Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
File: LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft (raw, json)
Hash identifier: A5Fx48xU1p9raG9PF7xf2svXB1n3TnoWHy6JjJhpOwg=
Subject key identifier: 94:46:52:C0:53:0C:CC:4F:4F:C7:C7:72:49:71:29:66:51:88:97:9C
Authority key identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
Certificate issuer: /CN=2e481909559480d248490d8e1d71c3c093b05fe5
Certificate serial: 01A0E588327D295CF3226E8628315AB7AEEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
Manifest number: 1A73
Signing time: Mon 28 Sep 2026 01:01:43 +0000
Manifest this update: Mon 28 Sep 2026 01:01:43 +0000
Manifest next update: Tue 29 Sep 2026 01:01:43 +0000
Files and hashes: 1: LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl (hash: pnGIylJ+g4vF1yZeyTG+SYqUzNvZFZOcM61gaNBBz88=)
2: TpPJId1e5lG2meo0GsY8127KDCk.roa (hash: aMNWtngKVeTHR3PWHuMGJZAZEL09LOJBZOu+feFbIPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:88:32:7d:29:5c:f3:22:6e:86:28:31:5a:b7:ae:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e481909559480d248490d8e1d71c3c093b05fe5
Validity
Not Before: Sep 28 01:01:43 2026 GMT
Not After : Sep 29 01:01:43 2026 GMT
Subject: CN=944652c0530ccc4f4fc7c772497129665188979c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:81:7d:e4:62:0f:5d:99:7f:07:95:be:69:d1:
25:6d:2a:d3:01:57:02:8c:bc:d9:cf:09:e2:cb:b7:
88:7d:6e:12:de:34:fd:28:dc:62:8f:0f:1c:01:48:
08:06:22:00:c8:2b:48:b2:4c:ec:fc:27:11:96:3a:
3e:cf:b0:cd:b1:7a:3e:39:34:c9:d0:13:b7:ae:1b:
28:57:87:8e:b1:d5:5d:18:41:d2:22:20:28:f8:d4:
eb:4b:67:fc:0c:dc:ed:e8:7a:c6:fe:46:26:4b:6b:
4f:9c:37:96:36:fa:d5:fe:ed:b9:67:33:67:ba:0c:
7e:80:84:d2:52:f4:80:23:3b:ec:a0:3d:3b:aa:8a:
6f:62:dd:e8:28:d6:2e:77:56:5f:e9:7f:10:46:e3:
f3:31:89:ca:b2:43:be:1b:4b:11:99:65:47:9f:3e:
2a:59:85:0a:47:c6:67:9d:e1:04:d9:d7:47:ac:08:
1c:e1:4e:49:88:8d:e1:1e:a1:ab:15:dc:28:b4:61:
9d:d9:4a:11:d8:24:41:a3:87:5d:02:de:c5:b0:e7:
b3:89:eb:db:d0:b5:e3:1a:47:77:7e:11:6b:2e:4f:
6e:0b:c6:d2:56:1c:47:48:7e:67:23:74:cd:5c:0a:
1d:55:b6:c2:be:a2:c1:7b:e9:40:19:57:46:a4:72:
05:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:46:52:C0:53:0C:CC:4F:4F:C7:C7:72:49:71:29:66:51:88:97:9C
X509v3 Authority Key Identifier:
keyid:2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5a:61:07:8c:d3:5d:18:1e:a5:a2:d5:a8:b9:6c:83:16:33:
f6:7e:21:46:23:88:7f:8a:e2:c8:18:6b:af:74:99:ea:13:90:
92:c8:79:41:66:fc:6b:5a:9d:d8:ea:08:40:ef:b3:74:bb:cd:
98:58:c6:15:fe:4b:25:49:70:69:85:5f:6e:fb:a3:38:87:83:
aa:0c:3c:d9:d3:6c:c5:02:c5:67:fb:e7:06:61:6c:04:7e:07:
4c:2f:36:54:ed:c9:26:5c:f8:7a:75:64:07:79:b8:5b:fd:93:
c7:52:b4:e5:60:bb:c5:b1:a2:5a:a8:84:ab:ff:b8:36:a5:a3:
e7:2b:ba:2b:fb:fd:3c:72:a4:cf:97:50:7d:44:70:3e:6b:ad:
2e:23:38:a5:0e:d0:00:1a:9f:bb:8e:cb:f4:fd:34:6a:8b:ff:
43:86:c0:2f:06:a6:2b:14:e3:fc:24:ef:eb:5e:0f:75:07:c1:
ce:e1:3f:43:12:82:5b:b6:f8:b9:ef:8a:ca:dc:37:be:c8:f4:
2f:79:96:ce:c1:f4:7b:d0:d8:83:da:21:38:98:07:31:5d:cb:
5b:8d:1c:98:cb:41:0b:89:11:79:c1:eb:80:dc:98:28:31:29:
f6:cd:c6:a5:6e:0c:8d:b2:8d:80:c5:6e:12:13:9b:69:50:23:
a6:e8:e4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:14:11 2026 by rpki-client