Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
File: LkFFfaHqbHmxtr6lLGSnobXylkg.mft (raw, json)
Hash identifier: UoFQf/v6jlr/v5TAj0SqQKe/mHUhqhL8qOKQVi4cG+o=
Subject key identifier: EC:E3:A8:9C:78:A4:41:09:EC:DE:ED:AA:65:AC:6E:F6:CC:29:96:80
Authority key identifier: 2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
Certificate issuer: /CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Certificate serial: 019F946E35C65F2D1DE0FFE6FC2D39F6E8BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 14:01:18 +0000
Manifest this update: Fri 24 Jul 2026 14:01:18 +0000
Manifest next update: Sat 25 Jul 2026 14:01:18 +0000
Files and hashes: 1: 41BadyilkbxexUsN9_QCLE-lN9U.roa (hash: mKipKbsOuZUI5PBjgwAvlkxPu0eVLjnhl1jdP6GuFz8=)
2: LkFFfaHqbHmxtr6lLGSnobXylkg.crl (hash: AfvwsOiOpSLjTOeK1R+vbxMtr/ltzic90DEW5i2srKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6e:35:c6:5f:2d:1d:e0:ff:e6:fc:2d:39:f6:e8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Validity
Not Before: Jul 24 14:01:18 2026 GMT
Not After : Jul 25 14:01:18 2026 GMT
Subject: CN=ece3a89c78a44109ecdeedaa65ac6ef6cc299680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:85:66:92:4a:9a:d2:07:c2:63:e7:24:b0:f7:
88:dd:09:6e:4f:53:5b:d0:9a:47:70:ad:a9:86:5a:
77:16:1d:71:a2:34:50:a6:fc:14:6d:81:16:07:00:
60:f9:dc:e8:4e:72:db:44:77:79:a6:28:ba:63:02:
a8:e5:44:d4:88:a0:8f:6b:6c:42:a0:63:77:a8:b7:
a3:65:13:35:f5:34:52:76:ba:12:cc:a9:2b:54:d6:
51:ad:fe:24:c3:3f:05:96:7c:59:77:e8:95:4f:b7:
81:d9:48:48:95:93:9f:de:61:ad:41:3f:29:8c:6d:
2f:ed:0d:24:17:c7:37:11:65:86:e7:2b:83:08:28:
bb:8e:60:d7:9b:02:0b:e2:7f:c5:07:90:4b:3a:3d:
3d:27:6f:6b:3b:c9:80:db:92:88:85:1e:35:25:e8:
2c:48:2b:4f:f6:fc:2d:55:15:e7:10:20:03:a8:e0:
5d:f3:63:1d:5d:4f:b4:8b:44:66:18:df:13:3e:18:
64:7c:d7:7c:e1:68:8b:87:f2:b5:d8:13:f2:49:a0:
e7:e6:0c:99:51:b5:36:47:f1:61:13:ea:31:ef:1a:
f0:42:b0:58:30:3b:70:40:9d:f0:a2:f5:20:34:9e:
20:d6:e0:55:38:0c:32:91:f5:7f:ff:40:40:10:93:
e8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E3:A8:9C:78:A4:41:09:EC:DE:ED:AA:65:AC:6E:F6:CC:29:96:80
X509v3 Authority Key Identifier:
keyid:2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:6e:c4:f5:07:a3:68:60:a5:e0:49:72:96:96:0c:2f:9e:ff:
2b:37:4b:43:b8:93:e0:cb:3e:aa:a4:5f:1e:3f:a0:4b:99:68:
4a:31:a5:23:fb:30:35:30:be:e5:f6:c1:51:b2:06:07:0d:4f:
65:9a:be:b2:69:0c:37:09:e1:9e:31:7c:ab:42:0e:22:9d:47:
40:dd:69:e2:4b:7a:56:a7:51:ed:88:03:12:54:c6:87:d3:48:
24:ac:5f:05:22:a6:da:fc:18:23:05:0d:cc:91:53:6b:e7:2a:
70:06:82:1e:65:c7:14:b9:2c:60:9e:60:a3:2e:e9:b2:18:d8:
f6:a4:d3:a8:16:fe:f1:1b:a7:39:53:ff:33:e2:01:db:3a:9a:
e9:fd:10:67:a5:7c:aa:4b:4a:43:96:4a:71:6e:8c:6e:d4:f6:
2d:da:85:d5:48:8d:d0:42:a3:be:14:c0:a6:5e:ae:1b:54:f0:
09:4a:54:f1:5d:bb:c4:ea:e6:4f:77:6a:a4:88:d4:a0:e2:53:
a3:e7:64:fb:23:ff:73:e1:33:e0:48:8f:81:35:79:1b:a8:f9:
ae:2e:06:7a:9f:a0:86:d9:b8:87:87:8f:e9:91:c0:35:f0:af:
24:85:c9:96:d3:94:fa:a3:ba:12:d5:75:cd:fb:c6:4d:9e:1d:
a2:46:bc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:14:35 2026 by rpki-client