Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
File: LkJv6Qhstq8B85H_T2nACDZNbu0.mft (raw, json)
Hash identifier: ukM5IlOcafK3p0px1mLIhoj13xcMJ+ECqMhAAHx/SCc=
Subject key identifier: 18:5F:0C:03:69:18:E6:A3:AC:D1:63:D9:89:DB:65:23:D5:2C:74:5A
Authority key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
Certificate issuer: /CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Certificate serial: 01A1E028469FB05BC3373335585EA6F8937E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
Manifest number: 1A8E
Signing time: Sun 15 Nov 2026 17:01:38 +0000
Manifest this update: Sun 15 Nov 2026 17:01:38 +0000
Manifest next update: Mon 16 Nov 2026 17:01:38 +0000
Files and hashes: 1: LkJv6Qhstq8B85H_T2nACDZNbu0.crl (hash: Z1vTmvinqILrJotUcR4r4bu9Ksa7LR5bM8n2wT5mSwQ=)
2: l_v0toEM3yMRI49WDNWj-qHlYqk.roa (hash: uFfF5zaJ+lbxDFdCJItNBEsaSDghQGS/Cx4dVGLdX4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:28:46:9f:b0:5b:c3:37:33:35:58:5e:a6:f8:93:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Validity
Not Before: Nov 15 17:01:38 2026 GMT
Not After : Nov 16 17:01:38 2026 GMT
Subject: CN=185f0c036918e6a3acd163d989db6523d52c745a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:18:53:d7:d4:13:33:33:f6:8f:26:0c:95:68:
46:f1:65:dc:55:f6:6b:79:5c:0e:cf:46:45:bb:81:
82:85:d1:a8:32:7e:50:09:ba:9a:7d:f0:b8:23:53:
19:02:63:14:ec:4a:9e:ed:6a:de:fb:46:83:fe:68:
1c:bd:b9:fd:f4:85:ee:b4:b4:99:a1:2c:a1:4b:2a:
ce:c1:2a:f9:d0:7a:7d:85:0f:f3:a8:54:93:5e:9f:
5b:10:d2:30:8a:03:db:0e:48:7c:47:9d:7d:a3:97:
63:6c:e6:93:8c:82:aa:77:8d:9b:de:c4:37:bf:ec:
95:38:be:3f:1e:0f:61:a0:d0:fe:0e:b7:2c:c0:31:
a9:6b:41:7e:cc:a7:24:02:8c:85:c2:40:11:a3:98:
80:53:7f:57:6b:1e:8b:be:0a:a6:af:04:d7:2e:5b:
06:ee:d9:a1:64:03:05:53:4b:1b:e1:a5:6d:59:68:
6e:ad:11:a5:a5:49:4f:03:e9:c8:63:2e:bc:00:67:
93:41:b7:3c:91:d8:9c:d3:dd:70:3a:d4:70:41:3a:
ef:c3:2d:11:6a:04:be:c7:6e:cd:5b:ba:0d:65:aa:
b9:78:1f:c3:f8:2e:3d:e9:1f:2f:cc:d9:ec:91:42:
2e:6e:e1:5b:2f:b1:75:16:76:65:30:a5:93:11:e8:
1e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5F:0C:03:69:18:E6:A3:AC:D1:63:D9:89:DB:65:23:D5:2C:74:5A
X509v3 Authority Key Identifier:
keyid:2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:f0:50:9b:29:00:a5:ef:2e:b0:8c:1b:14:3e:c5:d5:9e:93:
a2:5b:d1:0e:e6:82:ea:4c:4d:af:76:3c:44:70:43:de:c5:4d:
98:d2:8b:bf:c4:f0:c9:c9:0f:83:3b:ab:5a:2d:9e:5a:18:09:
26:a9:8a:20:0f:ea:c3:d0:b5:a0:f7:ed:d6:e8:57:1d:80:90:
0a:98:23:eb:2b:7c:70:a2:8b:21:78:b7:e1:80:c8:c9:2b:fc:
ee:43:40:bf:43:4c:46:9a:28:b1:3a:09:87:c9:e0:f8:cd:7c:
ef:20:9f:61:69:b9:90:3c:69:85:e2:11:04:dd:ff:f7:90:d0:
5b:e0:08:10:93:a2:6d:48:16:d3:27:be:0c:ad:e3:1b:67:33:
7c:d1:eb:c7:b8:eb:e4:1f:b4:54:0a:4d:f6:b4:c5:64:eb:48:
5d:c2:97:6b:59:07:d2:bb:6e:88:4d:7f:51:86:f5:d0:e2:bb:
f9:52:ac:77:fd:10:7f:37:57:e5:94:bc:60:d5:1b:c0:85:f3:
95:98:6c:01:8a:2a:d2:0f:c3:ba:9c:4a:ad:68:16:85:a2:2f:
19:e7:2a:1c:97:81:3d:de:26:f4:d9:4a:f3:fe:d4:d1:9f:af:
26:f8:5e:4a:f1:0f:98:ab:b9:92:d1:ac:cd:f3:43:db:88:41:
35:3b:a5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:51:54 2026 by rpki-client