Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
File: lkdopthwizYxQ6qIEeXZdoJk718.mft (raw, json)
Hash identifier: c+wPZ7rZnRBNWikwH0iiZ3UOxvXAmyrWobKw37QfG2s=
Subject key identifier: BF:20:FE:14:28:44:E6:69:BD:9A:7B:A3:25:2D:65:3F:F9:61:95:69
Authority key identifier: 96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
Certificate issuer: /CN=964768a6d8708b363143aa8811e5d9768264ef5f
Certificate serial: 01A0C5C5075DAA4EB1B7CFA1BC6D5A6A1D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 21:00:19 +0000
Manifest this update: Mon 21 Sep 2026 21:00:19 +0000
Manifest next update: Tue 22 Sep 2026 21:00:19 +0000
Files and hashes: 1: lkdopthwizYxQ6qIEeXZdoJk718.crl (hash: CgphgJn7/MVrrNczgoHH9dIZcKAQOuDwa181Bq3OLUI=)
2: y_2SHxKhfe_rgzbIS6eSd_GEWIw.roa (hash: /4b4cJ0+NGqltrpZyUr4ICghwSOnPUDvjMTMvvgLSLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:07:5d:aa:4e:b1:b7:cf:a1:bc:6d:5a:6a:1d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964768a6d8708b363143aa8811e5d9768264ef5f
Validity
Not Before: Sep 21 21:00:19 2026 GMT
Not After : Sep 22 21:00:19 2026 GMT
Subject: CN=bf20fe142844e669bd9a7ba3252d653ff9619569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:96:60:70:03:06:5a:71:59:2c:67:2e:80:
8d:08:21:cc:d1:f5:91:57:10:3d:9a:36:93:c1:b1:
d5:76:42:09:4f:78:2b:76:84:f7:b4:da:41:ba:32:
ba:95:eb:8b:66:b0:02:c8:57:3c:63:f0:81:5c:93:
95:84:7e:39:88:4b:14:97:5a:69:ff:f3:9f:29:50:
0c:0b:ba:ed:b6:74:f3:85:8f:dd:6a:d9:22:55:1c:
d8:ca:a0:6f:22:7e:02:8f:b9:a8:26:16:07:da:80:
7b:ee:c1:ee:cd:31:96:1f:61:13:21:51:40:6d:bb:
b6:13:ed:bf:f0:bd:fc:28:54:83:28:02:eb:77:0c:
38:52:3e:27:97:b7:a7:a5:b7:ce:67:82:d2:fc:33:
c9:78:b6:25:40:d1:3a:36:77:a1:ca:bc:11:b7:be:
7f:1a:65:21:3a:e0:f3:3c:f9:1b:07:6d:62:db:c8:
40:e7:a0:1c:c4:d6:ae:4e:bf:9f:28:c1:bb:73:35:
f7:39:99:c2:72:af:a8:c0:bc:6f:de:86:da:3b:fb:
a4:e8:57:b4:bd:8d:3a:13:ae:e6:f2:69:61:49:ab:
9a:0e:0d:29:fa:a9:79:a4:c9:5a:77:a2:34:6f:6f:
e1:bd:e0:0a:91:55:a2:be:0d:a6:70:07:36:f4:cc:
ab:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:20:FE:14:28:44:E6:69:BD:9A:7B:A3:25:2D:65:3F:F9:61:95:69
X509v3 Authority Key Identifier:
keyid:96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:88:d7:78:96:92:8d:f7:85:46:fc:bb:b6:a3:08:ed:b7:72:
d9:9a:9f:db:93:d2:87:05:6c:9f:22:7f:4f:32:e9:a1:e7:b5:
41:3c:57:11:d9:6c:4b:a0:99:0a:ae:a9:00:36:4d:be:e1:40:
29:d3:80:0a:56:fc:61:bc:9c:81:72:69:bf:60:05:3f:c5:f3:
e6:78:27:30:fd:7f:ae:6f:60:19:64:df:42:dc:5b:35:22:e0:
91:f5:8f:62:49:e4:19:33:6a:b2:0d:8a:57:d1:5c:b4:3b:66:
b2:86:0b:2e:a3:8e:6e:79:b3:98:e2:5c:48:f8:f0:b1:1b:7d:
1e:e7:2e:25:81:13:1d:17:98:bc:1a:d7:88:b5:d0:d9:97:03:
19:af:1e:53:f8:6c:7e:78:d1:55:86:c5:60:02:ce:64:60:f4:
ec:4f:d0:3f:bb:7d:a8:f1:a3:ab:fc:09:43:b5:d0:a2:73:64:
ad:03:02:1f:2a:ae:f1:d7:a0:a2:1c:39:81:33:6f:3e:48:80:
b7:79:50:33:fa:18:3c:16:8c:9b:8f:97:8b:7d:ac:36:dc:7d:
9b:4c:b0:7b:73:6c:9f:da:73:af:d8:77:40:42:42:5d:76:2f:
fe:ea:73:4b:29:5b:90:ba:02:d3:56:3f:3e:cc:e2:cc:97:3d:
3a:93:a5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:53:33 2026 by rpki-client