Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
File: LkJv6Qhstq8B85H_T2nACDZNbu0.mft (raw, json)
Hash identifier: th0CQGdKGlavOtQNdt1Z6s+fKYVFtUQJpF/qgiltZ6I=
Subject key identifier: D1:A2:41:EB:B2:B4:CC:2C:B8:93:54:44:CF:71:72:77:A9:41:2E:56
Authority key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
Certificate issuer: /CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Certificate serial: 01A0CDECCCF692293F2E51DAF23341629963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
Manifest number: 1A00
Signing time: Wed 23 Sep 2026 11:00:43 +0000
Manifest this update: Wed 23 Sep 2026 11:00:43 +0000
Manifest next update: Thu 24 Sep 2026 11:00:43 +0000
Files and hashes: 1: LkJv6Qhstq8B85H_T2nACDZNbu0.crl (hash: 5nsJRLvW4Y1RMyqej42BW969N4Z0g/P/2n6jbWA4s1g=)
2: l_v0toEM3yMRI49WDNWj-qHlYqk.roa (hash: uFfF5zaJ+lbxDFdCJItNBEsaSDghQGS/Cx4dVGLdX4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:cc:f6:92:29:3f:2e:51:da:f2:33:41:62:99:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Validity
Not Before: Sep 23 11:00:43 2026 GMT
Not After : Sep 24 11:00:43 2026 GMT
Subject: CN=d1a241ebb2b4cc2cb8935444cf717277a9412e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:71:d7:dd:53:88:f1:6c:6f:31:25:e2:a0:47:
59:2d:43:6b:3a:e7:f3:13:d1:29:01:02:d4:c4:71:
d7:0f:44:1f:eb:57:9f:30:f1:20:1b:1f:59:25:c3:
50:7b:54:e5:62:e7:12:9f:10:9c:a1:d8:d9:3e:08:
e9:8a:56:dd:50:ab:64:21:ca:f1:b1:72:bc:f9:c7:
af:f7:6d:1b:4f:50:37:44:40:88:4d:16:50:45:04:
dd:00:78:3a:6c:2e:51:91:1b:98:cf:bc:1b:73:01:
83:60:01:7e:1a:a6:c5:24:dc:75:76:e6:fc:78:75:
7b:0d:6f:71:74:cc:74:34:85:4a:25:3c:56:e0:62:
70:00:39:36:98:c6:5e:60:75:3c:49:fe:b6:3e:e9:
8c:b6:2f:02:26:cc:6a:d1:1e:3c:99:f0:21:70:7e:
79:8c:22:08:f2:f3:f5:fc:c6:90:e5:47:ff:bb:49:
1f:a3:fe:af:e0:00:d4:9e:af:ad:6a:3f:76:41:b8:
2d:f1:0d:53:42:bd:98:b5:97:84:6b:17:65:eb:5f:
39:d2:63:21:ef:c9:1d:1b:b1:63:dc:81:c7:6d:78:
4d:d0:74:8a:3d:69:5f:62:8d:c9:dc:c5:22:6e:ee:
80:cf:23:97:6a:d2:d5:61:dc:ea:d9:49:0e:c0:8d:
be:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A2:41:EB:B2:B4:CC:2C:B8:93:54:44:CF:71:72:77:A9:41:2E:56
X509v3 Authority Key Identifier:
keyid:2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b8:76:21:55:54:63:8e:e9:45:ae:72:31:3c:8f:d3:cf:2d:
9d:06:2c:8a:29:b2:ec:cf:bb:eb:d0:6d:ed:e4:d1:17:6e:26:
24:de:d2:75:d4:41:28:d9:2d:22:81:19:30:16:e0:10:25:1d:
3b:17:b8:d7:6c:21:3c:f4:13:53:2b:37:fa:e4:8a:db:c0:09:
b1:86:8e:0c:62:03:c2:61:24:b9:c5:47:8f:3f:50:64:69:e9:
1c:e9:c0:6d:bd:11:fd:3e:7e:bc:2c:ed:67:0e:55:86:23:fb:
1d:7f:05:79:20:89:e6:29:76:b1:e4:d6:c7:43:25:82:83:5f:
b2:93:ee:3a:b8:98:c5:f1:91:a7:2c:2b:31:2a:6a:52:40:c3:
e4:18:28:19:ea:a2:cb:2f:b9:b1:c6:fb:db:c4:97:af:32:2f:
cc:86:61:38:3d:7b:ef:43:81:af:a0:fd:e9:10:6d:0d:70:cb:
cc:8b:f7:0a:04:eb:85:df:ef:08:bf:e7:d4:55:85:17:ba:9d:
7b:63:5d:f1:1a:64:35:18:27:a7:ab:85:b0:2b:ad:36:1f:4c:
ad:ca:13:15:81:cf:d8:a8:ec:c4:33:e6:f8:02:0a:ba:1d:9f:
31:09:2d:bd:d9:88:99:db:4a:91:e5:25:1f:9c:b9:fd:15:70:
3e:11:77:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:51:28 2026 by rpki-client