Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
File: LKVMSc_kyVm2nIriZoMm8QX2K50.mft (raw, json)
Hash identifier: lSMUrgUVHjOrnrM0URdsHzjWrAXkU7veH3Y9Y59esjg=
Subject key identifier: C4:EB:42:09:3B:AF:76:A3:57:46:C3:45:79:08:A1:8E:E3:DD:0D:BA
Authority key identifier: 2C:A5:4C:49:CF:E4:C9:59:B6:9C:8A:E2:66:83:26:F1:05:F6:2B:9D
Certificate issuer: /CN=2ca54c49cfe4c959b69c8ae2668326f105f62b9d
Certificate serial: 019D9A075CB543F9D5E25695D4674AF5884E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
Manifest number: 08A3
Signing time: Fri 17 Apr 2026 06:01:06 +0000
Manifest this update: Fri 17 Apr 2026 06:01:06 +0000
Manifest next update: Sat 18 Apr 2026 06:01:06 +0000
Files and hashes: 1: LKVMSc_kyVm2nIriZoMm8QX2K50.crl (hash: JwfGhmpjAtl9/rCwdBDhrL2ZWiPkUAa7xpKK+G0yiTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:5c:b5:43:f9:d5:e2:56:95:d4:67:4a:f5:88:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca54c49cfe4c959b69c8ae2668326f105f62b9d
Validity
Not Before: Apr 17 06:01:06 2026 GMT
Not After : Apr 18 06:01:06 2026 GMT
Subject: CN=c4eb42093baf76a35746c3457908a18ee3dd0dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:72:7e:89:81:1a:fa:89:d1:3b:67:5d:f6:
03:9b:19:c8:58:44:53:5c:ec:ca:f2:68:a9:9e:19:
c9:24:2e:d9:22:97:dc:c7:a5:6f:ea:e1:8f:b0:65:
a2:5c:c3:f2:17:c1:8c:4b:fb:1e:4d:7d:60:92:95:
10:04:82:30:6a:ce:9c:86:54:f3:33:8a:aa:c8:e8:
19:ac:a5:47:68:e7:40:97:02:a4:cb:d6:24:50:bc:
1d:d8:2d:06:dc:2f:5f:f4:7f:25:69:ba:ba:92:ad:
df:48:01:33:c1:58:46:e9:39:b5:56:91:84:0f:fd:
7d:16:ca:bd:7d:12:24:1f:2e:88:cb:34:f4:c8:12:
ff:70:d2:82:d5:b1:17:90:8d:32:b5:25:18:1d:54:
58:bb:ac:ba:8f:ed:9f:3c:fa:0a:b0:ba:53:b1:ce:
34:2b:46:ca:5c:d8:65:52:82:38:42:a3:28:ad:b9:
c3:b5:22:77:f8:b9:47:75:4e:c6:34:28:d2:82:2b:
a5:04:e7:20:a9:fb:2a:7d:96:f9:49:fe:09:31:dd:
e6:b2:fc:cb:b4:44:eb:00:25:9c:86:d3:b1:4e:63:
87:10:61:ca:cd:d8:14:67:fd:f0:0a:b9:f3:68:2e:
bc:91:16:a0:51:db:01:32:ba:5f:4d:5c:93:bf:f1:
f1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EB:42:09:3B:AF:76:A3:57:46:C3:45:79:08:A1:8E:E3:DD:0D:BA
X509v3 Authority Key Identifier:
keyid:2C:A5:4C:49:CF:E4:C9:59:B6:9C:8A:E2:66:83:26:F1:05:F6:2B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:31:cc:f7:56:49:3c:20:b4:a0:57:21:fe:58:2b:ac:69:64:
8d:d0:5c:a9:9b:6e:f0:09:ef:22:6f:0a:5e:31:27:94:46:5e:
4a:83:0d:82:4c:c0:a4:15:03:04:7f:8a:b1:74:41:b9:5b:ad:
5d:5c:e6:68:84:49:bf:e1:19:50:6f:b9:1c:5b:3e:22:3d:3b:
dc:b7:6b:e4:89:a6:a7:93:b9:cb:f9:46:14:85:dc:f4:0f:f3:
34:b9:7b:d6:27:4b:08:89:51:df:b7:a3:28:96:04:30:a8:fb:
ed:d4:db:c0:62:fc:18:a6:10:70:99:b6:99:2d:9d:51:d8:d3:
f1:41:91:f2:f9:7b:6c:da:b2:6b:7f:e6:31:50:e0:9a:06:bd:
c7:11:aa:a5:01:71:c4:25:27:1f:2d:c7:2d:29:32:e0:48:23:
b9:88:0a:01:70:94:b9:b0:af:c6:b1:7d:c2:a7:bf:ac:ca:01:
78:0d:fa:2f:60:60:a8:23:d8:8a:f8:ab:23:e7:92:de:7e:cd:
17:41:8f:da:cc:81:11:0d:4d:c1:57:2e:d9:66:ba:8b:d8:c5:
bf:8b:cc:cf:fa:fb:ae:bf:8e:45:2c:40:1f:19:b0:ba:f8:f7:
81:dc:b3:4d:ac:d1:f3:11:60:60:24:8d:7a:f8:1d:cb:d3:b5:
b9:95:d9:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aB1y1Q/nV4laV1GdK9YhOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYTU0YzQ5Y2ZlNGM5NTliNjljOGFlMjY2ODMyNmYxMDVm
NjJiOWQwHhcNMjYwNDE3MDYwMTA2WhcNMjYwNDE4MDYwMTA2WjAzMTEwLwYDVQQD
EyhjNGViNDIwOTNiYWY3NmEzNTc0NmMzNDU3OTA4YTE4ZWUzZGQwZGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvtyfomBGvqJ0TtnXfYDmxnIWERT
XOzK8mipnhnJJC7ZIpfcx6Vv6uGPsGWiXMPyF8GMS/seTX1gkpUQBIIwas6chlTz
M4qqyOgZrKVHaOdAlwKky9YkULwd2C0G3C9f9H8labq6kq3fSAEzwVhG6Tm1VpGE
D/19Fsq9fRIkHy6IyzT0yBL/cNKC1bEXkI0ytSUYHVRYu6y6j+2fPPoKsLpTsc40
K0bKXNhlUoI4QqMorbnDtSJ3+LlHdU7GNCjSgiulBOcgqfsqfZb5Sf4JMd3msvzL
tETrACWchtOxTmOHEGHKzdgUZ/3wCrnzaC68kRagUdsBMrpfTVyTv/HxYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTrQgk7r3ajV0bDRXkIoY7j3Q26MB8GA1UdIwQY
MBaAFCylTEnP5MlZtpyK4maDJvEF9iudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEtWTVNjX2t5Vm0ybklyaVpvTW04UVgySzUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80YjFmOWUtODhmZS00OTM5LWFkNTgt
ZjIzZjI5Y2VmZWU2LzEvTEtWTVNjX2t5Vm0ybklyaVpvTW04UVgySzUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80YjFmOWUtODhmZS00OTM5LWFkNTgtZjIzZjI5Y2VmZWU2
LzEvTEtWTVNjX2t5Vm0ybklyaVpvTW04UVgySzUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTHM91ZJ
PCC0oFch/lgrrGlkjdBcqZtu8AnvIm8KXjEnlEZeSoMNgkzApBUDBH+KsXRBuVut
XVzmaIRJv+EZUG+5HFs+Ij073Ldr5Immp5O5y/lGFIXc9A/zNLl71idLCIlR37ej
KJYEMKj77dTbwGL8GKYQcJm2mS2dUdjT8UGR8vl7bNqya3/mMVDgmga9xxGqpQFx
xCUnHy3HLSky4EgjuYgKAXCUubCvxrF9wqe/rMoBeA36L2BgqCPYivirI+eS3n7N
F0GP2syBEQ1NwVcu2Wa6i9jFv4vMz/r7rr+ORSxAHxmwuvj3gdyzTazR8xFgYCSN
evgdy9O1uZXZKg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:46:01 2026 by rpki-client