Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
File: LkJv6Qhstq8B85H_T2nACDZNbu0.mft (raw, json)
Hash identifier: hXnuMdVsCHsEktSr9j8dLO6KUXR5M5nWI8dm2VEsWnk=
Subject key identifier: 79:5C:25:BF:4E:C0:7A:82:C1:22:EC:D7:DB:F0:76:37:A8:50:3A:76
Authority key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
Certificate issuer: /CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Certificate serial: 019F91355378D41D2D1113A18013B7556C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
Manifest number: 195C
Signing time: Thu 23 Jul 2026 23:00:18 +0000
Manifest this update: Thu 23 Jul 2026 23:00:18 +0000
Manifest next update: Fri 24 Jul 2026 23:00:18 +0000
Files and hashes: 1: LkJv6Qhstq8B85H_T2nACDZNbu0.crl (hash: tFlG0l8n7SLmc23bHE8BLyaGQKqH7HclDsGYmnTLNh4=)
2: l_v0toEM3yMRI49WDNWj-qHlYqk.roa (hash: uFfF5zaJ+lbxDFdCJItNBEsaSDghQGS/Cx4dVGLdX4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:53:78:d4:1d:2d:11:13:a1:80:13:b7:55:6c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Validity
Not Before: Jul 23 23:00:18 2026 GMT
Not After : Jul 24 23:00:18 2026 GMT
Subject: CN=795c25bf4ec07a82c122ecd7dbf07637a8503a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b6:38:5e:07:c2:b0:46:cc:ba:33:af:0c:e6:
9f:45:5d:69:dd:96:0c:1f:43:b7:23:b4:4a:21:f9:
22:b1:12:bb:e3:20:a7:6b:8a:74:6e:8f:ed:d6:e0:
98:cb:0a:83:59:e9:d0:c8:88:e6:7a:bd:29:a6:22:
c3:dd:e9:a2:ae:2e:d3:51:fe:b4:5a:1f:05:32:5a:
40:0a:33:4b:93:cf:4e:16:c6:cf:d4:9e:ba:de:e9:
d7:f6:0b:1a:7b:52:23:cb:77:23:1d:34:c5:fc:0a:
11:2b:c1:18:35:10:2a:4d:98:2b:09:27:8b:4e:d9:
7d:84:72:5d:9c:20:d8:df:07:58:bf:72:9c:17:ad:
88:d8:9a:de:66:86:2b:8a:a1:c5:16:ba:e2:71:18:
79:ed:4c:0a:20:c9:dd:4f:7d:b6:9a:10:f9:8c:2e:
9a:c8:d7:ac:a1:d9:71:82:42:3d:7e:23:11:0d:e9:
89:c6:70:1f:75:4e:95:f5:ca:d5:bc:90:a1:68:eb:
00:34:b0:fa:84:fa:f5:1e:65:05:49:f6:b0:0e:b1:
82:9f:bc:68:81:7e:f8:f9:f5:cc:c0:e5:98:70:dc:
07:f3:e0:35:c9:7b:ab:50:61:76:66:8e:e6:06:33:
08:bc:ac:82:42:38:78:54:4f:97:8b:00:3e:09:a2:
40:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5C:25:BF:4E:C0:7A:82:C1:22:EC:D7:DB:F0:76:37:A8:50:3A:76
X509v3 Authority Key Identifier:
keyid:2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0a:ac:46:89:29:be:4a:42:71:7d:e7:20:92:69:02:b5:e4:
6e:23:29:83:19:af:d4:cb:9d:ab:24:f8:c1:13:2a:15:ec:d6:
ae:15:a6:fb:5e:f4:8d:da:85:fd:1d:e7:83:29:68:1e:3d:be:
dc:3e:3f:73:6d:09:fd:c8:46:6b:36:99:9c:ff:fe:39:2c:68:
a1:b0:dd:17:6f:be:37:0d:50:6d:77:4b:bc:38:3f:0c:3e:4e:
99:75:e4:d2:85:95:e7:a6:85:67:1b:54:c2:f1:31:e2:89:94:
79:70:ea:d3:f1:2b:0f:9f:87:7d:1d:08:d7:3d:f4:e5:c4:28:
27:44:c6:0d:17:98:7e:28:40:c0:29:a5:9f:3f:0b:99:2e:7d:
e9:92:15:b0:a9:9c:b1:31:02:62:c6:ba:39:ab:a3:3b:f5:76:
93:64:9b:fa:43:6d:69:dc:a1:e0:18:8a:9d:ee:e9:d3:4f:85:
cb:7f:45:72:ed:6c:c7:b6:95:b9:fc:44:3e:3f:05:a1:23:86:
7a:9d:f8:d6:58:16:60:67:5d:9c:29:b3:c6:f9:d5:bf:8b:2d:
8d:28:a8:e0:78:c4:d4:76:1e:38:52:50:60:0a:ec:66:84:c1:
b4:9f:20:f2:6b:1a:52:c6:8c:3d:6e:d6:42:92:4c:83:8b:b2:
c7:b2:82:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:55 2026 by rpki-client