Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
File: LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json)
Hash identifier: 0xKmiDdA3du9UEEooQXPmFybgyTtwotlS1L+aWPhD64=
Subject key identifier: 08:96:24:BF:CA:C0:F0:AA:24:F5:B8:4A:D1:F4:11:32:47:05:2D:87
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 019CAA8FEAB65725438C11F25B6493AC5524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
Manifest number: 184E
Signing time: Sun 01 Mar 2026 18:01:24 +0000
Manifest this update: Sun 01 Mar 2026 18:01:24 +0000
Manifest next update: Mon 02 Mar 2026 18:01:24 +0000
Files and hashes: 1: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: BXK3bZ2LEakyWBK53/11/s7rlVlwXRgdXu+gIM+EzMU=)
2: csavTgWbEnAnj2FE7wmf-6_xsDo.roa (hash: NZc1W28oYgzZGInvZ1xUa3lyDRZmfm8SXHqRaJX4eiA=)
3: kciLrIkaNokpbwgdgmqHhosEQAA.roa (hash: lRqsBb/ckM2u20pZEo0aziVALwxR00NbO8g2ocSg11k=)
4: rDqpWECW0pza-2J9_z5v1QcmMYM.roa (hash: BlCKHTq9I2NrgHH11AE9oJ3PcBo5UMsZimSMaB2XjYs=)
5: tGV4YPNnQsDRzdIlgaAMjflbyZc.roa (hash: mek/U6Kf3m68n3h5nQGxZ1IWYVE3zIoWHPx7TmOAqIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:ea:b6:57:25:43:8c:11:f2:5b:64:93:ac:55:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Mar 1 18:01:24 2026 GMT
Not After : Mar 2 18:01:24 2026 GMT
Subject: CN=089624bfcac0f0aa24f5b84ad1f4113247052d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:3a:ba:17:fc:b5:c8:81:c0:6b:df:74:67:
0e:85:ac:dd:db:ad:ff:13:8d:08:a7:e2:ba:e9:f7:
7d:f6:ed:6b:5e:3f:96:13:91:0f:48:a4:5b:39:77:
d9:ad:d5:01:67:5c:f0:3a:b5:da:ca:48:1e:09:48:
f3:ba:89:72:31:24:00:2a:46:02:77:31:32:26:dd:
5f:e9:66:0f:14:6e:d7:99:04:a7:64:11:37:6b:c0:
cc:4f:8c:21:8c:2b:9b:3a:a0:20:f4:99:e3:e5:c5:
67:22:ed:17:3e:84:95:e5:41:77:26:04:39:9c:54:
ab:88:cc:08:5b:b9:2f:f5:dd:70:4d:7d:4c:ba:23:
70:a4:a0:f4:4c:a7:0c:6b:89:eb:af:52:29:a1:cb:
46:45:75:11:8e:a5:a9:9a:f5:d8:f8:b3:d9:8f:f8:
0a:ce:b3:9b:bb:e7:bb:42:01:21:fe:bb:d3:7b:60:
2f:37:4f:0e:a6:57:d0:20:29:a0:e1:75:52:54:7c:
bc:d2:04:16:ed:67:f8:b3:91:79:11:7a:de:e6:47:
8d:d9:c4:58:84:79:51:6a:b7:5e:f9:1a:6b:80:31:
09:58:1f:9d:f1:c9:4d:b6:a1:95:55:eb:92:50:55:
cd:a9:f6:a8:46:37:91:a2:74:0f:c4:d4:63:63:71:
bd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:96:24:BF:CA:C0:F0:AA:24:F5:B8:4A:D1:F4:11:32:47:05:2D:87
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:86:9c:ee:d4:89:87:d4:29:4e:a6:e1:d5:07:4e:cb:92:c7:
7c:5e:26:31:4c:0c:84:a0:74:7a:85:79:9d:e5:50:1a:9c:b7:
48:bf:8e:4c:37:be:53:6f:bb:9d:b1:f1:b4:2f:c7:de:a4:fa:
83:90:a7:dc:2a:39:0e:da:24:f7:74:bc:a5:de:e7:9c:31:93:
28:5b:63:69:b9:82:5c:1a:ba:49:d8:ac:f5:64:85:cf:2a:f1:
2c:6f:e6:0d:ae:b6:db:7a:36:54:e8:43:26:3f:27:4d:f9:ca:
e3:d8:17:39:ff:8b:b2:f6:d6:5b:e5:56:a6:e3:ec:63:3e:62:
61:a0:f4:e2:05:ee:43:3c:0c:c9:55:c8:03:f9:2d:1a:54:0e:
82:65:2f:4d:9e:e1:11:f8:60:71:75:21:76:b3:b0:97:dc:ea:
fb:9f:f4:62:33:dd:40:47:a3:a3:fe:c3:2f:0c:ac:8b:b8:53:
91:98:64:e2:b3:6a:9e:c9:4e:f3:36:cc:40:56:88:1a:ad:5d:
9f:21:c4:2c:1e:eb:41:d8:96:0e:93:c8:9f:b9:ec:85:9f:e4:
da:28:97:02:0f:95:e1:71:b6:98:d8:5f:90:92:05:a8:55:6d:
07:15:14:bf:e1:54:6d:7d:a0:ac:6c:ca:23:90:b6:1d:3b:e2:
5a:3f:d9:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj+q2VyVDjBHyW2STrFUkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNGJkNGVkY2EyOWQ0ZTcyYmU4NmNlZDBiN2FkNjUyYzdk
MjYxYzkwHhcNMjYwMzAxMTgwMTI0WhcNMjYwMzAyMTgwMTI0WjAzMTEwLwYDVQQD
EygwODk2MjRiZmNhYzBmMGFhMjRmNWI4NGFkMWY0MTEzMjQ3MDUyZDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbw6uhf8tciBwGvfdGcOhazd263/
E40Ip+K66fd99u1rXj+WE5EPSKRbOXfZrdUBZ1zwOrXaykgeCUjzuolyMSQAKkYC
dzEyJt1f6WYPFG7XmQSnZBE3a8DMT4whjCubOqAg9Jnj5cVnIu0XPoSV5UF3JgQ5
nFSriMwIW7kv9d1wTX1MuiNwpKD0TKcMa4nrr1IpoctGRXURjqWpmvXY+LPZj/gK
zrObu+e7QgEh/rvTe2AvN08OplfQICmg4XVSVHy80gQW7Wf4s5F5EXre5keN2cRY
hHlRarde+RprgDEJWB+d8clNtqGVVeuSUFXNqfaoRjeRonQPxNRjY3G9tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAiWJL/KwPCqJPW4StH0ETJHBS2HMB8GA1UdIwQY
MBaAFC5L1O3KKdTnK+hs7Qt61lLH0mHJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hNTNiYjYtNjZjMC00ODYxLWIyODgt
MmE2MzcyZTA1NGQyLzEvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9hNTNiYjYtNjZjMC00ODYxLWIyODgtMmE2MzcyZTA1NGQy
LzEvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYac7tSJ
h9QpTqbh1QdOy5LHfF4mMUwMhKB0eoV5neVQGpy3SL+OTDe+U2+7nbHxtC/H3qT6
g5Cn3Co5Dtok93S8pd7nnDGTKFtjabmCXBq6Sdis9WSFzyrxLG/mDa6223o2VOhD
Jj8nTfnK49gXOf+LsvbWW+VWpuPsYz5iYaD04gXuQzwMyVXIA/ktGlQOgmUvTZ7h
EfhgcXUhdrOwl9zq+5/0YjPdQEejo/7DLwysi7hTkZhk4rNqnslO8zbMQFaIGq1d
nyHELB7rQdiWDpPIn7nshZ/k2iiXAg+V4XG2mNhfkJIFqFVtBxUUv+FUbX2grGzK
I5C2HTviWj/ZPQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:24 2026 by rpki-client