Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
File: lKOAb3QqvNXbEgT1KPTKbd6x6do.mft (raw, json)
Hash identifier: Yurv8UaZrmXPW/uxuPYDpv+C8m1kKWA5L5m2Bb83+SI=
Subject key identifier: 65:A0:17:51:C3:24:09:9C:4D:89:38:74:EA:E3:5C:D4:A9:EC:37:9F
Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Certificate serial: 019CAAC6AB50646C919186F1224069942300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
Manifest number: 0F8B
Signing time: Sun 01 Mar 2026 19:01:12 +0000
Manifest this update: Sun 01 Mar 2026 19:01:12 +0000
Manifest next update: Mon 02 Mar 2026 19:01:12 +0000
Files and hashes: 1: lKOAb3QqvNXbEgT1KPTKbd6x6do.crl (hash: OekOeRYNYRtxv2QR/cnOzII66lu5BBW8vr/68k+F4tI=)
2: yA5GH7gLA1HVBnxPLthwZlHoljY.roa (hash: ZrNoguXr/VbPxJyma5te3bY/LH0TrJlliompzvOOHkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ab:50:64:6c:91:91:86:f1:22:40:69:94:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Validity
Not Before: Mar 1 19:01:12 2026 GMT
Not After : Mar 2 19:01:12 2026 GMT
Subject: CN=65a01751c324099c4d893874eae35cd4a9ec379f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:08:d0:ef:9c:f9:52:b3:bc:88:73:7e:8b:b3:
41:42:e8:e6:f1:ec:a6:09:b3:cb:2e:60:27:fe:53:
89:a2:e7:fc:13:95:fc:e3:02:53:4e:27:ef:3d:f9:
53:33:43:2e:04:de:75:a3:1c:ae:4c:4f:87:cc:f0:
b8:29:1e:dd:a2:6d:7c:8c:29:15:43:44:66:48:c1:
5b:5e:03:09:f4:55:d0:46:62:d0:ef:c3:1c:a4:63:
ae:d2:77:c0:4f:bc:d0:80:62:02:4d:d2:68:fd:88:
95:dc:e8:96:1c:8a:ac:2c:66:8c:45:77:dd:08:34:
ea:57:44:b0:62:64:c8:e2:20:36:3a:64:a6:55:e9:
8f:4c:07:67:33:4c:12:aa:f3:46:e2:5e:68:6c:fb:
99:fc:ca:eb:00:2b:4d:93:ee:ea:79:7a:e3:c1:e0:
a5:ce:b6:c6:5c:e2:f3:29:e6:31:5e:a3:08:fa:06:
28:25:73:cb:fe:02:37:90:a8:0a:00:b2:b6:2e:d9:
9f:6a:78:88:36:7b:e3:a9:56:18:ba:17:54:c3:2c:
02:bd:92:d5:47:f5:c6:9f:f7:64:fc:c6:9e:28:d5:
da:cd:06:e9:9a:f1:12:6a:0b:94:0b:2c:b9:4e:62:
b0:f0:26:21:88:58:d6:c4:c3:bb:48:cc:b2:05:9e:
23:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A0:17:51:C3:24:09:9C:4D:89:38:74:EA:E3:5C:D4:A9:EC:37:9F
X509v3 Authority Key Identifier:
keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ac:11:d9:a9:cf:1e:65:5f:04:0f:0c:2a:b4:71:3b:5a:14:
db:42:c7:f0:d4:f1:d9:51:c5:64:89:13:65:e2:24:97:5f:dd:
65:a3:06:e2:e7:eb:6f:48:25:5b:a9:6e:6e:f2:8b:a9:b3:30:
d3:e7:8f:54:a4:e5:f9:a5:7d:2e:be:0e:a3:19:8b:ec:04:a2:
15:04:2f:f6:25:8a:0f:54:6e:ec:1d:52:dc:1c:ac:34:ad:4e:
94:40:ed:d6:91:a4:a8:42:c5:14:2b:1c:8e:7a:25:bc:02:e2:
92:c4:bc:3d:5b:3f:73:96:4d:dc:4a:c3:39:c6:8c:b2:11:0f:
55:82:a3:5c:01:c7:e6:ff:1e:c9:46:21:de:90:af:36:cb:6a:
ea:ff:76:30:5c:04:83:15:cd:a1:e8:fb:41:1d:f2:c4:19:79:
22:3f:ac:de:a6:4d:3c:f7:ba:4e:b9:c8:ba:c0:54:10:a5:31:
d5:c9:69:9f:d8:6a:9e:57:62:3f:65:f3:9c:17:4c:4c:1e:b1:
c1:d2:2e:3e:40:71:36:d5:47:93:0e:64:93:a9:da:84:f8:7b:
38:20:91:41:ec:ed:3f:d8:c0:fe:d9:0b:8d:90:92:e1:cd:d4:
8f:c6:0f:0b:f6:77:78:7d:21:db:3e:98:6c:33:fa:0b:fb:79:
08:6e:85:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:01 2026 by rpki-client