Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
File: LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json)
Hash identifier: dS8DtNcc1l2E4avquRguVAiI2/lrH7lYA4pV0fx1v2w=
Subject key identifier: B0:1F:93:37:06:B5:EC:16:E3:7B:17:2D:2E:8F:22:35:13:7B:BA:88
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 019D98186276A3D6E780F4C8F203599A670F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
Manifest number: 18C9
Signing time: Thu 16 Apr 2026 21:00:28 +0000
Manifest this update: Thu 16 Apr 2026 21:00:28 +0000
Manifest next update: Fri 17 Apr 2026 21:00:28 +0000
Files and hashes: 1: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: +iu6Pq8teIjqqJGSRYGLXvxA4dgiyhD/RsICYRE68mA=)
2: csavTgWbEnAnj2FE7wmf-6_xsDo.roa (hash: NZc1W28oYgzZGInvZ1xUa3lyDRZmfm8SXHqRaJX4eiA=)
3: kciLrIkaNokpbwgdgmqHhosEQAA.roa (hash: lRqsBb/ckM2u20pZEo0aziVALwxR00NbO8g2ocSg11k=)
4: rDqpWECW0pza-2J9_z5v1QcmMYM.roa (hash: BlCKHTq9I2NrgHH11AE9oJ3PcBo5UMsZimSMaB2XjYs=)
5: tGV4YPNnQsDRzdIlgaAMjflbyZc.roa (hash: mek/U6Kf3m68n3h5nQGxZ1IWYVE3zIoWHPx7TmOAqIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:62:76:a3:d6:e7:80:f4:c8:f2:03:59:9a:67:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Apr 16 21:00:28 2026 GMT
Not After : Apr 17 21:00:28 2026 GMT
Subject: CN=b01f933706b5ec16e37b172d2e8f2235137bba88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:78:f7:b8:60:07:d4:47:37:3f:40:62:5a:
d0:c6:fa:07:78:9c:e3:4c:4b:46:86:a8:62:c8:ee:
1e:5f:33:2b:1e:41:37:0e:59:43:c1:11:22:7c:0f:
65:b9:fa:2f:a4:7e:49:d3:44:e3:2b:a6:84:3d:ba:
9d:20:08:2b:ef:73:02:09:b8:70:26:9b:f8:71:4b:
c2:64:c2:d0:8a:44:31:91:4f:c8:a0:1b:22:9e:5d:
c0:b8:a1:fb:7f:57:fb:8d:c7:39:21:7f:f7:63:0e:
40:8d:2b:a6:78:ce:17:a5:6c:6d:a1:09:5e:45:75:
df:56:8d:52:ac:ee:1c:ec:c0:06:67:b1:9f:98:48:
db:2a:48:94:e7:d8:33:d6:a6:99:c7:60:8e:62:ae:
8a:ab:62:7e:6b:66:49:30:4b:5c:8e:be:fc:cb:ca:
e4:33:8e:9d:da:fc:54:f0:f3:db:7e:28:c0:29:8b:
0c:57:00:29:0d:84:55:22:b1:c6:4d:9b:43:81:a4:
44:48:04:7a:95:2c:ae:69:0e:61:2d:69:f7:c2:d1:
45:b8:79:44:fd:3c:c4:44:6f:c3:a9:3c:75:3c:16:
a7:53:d7:74:cd:62:68:ac:35:a5:7f:66:f6:f3:78:
48:f0:6a:84:9d:69:4b:44:94:2d:6f:b0:ed:0e:8b:
37:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1F:93:37:06:B5:EC:16:E3:7B:17:2D:2E:8F:22:35:13:7B:BA:88
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:91:a7:9a:82:8f:e7:4f:26:c8:71:4b:7a:43:33:a8:26:29:
4a:70:0f:59:6b:dd:25:f3:cc:42:ad:48:65:67:c1:a4:07:c3:
61:f2:26:e7:03:3b:b0:a7:a4:b5:a4:23:eb:b4:55:41:9a:e1:
79:f1:ff:6a:5c:5d:0c:71:1a:cc:cb:cb:9e:48:bd:2a:1a:76:
b5:39:5e:60:95:4c:86:94:93:11:d5:cf:7d:1c:9c:2a:d2:90:
98:38:95:74:13:05:52:fa:68:a7:56:e3:60:d3:9a:53:32:88:
bc:69:87:8c:39:44:8a:a3:d0:cc:ae:37:35:ac:9a:21:46:56:
fc:2e:34:7f:be:2d:07:d6:23:65:da:22:17:63:f8:7a:1b:63:
25:3e:83:37:b9:10:28:e4:5d:4e:e2:82:c0:d0:f4:dc:38:7e:
f4:c2:8a:08:17:ce:da:f0:65:ce:3b:0e:f8:83:7b:e2:aa:23:
1b:e4:e5:18:c4:87:36:72:02:70:02:2c:c3:88:00:72:77:8c:
6e:9e:50:e0:77:01:49:73:7b:b6:eb:41:33:12:50:a8:0b:29:
ac:7b:bc:fe:f7:75:d7:85:14:16:99:f1:c9:f7:50:54:6a:19:
7b:54:92:84:9e:c8:2a:ed:65:aa:ae:f4:e3:0c:06:a4:b7:0a:
03:d4:1f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:54:36 2026 by rpki-client