Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
File: LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json)
Hash identifier: S7t/Px9oNOd0bm/r3XZvfmcGzOAmshX2bEklXXM5XNw=
Subject key identifier: 89:FA:AF:F6:2F:82:1A:4E:27:25:3C:29:D4:17:58:36:C6:E1:B9:2C
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 01A0D53952741B73AD15E11037960328FB75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
Manifest number: 1A79
Signing time: Thu 24 Sep 2026 21:01:38 +0000
Manifest this update: Thu 24 Sep 2026 21:01:38 +0000
Manifest next update: Fri 25 Sep 2026 21:01:38 +0000
Files and hashes: 1: 9TWBsQcYt_3DqrpIxhr7ZchkbEs.roa (hash: S+4/zNMH2kmuHN+0Pj1sw0CtTfECJrrhZmhXHKALpLQ=)
2: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: qhEMRirNcee8b+RZJhZyU4teRG3DKK0dM1rY10mwxFQ=)
3: csavTgWbEnAnj2FE7wmf-6_xsDo.roa (hash: NZc1W28oYgzZGInvZ1xUa3lyDRZmfm8SXHqRaJX4eiA=)
4: hWYYYTPX5BW-YlQJP7a7zSBSnAs.roa (hash: KB7u9iqoxD3Dcgosf4P5H0oRDToXUib7RpHigbMrFSE=)
5: kciLrIkaNokpbwgdgmqHhosEQAA.roa (hash: lRqsBb/ckM2u20pZEo0aziVALwxR00NbO8g2ocSg11k=)
6: t2zUFpxy4LQGct9r9ZJ0asDpLFw.roa (hash: 024FwN2O3pbhYVF2lJCnVAQHX9MDtHOalE1ahWO/jyA=)
7: tGV4YPNnQsDRzdIlgaAMjflbyZc.roa (hash: mek/U6Kf3m68n3h5nQGxZ1IWYVE3zIoWHPx7TmOAqIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:52:74:1b:73:ad:15:e1:10:37:96:03:28:fb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Sep 24 21:01:38 2026 GMT
Not After : Sep 25 21:01:38 2026 GMT
Subject: CN=89faaff62f821a4e27253c29d4175836c6e1b92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5c:71:6c:50:45:65:08:c9:5f:b0:96:17:d5:
b2:af:29:49:1a:3e:2a:e5:85:49:a1:4b:75:1c:ba:
1c:19:68:f8:0b:3c:42:2d:73:9c:0c:9b:64:5c:ce:
61:b9:3a:39:9e:6c:8a:c2:63:bb:70:42:59:7c:ed:
89:f5:5f:e2:5c:9b:ff:ee:02:ee:49:92:5c:fb:dc:
77:4e:cd:33:7d:86:64:07:5d:53:0f:90:4e:05:8f:
9d:5e:2c:37:1c:ec:bf:60:87:1f:a6:1a:32:66:99:
57:3c:b9:6c:f7:1b:0d:c0:c6:5c:12:67:29:ca:39:
6d:fd:63:bc:c3:91:cf:43:70:5d:c4:91:fa:b4:1e:
a5:ac:f8:c1:36:cd:1b:81:c0:b4:04:e7:35:f4:60:
99:26:1e:a8:80:7c:ac:35:d0:27:1f:a3:ce:99:74:
17:8c:54:d5:26:b4:79:41:8e:c5:aa:be:81:87:b0:
45:7f:62:77:f7:c5:e7:86:e3:2e:a4:e4:45:c7:e6:
1e:31:1a:ee:14:73:0d:ca:2f:56:86:57:8a:04:87:
54:07:c3:67:0c:a2:b0:6f:24:fa:31:90:1a:31:90:
66:e7:c0:98:26:d3:3d:e5:3d:42:0f:eb:0c:17:3a:
c9:de:8a:2e:31:13:a9:de:58:2b:b6:a4:05:ba:41:
f2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FA:AF:F6:2F:82:1A:4E:27:25:3C:29:D4:17:58:36:C6:E1:B9:2C
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:67:06:72:4b:d8:69:e2:a5:08:59:ac:4f:ad:52:d3:c1:a3:
6d:a2:5e:d1:95:c2:33:c8:9a:f1:11:03:28:63:b9:e4:91:02:
f9:a1:66:11:20:44:94:80:69:2e:b3:f2:39:ab:fd:b2:e8:5b:
68:78:f0:9f:a0:7f:69:0d:d6:ac:4b:9d:a2:ec:33:70:e7:0d:
8f:fb:06:7f:c8:62:8c:26:a1:51:39:10:54:05:35:ac:83:8d:
0b:8d:27:c3:03:d6:86:7f:67:36:b3:a5:c9:ea:ad:96:6a:06:
4e:e3:8d:9c:d2:7c:59:4e:9f:12:62:9e:a2:06:ee:43:ec:a9:
2e:b2:22:7e:6d:d4:d5:98:f4:2d:c0:a7:90:9b:b3:35:32:9a:
1a:87:b8:55:66:43:b8:0d:21:7a:90:d2:48:95:a0:cc:61:58:
46:b0:e3:ba:4d:1c:19:85:de:d7:5e:b9:57:56:12:15:f7:18:
83:8b:8f:5f:ac:25:aa:ea:eb:b6:3b:26:c7:55:3e:3e:73:72:
59:96:d4:7a:fe:06:b9:d1:97:5c:46:d9:84:ae:5d:84:92:ba:
08:20:14:8c:b8:d8:3c:16:22:cb:70:25:b1:6d:49:69:36:9f:
b5:3e:db:4c:28:4c:f6:37:ee:8b:62:08:dc:01:0d:7d:9f:3d:
77:bc:40:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:29:23 2026 by rpki-client