Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
File: LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft (raw, json)
Hash identifier: pg0fT5StoXmSpiu+pZfVD8t2RYj4Gsx5nFGe3dyZPpE=
Subject key identifier: 88:BE:B1:49:DE:8A:BB:19:BE:8A:C2:95:43:ED:7E:88:6B:42:AB:C9
Authority key identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
Certificate issuer: /CN=2e481909559480d248490d8e1d71c3c093b05fe5
Certificate serial: 019CADFE14D80B463B221916D63087290120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 10:00:35 +0000
Manifest this update: Mon 02 Mar 2026 10:00:35 +0000
Manifest next update: Tue 03 Mar 2026 10:00:35 +0000
Files and hashes: 1: LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl (hash: CufygmY2Wzw837dHeRBPwxOW7/Zvi5V2xWLi2SPyTRU=)
2: TpPJId1e5lG2meo0GsY8127KDCk.roa (hash: aMNWtngKVeTHR3PWHuMGJZAZEL09LOJBZOu+feFbIPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:14:d8:0b:46:3b:22:19:16:d6:30:87:29:01:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e481909559480d248490d8e1d71c3c093b05fe5
Validity
Not Before: Mar 2 10:00:35 2026 GMT
Not After : Mar 3 10:00:35 2026 GMT
Subject: CN=88beb149de8abb19be8ac29543ed7e886b42abc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2d:ab:0a:41:23:2a:e2:39:cb:32:e6:31:ed:
14:f9:39:08:52:0d:86:f3:1e:92:b6:49:22:79:43:
f2:dc:93:b8:9c:86:dc:b6:ba:bf:6c:ec:32:98:d0:
26:f2:fe:e0:d1:c6:f0:77:81:46:d2:4a:25:22:14:
d9:5a:09:ca:3e:06:37:ca:75:6c:cb:05:5b:c6:2b:
13:97:5a:d1:f3:a7:0f:f6:48:26:3e:3c:0e:57:62:
6e:96:be:ca:a4:5d:01:b1:c3:e5:cd:e2:46:8c:4b:
23:93:64:e8:60:2b:af:6d:5a:3d:e7:ee:0a:60:af:
6b:0f:e7:93:a7:5f:6c:97:d0:e7:b6:ea:f8:46:f2:
a7:f6:a6:13:97:a1:a6:d3:d9:90:4f:9c:0f:02:81:
97:9c:39:5f:41:90:e7:75:10:3b:44:4b:21:f1:fc:
5a:99:a0:fe:e2:bc:69:5f:fe:e3:89:72:86:b1:d7:
45:07:e2:f6:b0:04:cc:d2:fc:30:94:e2:98:44:97:
f4:ff:81:3d:a8:db:1e:fb:66:03:83:74:43:0f:a6:
97:bc:f1:59:71:f5:56:81:9e:69:4e:1e:57:bf:ab:
a1:6b:f8:5e:9d:1d:67:5b:65:75:39:54:1a:49:27:
c9:c9:06:04:9a:11:3d:1a:58:af:76:6d:31:bf:67:
4f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BE:B1:49:DE:8A:BB:19:BE:8A:C2:95:43:ED:7E:88:6B:42:AB:C9
X509v3 Authority Key Identifier:
keyid:2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f9:3e:5a:45:b0:36:d6:92:99:c7:29:61:f5:ca:ef:2f:84:
c9:ba:de:b5:f1:67:8f:8d:5e:79:7c:2a:28:c1:d5:0f:49:a3:
bf:36:31:4f:4f:2c:6f:f9:47:33:63:be:af:c0:86:79:47:34:
90:2b:e6:f6:a2:57:41:0c:1b:4f:86:d8:20:5c:68:f8:90:7b:
43:0e:ce:8d:b4:83:b3:99:83:54:87:73:fb:5e:35:a4:e9:a1:
bc:3f:05:d8:c9:ec:35:53:45:cc:30:e8:7b:7a:d0:65:b2:ce:
21:c4:79:33:4f:30:80:f4:9c:da:33:bc:5a:7b:18:6d:d5:3c:
a9:ce:a7:5a:1f:b2:bf:9d:3c:6d:83:f7:1e:70:fa:52:3c:58:
78:65:0f:4f:34:fc:db:1f:14:a6:03:1a:3a:3e:2a:9a:62:d7:
9f:2d:15:92:76:a5:40:9d:c0:8f:54:fd:e1:96:cd:c0:33:2a:
cc:d9:d5:d0:2d:83:f3:37:e8:68:71:77:91:8c:a1:d3:b6:be:
62:c4:43:c3:b2:53:da:33:e7:b5:8c:f1:85:a6:48:99:ae:89:
91:26:fd:f2:91:fb:c8:f8:2e:2b:49:4a:ab:af:8f:b9:2d:92:
e4:46:0f:89:97:84:0b:3c:d1:91:df:ae:15:9e:14:ef:82:b3:
99:f5:74:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:31:55 2026 by rpki-client