Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
File: lkM1Vj2bb54-KN42jYWYi8FBNx4.mft (raw, json)
Hash identifier: rWdCInIcCiF8AZz09ljVT4tLk546bYkWTu68y4cXW5w=
Subject key identifier: 5E:9C:E4:DE:B8:3E:32:12:C3:B5:DA:74:60:D1:E8:2D:3F:01:0F:9E
Authority key identifier: 96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
Certificate issuer: /CN=964335563d9b6f9e3e28de368d85988bc141371e
Certificate serial: 01A1193DC1B2C2136336D145630D1FFDEA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
Manifest number: 18D9
Signing time: Thu 08 Oct 2026 02:00:39 +0000
Manifest this update: Thu 08 Oct 2026 02:00:39 +0000
Manifest next update: Fri 09 Oct 2026 02:00:39 +0000
Files and hashes: 1: 3j-9iaSKXJ2L7jlRSEs0qAlyRzk.roa (hash: kn2dNNNAcDT9/tnxgSN6E9lAiJiIXAqVGnn+Z6zefmM=)
2: WxK98FtTbTtBWK0NDqa7PLSHh-4.roa (hash: 6Do9u90Y5TD8a3hd4jqlXjVJP1K6MfYLEiK3okcKW40=)
3: lkM1Vj2bb54-KN42jYWYi8FBNx4.crl (hash: KleXRjOXKR9yW1/RQXNEnlvDyrYj5WXT3Gdy4/KEuv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:3d:c1:b2:c2:13:63:36:d1:45:63:0d:1f:fd:ea:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964335563d9b6f9e3e28de368d85988bc141371e
Validity
Not Before: Oct 8 02:00:39 2026 GMT
Not After : Oct 9 02:00:39 2026 GMT
Subject: CN=5e9ce4deb83e3212c3b5da7460d1e82d3f010f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:40:99:ae:5e:67:a3:da:94:d3:f1:bb:69:a0:
8a:bb:ab:7a:9e:34:36:3c:b2:41:ac:ab:eb:aa:08:
f0:f6:e7:be:63:d2:eb:7d:18:e1:9d:d1:8b:55:da:
9d:a5:3a:00:03:fb:51:58:6c:47:cd:fc:bc:6f:6d:
8c:84:c7:89:d9:aa:32:fb:0f:02:2f:d2:3a:e1:5a:
84:ae:9b:1b:5b:d5:81:24:1e:df:ab:31:40:2b:3f:
9e:74:34:1a:b8:ea:39:2d:aa:6e:0a:52:25:cb:1d:
5d:e7:b6:e2:9e:4a:78:ec:8b:4e:84:2c:1a:fc:e0:
5f:54:76:b0:05:b2:0b:73:70:dd:dc:38:3d:c0:a5:
a7:8c:dd:0f:d7:a6:c3:35:da:db:04:ad:46:57:75:
db:bf:bc:8e:6d:3f:6a:d9:1b:7e:c9:1f:87:60:87:
4e:c8:b8:f1:15:99:ac:13:d6:88:20:09:28:f0:43:
95:05:f8:0c:97:29:f7:1d:1b:8d:9f:fc:ea:d7:cb:
4f:99:6a:94:23:15:81:0e:01:6f:0d:06:db:98:1a:
3c:a9:95:54:9c:12:7d:02:1c:86:e5:59:54:27:a1:
8a:3e:c4:6a:1c:46:39:57:2c:8b:9c:6b:53:96:5c:
52:a9:6c:71:6e:4e:3c:d6:f0:a1:ac:90:2b:69:65:
b6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9C:E4:DE:B8:3E:32:12:C3:B5:DA:74:60:D1:E8:2D:3F:01:0F:9E
X509v3 Authority Key Identifier:
keyid:96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ff:13:c7:ce:42:2c:7d:0d:3a:11:2b:52:be:0b:be:62:20:
cb:a9:2e:ef:8b:31:8f:9c:38:fa:97:d5:86:5a:e3:d3:93:9e:
15:eb:40:01:a6:e4:27:d8:09:96:d0:04:19:91:ad:f4:0d:24:
ae:86:a8:d3:84:ab:3b:64:59:42:be:63:69:36:75:d4:c4:23:
ee:97:63:3d:d5:d9:2f:46:34:5d:41:63:a5:b9:2a:39:e9:e0:
c0:95:04:07:7c:70:7d:af:c3:d3:05:e1:6f:8a:95:23:d8:32:
2d:8c:2a:50:6c:e2:0a:cb:21:bd:fc:e3:66:4c:ad:bb:41:13:
e7:16:ca:65:32:39:9e:68:80:1f:ac:20:8e:2d:f3:50:b9:50:
a5:16:40:ab:77:e4:70:99:f9:32:af:62:63:c2:14:06:b7:2e:
64:bf:67:b4:ed:6f:0f:2c:7a:8e:ad:d3:72:ba:61:d3:8e:8a:
92:a0:19:df:ea:83:9d:bf:a0:44:56:29:b5:fa:cd:a2:f8:01:
77:d7:b3:e7:1c:ed:7e:25:1b:42:c5:03:cd:e9:f9:aa:77:ae:
de:dc:bf:b8:24:d9:1d:66:f5:93:92:17:1b:3a:03:9e:ef:82:
62:69:f3:de:13:9b:46:dc:56:32:70:72:43:72:61:ba:b7:bd:
e7:46:91:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:52:24 2026 by rpki-client