Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
File: lKMuRFwk3tm4UhLUebiACBZevbo.mft (raw, json)
Hash identifier: zNrKZ5tNaKj7CWgVzwzN8IBNlL0i1HtIsbaO2oVmrp8=
Subject key identifier: B7:9C:BC:98:18:85:6E:CA:8E:63:ED:D5:7C:54:96:05:DE:65:E8:A2
Authority key identifier: 94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
Certificate issuer: /CN=94a32e445c24ded9b85212d479b88008165ebdba
Certificate serial: 019ED499326F11CB0F79DFEB09ED16F8AF77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
Manifest number: 1967
Signing time: Wed 17 Jun 2026 08:01:10 +0000
Manifest this update: Wed 17 Jun 2026 08:01:10 +0000
Manifest next update: Thu 18 Jun 2026 08:01:10 +0000
Files and hashes: 1: lKMuRFwk3tm4UhLUebiACBZevbo.crl (hash: EBnwl8NEjQr6PgSDNRASzssyr2RGDGyEtko0Y6QrPIE=)
2: q_6rXYE5naFTYIqL8Xb1V5kt0hw.roa (hash: oNdTo6cg1MBLR8xzU20UilfpNxSC7GvJArzxlqR/iAg=)
3: sdkmYCTpxXVubPzt0Vusqo9p2cM.roa (hash: cR5IHtVLgA9zfYhE/lZgYLsMdhZ5hl2OfHWB5ot/8mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:99:32:6f:11:cb:0f:79:df:eb:09:ed:16:f8:af:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a32e445c24ded9b85212d479b88008165ebdba
Validity
Not Before: Jun 17 08:01:10 2026 GMT
Not After : Jun 18 08:01:10 2026 GMT
Subject: CN=b79cbc9818856eca8e63edd57c549605de65e8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:43:84:25:3d:e6:21:83:c4:80:2b:69:1a:
4a:ce:da:35:45:0a:38:e0:b1:bd:15:d6:6f:74:f6:
ea:6d:65:b7:e0:40:4a:f5:68:eb:8e:d6:5a:dc:5d:
cf:ed:0c:b9:99:d4:b0:d9:19:c7:1e:de:4c:1b:d3:
64:9f:a5:d3:b1:eb:5e:f7:26:dd:43:f4:2d:8b:b4:
58:a4:4c:83:16:5a:74:47:06:20:b6:d2:e6:c9:7e:
26:c0:fc:d6:af:70:13:25:8a:97:b4:d0:21:9b:7d:
7f:3a:9e:b3:63:f6:75:86:13:dc:0d:4b:91:56:ca:
f0:1d:24:6a:3b:28:6d:f9:8e:4d:6a:89:6b:1e:db:
8c:53:8f:b9:95:d8:d7:1c:09:cf:33:3b:ce:f8:10:
b5:7a:2b:ba:bc:8a:ea:d5:f4:48:65:c7:f9:c2:0a:
17:12:39:13:9f:92:27:84:d3:90:98:38:e5:48:18:
2c:c6:f7:8d:47:8c:fe:91:7e:4f:ac:03:48:13:3e:
2d:17:3b:78:a6:ca:b9:58:9f:da:d3:29:23:c2:55:
c4:ad:49:ac:58:43:f4:33:b8:3c:41:70:ee:ef:84:
3f:65:cb:c9:9e:73:af:f9:c8:08:dc:9d:e4:f0:92:
76:73:fa:00:48:31:af:e6:c9:9f:e1:24:0a:dd:3d:
a8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9C:BC:98:18:85:6E:CA:8E:63:ED:D5:7C:54:96:05:DE:65:E8:A2
X509v3 Authority Key Identifier:
keyid:94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:87:f2:c4:fe:3d:f7:25:a2:76:bc:39:74:33:2c:4e:5b:d4:
48:5d:94:18:8b:c9:ec:98:9c:f3:ae:e0:13:d3:aa:76:5f:a3:
16:7d:a4:38:ca:2b:6e:0b:0b:4c:62:31:ec:da:72:5e:dd:44:
38:d1:53:0b:2a:b7:9f:5c:28:fc:82:e8:90:78:02:80:fa:51:
dd:85:f6:07:75:93:9d:c5:f8:52:24:07:fb:1d:31:15:a2:7a:
9a:0b:23:4e:49:a4:dc:b6:4b:05:19:f4:e8:e6:e9:1f:87:c8:
0f:6c:08:fa:1f:8a:b9:e4:b5:d4:3c:0e:b1:98:03:22:a9:6a:
c3:6b:ff:bf:ee:f6:00:24:88:1f:57:12:12:c9:5b:5e:64:79:
95:c9:89:04:36:68:4a:ab:ad:02:e1:f9:0a:69:3d:3b:04:25:
aa:f9:6d:09:69:7f:b3:10:b5:dd:e5:a8:35:f1:f5:76:39:35:
4a:7e:a1:bf:c4:6b:9a:a7:72:e3:3a:1b:b8:81:cd:e2:b9:a6:
87:99:ec:e1:4a:0f:58:bb:1e:f3:9d:54:b6:3c:09:60:a4:14:
35:14:2b:49:31:59:61:79:11:6a:55:f3:77:29:c2:1d:28:b5:
36:8b:07:95:f9:b0:41:0c:56:2f:72:d3:57:a3:98:67:14:73:
c4:5f:0d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:51:41 2026 by rpki-client