Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
File: LkFFfaHqbHmxtr6lLGSnobXylkg.mft (raw, json)
Hash identifier: vhud/AxsA0+ftvoUX8eZi1Qh+hEiPjTWuaqjX80/70I=
Subject key identifier: 0F:05:2A:E8:7D:9C:77:07:A3:E0:98:32:B4:2F:A9:CA:BB:E5:E4:93
Authority key identifier: 2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
Certificate issuer: /CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Certificate serial: 019E1FB55B005D3C5AA570C1133BA49D8A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 05:00:39 +0000
Manifest this update: Wed 13 May 2026 05:00:39 +0000
Manifest next update: Thu 14 May 2026 05:00:39 +0000
Files and hashes: 1: 41BadyilkbxexUsN9_QCLE-lN9U.roa (hash: mKipKbsOuZUI5PBjgwAvlkxPu0eVLjnhl1jdP6GuFz8=)
2: LkFFfaHqbHmxtr6lLGSnobXylkg.crl (hash: OlQqZeOuHTh/9CitESupdGktWTK80bombtqXKKZx27I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:5b:00:5d:3c:5a:a5:70:c1:13:3b:a4:9d:8a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Validity
Not Before: May 13 05:00:39 2026 GMT
Not After : May 14 05:00:39 2026 GMT
Subject: CN=0f052ae87d9c7707a3e09832b42fa9cabbe5e493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:18:b3:fc:0c:31:28:ae:b3:af:b2:81:e9:
fb:d1:6a:74:84:dd:62:54:34:fd:9a:01:4f:3e:da:
e6:e9:a2:72:bf:f2:7b:d5:3f:49:32:35:0e:3d:6d:
ca:67:ae:eb:8a:b0:65:e7:31:64:25:96:f7:8e:dc:
b6:21:f6:2f:76:7c:e5:23:6a:d4:b0:bb:31:5e:db:
e2:8e:96:f0:c1:e0:20:97:ee:1e:11:8d:fe:24:0b:
22:96:ca:92:e2:07:67:41:18:83:ee:cf:c6:00:f8:
29:e1:db:e0:3c:c0:0d:3a:eb:ef:58:0e:f8:79:3c:
21:15:11:7e:e6:42:5b:a5:28:3a:57:7d:b2:33:91:
70:c7:b3:df:fc:f5:86:71:6f:c6:28:95:e4:09:06:
48:bb:58:ba:81:ba:d1:74:13:bb:ec:a4:f0:f2:1b:
78:06:40:8b:e5:7d:3d:5e:4a:4b:30:5f:73:c6:9e:
9c:0c:71:89:97:58:f2:9e:0b:99:75:6a:ab:07:3a:
b2:d0:4a:cb:00:24:34:83:b6:2c:6b:8b:5f:d2:ae:
40:66:13:7c:a6:fb:f6:e4:21:9d:0e:12:a2:b2:0a:
9a:77:10:89:d6:bc:de:a9:a2:8b:02:3d:28:fd:57:
e3:84:19:40:d1:b3:76:50:ef:39:f1:62:d3:a2:22:
03:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:05:2A:E8:7D:9C:77:07:A3:E0:98:32:B4:2F:A9:CA:BB:E5:E4:93
X509v3 Authority Key Identifier:
keyid:2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:85:6a:b2:9e:b2:fa:6a:c6:92:ee:bc:22:b8:91:52:2c:49:
65:7a:da:28:f6:0b:3c:98:4d:b0:a8:e9:28:c9:6c:91:ee:3c:
aa:3e:de:16:6b:8b:96:4a:72:b0:9a:fb:99:9c:d0:c6:3d:58:
3e:02:55:8f:49:87:5f:3f:56:6d:7d:57:79:a2:45:6e:0e:87:
f9:2a:f7:63:14:bc:3f:ea:c3:88:45:8a:bc:08:40:47:a3:30:
81:b7:c7:65:74:66:02:b9:41:23:7e:ae:c3:81:e8:9b:a2:18:
f2:cc:63:22:a9:42:5b:6d:96:f9:31:1a:5e:00:ac:5f:d1:54:
ad:d7:35:94:4e:00:9f:c5:8c:5d:2c:f0:36:11:8e:98:ca:e2:
ee:64:e6:a3:8c:a0:b3:f1:9e:59:3a:2c:8f:77:7d:85:59:19:
f0:6c:1e:30:81:cd:23:b0:5b:78:b1:6b:48:0c:1b:83:da:a7:
23:6b:6c:fd:5e:94:4b:7b:69:cb:89:3f:c2:17:a8:c9:a6:a0:
77:43:4b:43:28:f1:b8:ed:4f:45:9c:ff:94:47:87:df:64:4d:
77:f7:a2:b5:b8:0b:0e:8f:33:90:ae:dc:61:47:1e:d5:12:76:
f7:57:6b:79:f3:7e:97:22:34:14:a9:58:a9:13:c7:5f:00:64:
8d:6b:dc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:17:32 2026 by rpki-client