Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
File: LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json)
Hash identifier: pblYSRqJNd08U4NiEN7jN/j/ywVp0MsodzKwlEMvjI4=
Subject key identifier: 01:AE:91:AB:CB:86:2B:BB:66:A0:CC:76:B3:BA:77:D5:3E:EB:2A:22
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 019FA9E2EC765CDB00B5207092721B212364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
Manifest number: 19DE
Signing time: Tue 28 Jul 2026 18:00:48 +0000
Manifest this update: Tue 28 Jul 2026 18:00:48 +0000
Manifest next update: Wed 29 Jul 2026 18:00:48 +0000
Files and hashes: 1: 9TWBsQcYt_3DqrpIxhr7ZchkbEs.roa (hash: S+4/zNMH2kmuHN+0Pj1sw0CtTfECJrrhZmhXHKALpLQ=)
2: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: t97Qu1WGpdqqKp4AfX2b2Og+nBYymVu+1oEaD7pXrfg=)
3: csavTgWbEnAnj2FE7wmf-6_xsDo.roa (hash: NZc1W28oYgzZGInvZ1xUa3lyDRZmfm8SXHqRaJX4eiA=)
4: hWYYYTPX5BW-YlQJP7a7zSBSnAs.roa (hash: KB7u9iqoxD3Dcgosf4P5H0oRDToXUib7RpHigbMrFSE=)
5: kciLrIkaNokpbwgdgmqHhosEQAA.roa (hash: lRqsBb/ckM2u20pZEo0aziVALwxR00NbO8g2ocSg11k=)
6: t2zUFpxy4LQGct9r9ZJ0asDpLFw.roa (hash: 024FwN2O3pbhYVF2lJCnVAQHX9MDtHOalE1ahWO/jyA=)
7: tGV4YPNnQsDRzdIlgaAMjflbyZc.roa (hash: mek/U6Kf3m68n3h5nQGxZ1IWYVE3zIoWHPx7TmOAqIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:ec:76:5c:db:00:b5:20:70:92:72:1b:21:23:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Jul 28 18:00:48 2026 GMT
Not After : Jul 29 18:00:48 2026 GMT
Subject: CN=01ae91abcb862bbb66a0cc76b3ba77d53eeb2a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f4:cd:e8:58:09:13:ca:23:23:60:67:32:42:
30:bb:ce:10:b9:f9:b9:e5:5a:7b:a9:56:09:98:b3:
9d:2d:64:6d:c7:55:68:98:b8:fa:b8:9f:02:60:80:
78:2b:e8:2e:28:28:8f:38:43:f2:db:7b:ed:4c:d2:
ae:7a:dc:1f:41:15:d4:eb:f9:ed:96:b5:ce:b2:d1:
e0:2e:53:a3:d5:85:bc:8b:fc:15:c3:9b:4c:87:a2:
76:14:3c:80:07:bc:82:a6:f8:c4:78:af:ae:37:83:
48:c2:a5:dc:24:8e:52:9d:26:6e:db:ed:06:ec:ab:
17:e7:f6:49:95:12:bf:fb:bd:70:de:d8:8d:5e:fb:
29:96:d3:d9:17:7b:40:17:74:41:ea:4e:c7:7e:46:
ca:44:9d:99:19:ae:59:59:c3:46:57:84:1a:85:43:
3d:5b:91:45:88:d3:8b:62:ee:12:71:06:65:c5:4c:
1d:6b:07:72:11:9e:41:a5:32:9b:b1:d8:47:03:1e:
50:7a:d6:53:6a:93:36:4e:ea:e6:cd:8d:c2:5f:67:
57:27:27:63:36:3b:21:b0:f9:e2:da:6c:4a:88:7d:
fd:76:8d:12:e2:93:3d:b3:30:1f:3d:0f:19:51:38:
d4:1b:1a:02:74:d6:7f:67:1d:8c:23:11:24:85:05:
64:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AE:91:AB:CB:86:2B:BB:66:A0:CC:76:B3:BA:77:D5:3E:EB:2A:22
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:9b:ed:8b:ac:ac:3e:03:0c:67:82:4c:71:1c:ec:37:27:a2:
ac:e1:e5:54:06:1c:cb:2b:14:b7:13:64:87:81:23:8c:2c:c8:
92:a5:53:b1:5a:23:6a:e2:55:e1:6d:90:2a:b3:b1:08:c5:7f:
b1:47:53:30:36:f6:ef:1a:c5:c5:07:ea:f3:d2:16:f8:78:95:
44:9c:ca:e2:82:1f:ee:02:67:25:7a:b2:bc:b3:c3:6e:b0:26:
0f:0f:92:01:10:ea:d6:77:44:b7:8a:37:72:df:e9:77:48:67:
b0:e6:92:9d:09:66:85:e5:3c:16:f7:6f:24:31:0e:2b:78:98:
88:49:56:bb:e9:29:04:99:53:02:4c:09:a8:6a:b6:9f:e3:d3:
5d:ce:3f:62:d5:ad:4f:1b:74:2a:ec:e3:02:3e:7b:34:85:4f:
e5:2f:94:7e:89:09:e5:87:23:3f:7e:41:d8:bd:8e:3f:13:0f:
da:7e:b7:9e:f0:8d:31:5a:47:3b:6c:ae:64:c6:50:04:5e:0a:
e3:28:0c:9d:bf:e7:62:a8:5b:f9:78:49:1d:3f:0b:0c:23:60:
7e:04:6c:ec:de:9c:b9:77:b7:d1:18:43:43:7a:8c:1d:f3:09:
d4:75:08:a6:5b:44:e2:10:0d:90:fd:75:31:3b:67:76:2d:85:
a0:e7:a2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:11:33 2026 by rpki-client