Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
File: LKVMSc_kyVm2nIriZoMm8QX2K50.mft (raw, json)
Hash identifier: YHl0JB84bKCq3Jx42fPQT/CXUN5mwj/cqn+HVYe97ro=
Subject key identifier: 79:C5:7F:AB:81:6C:04:ED:C4:94:7E:49:6B:E2:32:6F:99:E6:12:C2
Authority key identifier: 2C:A5:4C:49:CF:E4:C9:59:B6:9C:8A:E2:66:83:26:F1:05:F6:2B:9D
Certificate issuer: /CN=2ca54c49cfe4c959b69c8ae2668326f105f62b9d
Certificate serial: 019CAA8FCB4E88A70058751CB7392E6E5438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
Manifest number: 0827
Signing time: Sun 01 Mar 2026 18:01:16 +0000
Manifest this update: Sun 01 Mar 2026 18:01:16 +0000
Manifest next update: Mon 02 Mar 2026 18:01:16 +0000
Files and hashes: 1: LKVMSc_kyVm2nIriZoMm8QX2K50.crl (hash: 6ZfqdnBHGKzQlumO2l8dDFBDUrL37MbqRJ/MoHuT734=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:cb:4e:88:a7:00:58:75:1c:b7:39:2e:6e:54:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca54c49cfe4c959b69c8ae2668326f105f62b9d
Validity
Not Before: Mar 1 18:01:16 2026 GMT
Not After : Mar 2 18:01:16 2026 GMT
Subject: CN=79c57fab816c04edc4947e496be2326f99e612c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:41:e8:62:d1:0a:d5:ea:be:c8:16:c2:ea:2e:
f7:b6:c0:4d:84:b1:14:c9:e6:1d:bc:bc:30:c1:53:
85:aa:12:a0:e1:5e:6c:7e:cc:2d:67:8d:f9:cb:a1:
85:d3:ef:81:c7:bb:03:7b:6c:78:7c:4f:97:69:f9:
ab:31:85:ae:3e:89:b9:78:fd:6c:11:3c:87:1d:7c:
4d:f1:eb:97:d4:7d:4d:b4:dd:a9:50:51:01:eb:d4:
20:55:35:7c:e7:a6:84:95:d6:22:c4:17:27:a4:e5:
0e:6d:ae:fe:4d:28:4a:69:69:68:f5:b4:6c:c2:06:
f2:4b:a3:0e:96:2e:ec:a6:e7:2d:5a:3c:05:d8:1c:
2f:09:8a:04:ed:8a:42:17:4e:80:06:11:5c:f8:00:
7e:83:91:da:e4:07:cd:0f:e1:1c:b0:c0:58:c6:45:
4e:2f:8c:e7:c6:4c:66:d7:3d:6c:1f:c9:3b:7d:fb:
9a:31:af:56:cb:ef:88:06:15:ec:ef:e6:7a:58:69:
04:02:0b:ea:3a:a3:0e:fd:43:f5:65:be:16:22:44:
59:17:91:82:38:24:8b:14:e8:5a:0f:04:42:82:fd:
33:c4:3b:38:cc:6d:82:69:31:34:61:f0:24:ed:0b:
44:ac:5c:23:40:80:5b:cd:7d:9c:1f:85:9e:3f:45:
e6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C5:7F:AB:81:6C:04:ED:C4:94:7E:49:6B:E2:32:6F:99:E6:12:C2
X509v3 Authority Key Identifier:
keyid:2C:A5:4C:49:CF:E4:C9:59:B6:9C:8A:E2:66:83:26:F1:05:F6:2B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:22:18:9f:88:7d:e2:3b:8f:5b:5f:42:85:9e:17:c8:6e:c0:
5b:73:82:54:b8:8e:78:0f:74:99:01:90:cf:52:c7:89:ab:1f:
c9:dd:03:25:d2:78:88:9e:e5:d5:9b:e3:20:2f:58:9b:76:03:
c4:fa:ea:b0:bc:8a:9f:ac:2c:52:81:4e:e5:4b:e3:56:92:02:
73:05:34:9f:18:3c:12:ba:8b:78:e7:71:8d:49:d1:6a:fe:5c:
4d:17:92:4e:f1:7d:b0:a5:3b:02:82:52:17:f7:b5:38:1a:e0:
86:a3:99:b1:a5:2c:e4:26:3b:3d:4c:d9:a4:50:aa:0c:bd:20:
88:9c:1f:04:50:b9:4a:d5:ba:ba:a8:c2:a8:b4:64:13:8d:a7:
88:f6:87:0e:b6:45:08:d5:d8:a5:ee:91:81:38:7a:ad:82:d0:
65:e8:ef:7b:10:88:39:02:1c:14:f9:71:16:1a:44:97:5a:a1:
29:9a:cc:9e:74:1a:ac:5c:54:cd:9b:2a:30:78:0b:2b:9f:cc:
1c:4b:49:d8:38:6d:77:2a:c4:5f:e8:1c:e5:66:8a:7b:20:aa:
26:9c:cc:a5:1c:ad:26:d8:e0:1a:90:14:8a:5c:a5:e0:85:a6:
2c:43:07:25:de:39:dd:fc:41:d7:5a:5a:cb:0c:ff:10:2e:ff:
df:87:c3:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj8tOiKcAWHUctzkublQ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYTU0YzQ5Y2ZlNGM5NTliNjljOGFlMjY2ODMyNmYxMDVm
NjJiOWQwHhcNMjYwMzAxMTgwMTE2WhcNMjYwMzAyMTgwMTE2WjAzMTEwLwYDVQQD
Eyg3OWM1N2ZhYjgxNmMwNGVkYzQ5NDdlNDk2YmUyMzI2Zjk5ZTYxMmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUHoYtEK1eq+yBbC6i73tsBNhLEU
yeYdvLwwwVOFqhKg4V5sfswtZ435y6GF0++Bx7sDe2x4fE+XafmrMYWuPom5eP1s
ETyHHXxN8euX1H1NtN2pUFEB69QgVTV856aEldYixBcnpOUOba7+TShKaWlo9bRs
wgbyS6MOli7spuctWjwF2BwvCYoE7YpCF06ABhFc+AB+g5Ha5AfND+EcsMBYxkVO
L4znxkxm1z1sH8k7ffuaMa9Wy++IBhXs7+Z6WGkEAgvqOqMO/UP1Zb4WIkRZF5GC
OCSLFOhaDwRCgv0zxDs4zG2CaTE0YfAk7QtErFwjQIBbzX2cH4WeP0XmMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnFf6uBbATtxJR+SWviMm+Z5hLCMB8GA1UdIwQY
MBaAFCylTEnP5MlZtpyK4maDJvEF9iudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEtWTVNjX2t5Vm0ybklyaVpvTW04UVgySzUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80YjFmOWUtODhmZS00OTM5LWFkNTgt
ZjIzZjI5Y2VmZWU2LzEvTEtWTVNjX2t5Vm0ybklyaVpvTW04UVgySzUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80YjFmOWUtODhmZS00OTM5LWFkNTgtZjIzZjI5Y2VmZWU2
LzEvTEtWTVNjX2t5Vm0ybklyaVpvTW04UVgySzUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnyIYn4h9
4juPW19ChZ4XyG7AW3OCVLiOeA90mQGQz1LHiasfyd0DJdJ4iJ7l1ZvjIC9Ym3YD
xPrqsLyKn6wsUoFO5UvjVpICcwU0nxg8ErqLeOdxjUnRav5cTReSTvF9sKU7AoJS
F/e1OBrghqOZsaUs5CY7PUzZpFCqDL0giJwfBFC5StW6uqjCqLRkE42niPaHDrZF
CNXYpe6RgTh6rYLQZejvexCIOQIcFPlxFhpEl1qhKZrMnnQarFxUzZsqMHgLK5/M
HEtJ2DhtdyrEX+gc5WaKeyCqJpzMpRytJtjgGpAUilyl4IWmLEMHJd453fxB11pa
ywz/EC7/34fDHA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:24 2026 by rpki-client