:fd:1c:db:78:ca:0c:94:32:90:15:c5:b3:0d:e7:
f6:4f:8c:e4:cb:59:c6:ef:3c:a0:17:c9:c6:f9:8f:6d:9a:ee:
2a:61:73:42:bd:c9:ef:6c:02:76:b7:c9:77:7d:9e:f0:ca:8e:
f6:cb:cd:54:00:32:07:ad:ab:5f:b1:f4:8f:ad:6b:06:bb:d2:
3e:00:81:9c:b8:62:33:3d:d4:9c:9c:62:f1:73:89:da:0e:f1:
52:a0:2a:02:37:22:de:79:80:1e:e8:d5:05:cd:b5:7e:6b:94:
92:d1:56:59:d0:0e:d1:f2:fb:2e:cd:ac:ee:b2:0d:88:09:15:
df:fc:8a:92:59:7c:c8:6f:b0:03:7b:33:e5:0e:96:ce:c3:b1:
fc:a6:ae:c3:f1:93:c9:52:97:ba:91:0f:24:05:e9:f8:63:5e:
3d:14:1d:90:65:34:e1:15:c4:22:b8:26:23:04:cb:ff:e7:74:
68:2f:2d:b9:13:a4:0d:67:24:1f:57:60:9b:90:71:ef:72:39:
84:d7:1c:3b:89:40:22:6c:b4:3b:ec:f1:1f:08:9f:fc:a4:e0:
12:81:a5:a5:2c:f3:5e:a4:98:9a:b8:09:28:48:a8:7c:ed:fe:
50:43:73:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:02 2026 by rpki-client