Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
File: lKMuRFwk3tm4UhLUebiACBZevbo.mft (raw, json)
Hash identifier: 0P2CBatoeUv7zhKFLiUdcjbg7H4Cmsjel7j9cTHm2ZQ=
Subject key identifier: 59:7C:92:13:A0:BE:FA:58:22:5A:E8:B6:48:90:46:B6:C1:62:2F:88
Authority key identifier: 94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
Certificate issuer: /CN=94a32e445c24ded9b85212d479b88008165ebdba
Certificate serial: 019CAC46DEA68EFB2CA42902832B30FFE6BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 02:00:51 +0000
Manifest this update: Mon 02 Mar 2026 02:00:51 +0000
Manifest next update: Tue 03 Mar 2026 02:00:51 +0000
Files and hashes: 1: lKMuRFwk3tm4UhLUebiACBZevbo.crl (hash: mFwbDIfUE7upE03Ct9J5GCDsf5syGPpJSZcalP91Ifs=)
2: q_6rXYE5naFTYIqL8Xb1V5kt0hw.roa (hash: oNdTo6cg1MBLR8xzU20UilfpNxSC7GvJArzxlqR/iAg=)
3: sdkmYCTpxXVubPzt0Vusqo9p2cM.roa (hash: cR5IHtVLgA9zfYhE/lZgYLsMdhZ5hl2OfHWB5ot/8mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:de:a6:8e:fb:2c:a4:29:02:83:2b:30:ff:e6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a32e445c24ded9b85212d479b88008165ebdba
Validity
Not Before: Mar 2 02:00:51 2026 GMT
Not After : Mar 3 02:00:51 2026 GMT
Subject: CN=597c9213a0befa58225ae8b6489046b6c1622f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a4:ec:22:37:c6:8d:90:e0:8a:9f:55:1c:a7:
be:54:38:29:7e:fc:4b:e4:28:e9:40:e5:42:e1:80:
5d:1c:6a:0b:f8:3f:8a:04:53:97:fd:63:ff:f5:14:
8d:eb:4e:f3:a8:86:c1:67:81:2b:a8:d5:aa:00:22:
62:2c:07:ae:49:b9:27:82:dc:eb:08:80:89:d3:43:
6b:52:5b:85:fb:60:a9:1f:76:71:27:e5:2d:95:8c:
2d:a2:57:67:84:1d:6f:de:85:44:40:bc:36:02:e9:
17:b6:4e:67:85:53:55:fa:7b:cf:d9:0c:4b:0d:2d:
bd:fa:da:23:e6:fd:5d:88:4f:22:5e:d4:6b:40:19:
d9:09:d0:15:b5:8e:fe:39:7f:14:b2:83:f8:ba:07:
d6:0d:ba:e0:f6:6e:de:4c:d7:22:2f:8e:ec:7b:2d:
9c:7d:49:c8:8c:1f:7a:4d:58:83:29:a4:af:86:0c:
c4:ef:ba:e9:31:31:6b:39:b8:70:e7:0e:70:8b:05:
22:9f:33:d3:21:cb:cb:60:70:5b:83:48:a1:2d:ea:
23:10:4c:b4:3c:6b:f2:92:a5:09:3c:01:da:92:06:
11:c1:bd:04:10:75:4f:aa:b4:78:13:08:bf:e0:ec:
71:42:d2:96:6f:05:a7:d1:e0:84:d3:56:d7:a5:65:
08:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7C:92:13:A0:BE:FA:58:22:5A:E8:B6:48:90:46:B6:C1:62:2F:88
X509v3 Authority Key Identifier:
keyid:94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e7:86:27:ea:e5:c2:4d:ba:7e:50:b1:14:ef:1c:1d:3f:7f:
78:fd:13:ef:1e:9c:44:fb:b7:25:c3:b7:10:7e:e5:70:c9:29:
74:4b:08:64:3a:76:f7:32:8e:a6:95:1e:c6:f3:58:51:27:b6:
2a:5f:12:8d:5d:06:92:ee:e9:6e:5f:2c:30:ac:49:3e:6c:e7:
0c:f4:84:f0:57:11:6d:f5:09:4a:8f:19:4e:6c:76:5d:52:f5:
b6:2d:8d:6f:7d:6d:d5:f3:d6:22:bf:74:52:66:4a:0c:1c:10:
b0:37:d2:a4:8c:4f:da:c2:c3:79:9b:24:34:5b:8c:76:30:89:
ee:51:bd:be:b3:4a:60:55:21:40:fa:3c:bf:60:2f:0b:41:3c:
f9:7e:08:80:a1:4b:0f:62:33:98:d0:63:2c:33:55:8c:4a:6f:
60:75:07:39:4b:2c:57:6c:4c:c0:9c:92:c9:ff:bb:d6:0f:6f:
8a:a8:52:ee:7e:fd:b9:dd:cd:75:3a:30:a0:1b:98:1e:94:fc:
b2:46:2d:b5:ce:44:cf:1a:50:3a:ca:61:b2:a6:c4:48:bc:bd:
5c:ac:cf:00:1d:77:30:62:61:58:1e:e9:d6:65:02:f4:8d:57:
c2:b3:fd:d8:38:db:86:c3:78:72:35:26:a8:c3:e1:e0:93:f4:
67:54:0c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:51:32 2026 by rpki-client