Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
File: LkJv6Qhstq8B85H_T2nACDZNbu0.mft (raw, json)
Hash identifier: u2DNTGlFDS22SgRtt78nsPiswbAKhAob4mFwX52dH3k=
Subject key identifier: 59:B4:E7:84:B4:55:A5:64:EF:1B:89:C6:40:EC:C7:A6:D6:0F:E0:17
Authority key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
Certificate issuer: /CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Certificate serial: 019D273B39C07A36C947FC0467E5882568E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
Manifest number: 181C
Signing time: Wed 25 Mar 2026 23:01:26 +0000
Manifest this update: Wed 25 Mar 2026 23:01:26 +0000
Manifest next update: Thu 26 Mar 2026 23:01:26 +0000
Files and hashes: 1: LkJv6Qhstq8B85H_T2nACDZNbu0.crl (hash: EV0z38ThLTuROEC8/DGHXIFllDzNReA/lbLs/hHzi7k=)
2: l_v0toEM3yMRI49WDNWj-qHlYqk.roa (hash: uFfF5zaJ+lbxDFdCJItNBEsaSDghQGS/Cx4dVGLdX4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:39:c0:7a:36:c9:47:fc:04:67:e5:88:25:68:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Validity
Not Before: Mar 25 23:01:26 2026 GMT
Not After : Mar 26 23:01:26 2026 GMT
Subject: CN=59b4e784b455a564ef1b89c640ecc7a6d60fe017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5c:8f:5a:7e:d4:ec:17:73:d6:d2:d3:f1:10:
f3:04:b0:3a:78:3b:25:06:24:ef:ff:a1:58:0e:77:
22:34:60:41:1f:2c:b7:f3:a7:1e:70:87:82:f3:b6:
37:36:06:21:cc:ad:f2:3d:5c:9c:ae:9c:f2:a6:b1:
ef:3d:ab:a5:82:65:8e:37:e4:f9:b4:29:b6:ef:e9:
9b:78:0f:8d:c5:54:18:51:35:c9:8d:1d:1c:b0:fe:
80:23:f4:89:63:bf:93:ae:9b:b5:ad:47:cc:df:0f:
0d:35:98:50:e2:c1:ca:b5:80:1f:47:b2:73:c3:31:
98:63:32:e3:e8:86:bf:fd:1e:f5:24:12:a2:e7:75:
1a:e2:20:07:e4:b2:82:eb:0b:24:0c:43:c7:9c:76:
07:ad:31:94:ac:1c:31:ab:65:a9:c4:95:dd:ce:f0:
b9:ab:e6:d0:73:5f:38:89:0d:4e:14:01:a6:f2:bb:
04:d5:91:1d:7e:d7:36:92:2d:11:81:98:e3:6b:f6:
25:36:89:61:c7:63:66:54:07:62:ba:22:dc:39:c8:
75:1a:97:6c:62:06:6d:1f:bb:2c:7a:52:e3:1f:bd:
44:98:93:0b:e8:32:c3:4b:03:a8:14:11:4c:23:df:
fd:51:1c:71:94:42:84:cc:6d:28:94:69:83:5a:58:
5c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B4:E7:84:B4:55:A5:64:EF:1B:89:C6:40:EC:C7:A6:D6:0F:E0:17
X509v3 Authority Key Identifier:
keyid:2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e9:51:92:22:31:9a:10:8e:7b:3b:f7:a7:78:95:d3:ba:09:
bb:4c:45:b8:1e:bb:ca:4f:20:54:0c:cc:66:fe:17:4f:5e:0d:
2c:14:5e:f7:c6:a2:8c:f5:54:eb:bf:b3:76:e8:5b:89:d1:4d:
18:67:99:23:97:97:36:48:82:62:2b:e9:56:e8:f1:ef:fc:a5:
ba:a0:70:79:a5:65:fe:09:d4:7d:2c:08:7e:e0:f7:70:23:d2:
b4:a2:fd:aa:3f:06:3a:50:83:f5:60:e2:65:70:78:ec:26:b7:
3a:cd:64:66:4c:67:d8:94:7b:f2:84:d6:f7:25:40:15:26:43:
6f:2a:da:e5:9f:a6:2c:1d:90:60:13:31:9b:1b:e7:79:71:3c:
7a:24:96:28:ec:aa:77:fc:55:0a:a7:70:d9:e4:4f:9b:ee:5a:
61:61:36:79:bd:a8:68:a7:a3:96:45:e6:3d:9d:a9:5a:bd:de:
5f:3c:25:db:19:5f:e5:71:a9:eb:44:e6:d9:b5:d9:5f:3d:42:
36:1b:b2:d2:c1:8a:dd:47:a8:c0:33:6b:60:2d:67:45:03:e3:
8c:02:2e:c9:2d:7f:12:da:6c:4c:8d:68:f8:ed:84:a6:77:68:
64:d9:40:32:82:e0:2e:cb:f3:8f:85:ac:84:b0:e0:09:b8:2d:
47:47:e7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:54:00 2026 by rpki-client