Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
File: lkdopthwizYxQ6qIEeXZdoJk718.mft (raw, json)
Hash identifier: Q0DHai4z270sPI79gvlhUe5uZSqqvUIBmZ6+FvjNpeM=
Subject key identifier: 41:2F:6F:0C:01:57:9D:F3:DA:96:01:DD:39:11:59:32:0B:FB:20:04
Authority key identifier: 96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
Certificate issuer: /CN=964768a6d8708b363143aa8811e5d9768264ef5f
Certificate serial: 019FA9E2FCB8D017874CBF093F674FC6F678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 18:00:52 +0000
Manifest this update: Tue 28 Jul 2026 18:00:52 +0000
Manifest next update: Wed 29 Jul 2026 18:00:52 +0000
Files and hashes: 1: lkdopthwizYxQ6qIEeXZdoJk718.crl (hash: NiYWUq6UkAxwrDgGfFuXq4Ztxq1VfWYMhDDDVBIk4WY=)
2: y_2SHxKhfe_rgzbIS6eSd_GEWIw.roa (hash: /4b4cJ0+NGqltrpZyUr4ICghwSOnPUDvjMTMvvgLSLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:fc:b8:d0:17:87:4c:bf:09:3f:67:4f:c6:f6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964768a6d8708b363143aa8811e5d9768264ef5f
Validity
Not Before: Jul 28 18:00:52 2026 GMT
Not After : Jul 29 18:00:52 2026 GMT
Subject: CN=412f6f0c01579df3da9601dd391159320bfb2004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:87:29:48:32:5a:44:74:d5:92:a6:87:a0:
e8:c2:c4:f3:68:ed:7b:90:14:20:df:b1:1c:89:5c:
6a:b7:7f:5a:ca:95:a3:76:fc:a1:0e:99:dc:d0:00:
42:0d:da:0b:c6:29:e5:06:20:95:38:17:e2:66:90:
da:3e:cc:07:67:01:93:76:fd:b5:fd:81:ae:ad:69:
a7:bc:cc:6e:5c:59:c2:b3:78:f2:47:17:f0:6e:d8:
31:68:56:ff:78:6a:43:fe:d8:ce:4f:99:c9:1a:75:
a3:f2:71:d8:ec:ab:75:79:98:6b:05:e9:b7:df:54:
8d:db:51:f8:3f:f0:0a:57:b7:2e:c2:a2:7c:f0:56:
8f:70:8a:6b:50:77:cb:87:cc:58:92:7e:25:96:d1:
aa:a5:99:c7:70:7f:fe:b0:88:de:60:da:94:96:bb:
35:b9:03:00:fb:3d:f0:83:bc:4d:e5:be:14:66:d8:
8c:15:14:1e:de:26:ea:25:e6:25:a0:5a:aa:fb:3e:
67:1d:d2:63:c4:90:97:60:01:00:9c:1f:18:dd:11:
33:2e:73:5d:8e:d8:5b:34:d8:bd:fb:52:e7:c3:6c:
09:22:a5:34:ba:34:cb:5c:0e:41:8b:d4:78:4d:9b:
e0:25:19:99:1c:f5:d5:96:6f:0a:55:09:5c:18:c2:
7c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2F:6F:0C:01:57:9D:F3:DA:96:01:DD:39:11:59:32:0B:FB:20:04
X509v3 Authority Key Identifier:
keyid:96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8f:98:f7:d0:07:01:e8:e8:7f:4c:56:99:f5:b5:56:f6:6a:
93:45:d9:13:0d:84:4d:a9:bc:04:61:f0:c5:bc:a4:4e:8b:05:
b1:d0:15:b4:8c:e5:39:1f:49:43:b6:7c:ed:fa:56:d1:e2:c2:
5b:34:30:91:b2:3a:f6:5f:cf:26:94:26:cb:86:08:ce:e9:b5:
f4:03:73:33:68:75:39:93:e9:f7:3b:fa:3d:11:42:6a:61:bd:
c9:0f:a5:a5:06:c1:4c:6c:8d:64:42:62:00:35:1e:c1:08:94:
b1:05:21:60:18:53:f0:73:bb:82:fc:ac:e0:c1:98:35:96:75:
0e:3c:f0:93:da:aa:cb:e4:4d:77:1c:b7:33:4d:39:ce:b2:d6:
10:38:8d:92:8b:3e:3f:6d:33:a2:21:d2:f9:a3:34:b1:72:d9:
7a:60:09:8a:56:2a:10:24:15:2a:1b:a9:9f:b1:4d:50:3b:93:
d2:0f:86:5a:54:7f:7a:2e:95:24:2b:58:e3:fb:2a:b1:c3:7b:
b9:dd:95:00:25:05:c5:0a:f1:63:dd:64:32:8c:1b:f7:21:57:
3d:5d:7e:91:ab:d6:de:16:4b:a4:bc:6e:57:ff:25:ae:2c:28:
8b:55:d8:af:f7:71:91:09:47:20:04:cb:17:4b:e0:b5:72:e2:
e9:a8:bc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:43:57 2026 by rpki-client