Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
File: lkdopthwizYxQ6qIEeXZdoJk718.mft (raw, json)
Hash identifier: WPsZIl0iJcxpTxJMa1gjQO6B10QEB9WW4H3i/inlgk0=
Subject key identifier: 96:2E:12:8B:04:5B:44:71:75:BF:87:2D:60:0F:51:18:24:CD:57:8A
Authority key identifier: 96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
Certificate issuer: /CN=964768a6d8708b363143aa8811e5d9768264ef5f
Certificate serial: 019CAD223E6F6E2921B7432A586BB6A96DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 06:00:28 +0000
Manifest this update: Mon 02 Mar 2026 06:00:28 +0000
Manifest next update: Tue 03 Mar 2026 06:00:28 +0000
Files and hashes: 1: lkdopthwizYxQ6qIEeXZdoJk718.crl (hash: 7xlWQ1JWSbp6j1lz2jRIOAjWWRwEszyi0wLqoyHDWVI=)
2: y_2SHxKhfe_rgzbIS6eSd_GEWIw.roa (hash: /4b4cJ0+NGqltrpZyUr4ICghwSOnPUDvjMTMvvgLSLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:3e:6f:6e:29:21:b7:43:2a:58:6b:b6:a9:6d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964768a6d8708b363143aa8811e5d9768264ef5f
Validity
Not Before: Mar 2 06:00:28 2026 GMT
Not After : Mar 3 06:00:28 2026 GMT
Subject: CN=962e128b045b447175bf872d600f511824cd578a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2d:95:3f:b7:c9:97:32:69:08:2e:ff:97:18:
ea:81:5a:2b:a0:0c:97:2d:7b:ab:39:8f:13:31:58:
a4:02:30:88:4e:5b:1c:d5:c9:fb:d4:01:16:fb:06:
ab:f8:ee:32:f2:5a:10:0b:d6:6d:d0:83:d4:9a:47:
ed:b5:0f:46:8c:73:06:49:0e:44:a5:65:86:28:69:
8d:c2:d7:87:ff:99:2d:ed:aa:7f:a0:1c:4d:48:65:
11:64:a5:07:59:bc:e7:7a:58:00:6b:18:7c:58:28:
1a:f5:04:02:87:98:76:e9:86:7c:e1:f4:4f:e8:67:
c6:74:e8:c5:e2:78:af:a2:46:b1:ad:8a:35:b1:9d:
6f:9c:d4:ae:3c:07:ae:f2:11:f7:30:d5:c7:d4:a6:
db:7d:98:f4:4d:db:de:ad:e4:55:5b:b3:b3:54:10:
5b:56:71:cb:a9:ef:fb:fb:41:64:1f:a9:d0:f1:80:
60:5f:49:a3:0d:14:22:c8:73:1b:90:a2:e8:76:99:
97:3a:e5:c9:47:48:1c:07:f7:c6:65:d3:5c:65:56:
2a:e4:48:a8:eb:01:bc:34:f2:0d:be:cd:b2:b9:29:
7a:f3:94:40:2f:f5:48:57:fd:1c:86:86:ee:22:8f:
7c:02:9b:a6:68:d7:07:4d:58:73:f9:2d:49:bd:e9:
60:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2E:12:8B:04:5B:44:71:75:BF:87:2D:60:0F:51:18:24:CD:57:8A
X509v3 Authority Key Identifier:
keyid:96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:29:0c:38:3a:4f:38:84:6c:30:86:cc:08:12:3c:24:cd:f9:
0a:2f:a9:f8:2c:67:a9:67:e6:ab:ee:c2:20:ec:d6:28:bc:0b:
5f:79:c5:4e:a3:7e:15:2c:b8:d9:82:b0:fb:30:0b:08:93:5a:
8f:a9:a8:dd:ca:91:47:87:34:d4:84:4e:2b:7f:00:a3:f5:ab:
5c:7b:20:1a:8c:23:38:3f:9b:12:01:c5:3c:c3:e0:01:23:b8:
84:6a:c7:57:5d:bf:40:89:0e:8f:e8:39:62:bf:c5:1a:5d:b4:
9b:5d:e5:ea:fb:81:8d:99:a4:d0:04:8c:92:98:d0:8e:41:ce:
0b:92:5d:57:20:48:8a:20:a8:94:34:1f:a2:a6:33:25:1a:75:
e6:5c:93:d4:3a:ae:96:27:a8:04:1a:e5:a5:dc:4c:64:d0:2c:
00:45:a7:cb:ad:7c:7c:b5:2b:ea:93:91:62:69:11:d8:e6:5d:
7c:be:5a:2d:a2:84:53:81:8c:29:73:27:54:f8:9a:bc:b2:ee:
ea:ca:96:f0:4b:80:be:ce:f7:78:bb:3b:ac:de:15:ab:1b:61:
75:ac:be:81:8c:00:bf:5c:0a:e3:c4:3d:da:49:e8:73:c8:06:
47:b1:fe:a3:3e:3c:70:3d:94:1a:6c:c5:71:1e:84:76:4a:df:
b0:5e:26:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:02 2026 by rpki-client