Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
File: LKzIXJmo4dt9HFImfC3b08OeGLI.mft (raw, json)
Hash identifier: feZ9L0mW3FbmDu9Z2I2bMan7TXOKLn/gWKHJSL8a+6M=
Subject key identifier: 86:95:6F:D0:85:1F:4D:20:C9:B5:F7:2F:4B:5C:69:70:64:01:EE:82
Authority key identifier: 2C:AC:C8:5C:99:A8:E1:DB:7D:1C:52:26:7C:2D:DB:D3:C3:9E:18:B2
Certificate issuer: /CN=2cacc85c99a8e1db7d1c52267c2ddbd3c39e18b2
Certificate serial: 019D98F4927F2F2CDADDC3FDBC69D007CFA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
Manifest number: 0FD8
Signing time: Fri 17 Apr 2026 01:00:58 +0000
Manifest this update: Fri 17 Apr 2026 01:00:58 +0000
Manifest next update: Sat 18 Apr 2026 01:00:58 +0000
Files and hashes: 1: LKzIXJmo4dt9HFImfC3b08OeGLI.crl (hash: LwTllJyEj5GN9am9lxu8DiWMQ+4h8yhfC5AUSwsVaH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:92:7f:2f:2c:da:dd:c3:fd:bc:69:d0:07:cf:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cacc85c99a8e1db7d1c52267c2ddbd3c39e18b2
Validity
Not Before: Apr 17 01:00:58 2026 GMT
Not After : Apr 18 01:00:58 2026 GMT
Subject: CN=86956fd0851f4d20c9b5f72f4b5c69706401ee82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:54:99:f1:8e:b8:42:4f:32:a4:c3:00:dd:
74:c9:95:aa:71:73:56:a0:78:9f:17:4d:96:75:fc:
48:e3:15:4a:69:2f:f1:2e:f3:c5:02:41:3b:c0:70:
9d:d7:37:43:2c:f3:87:ba:ea:ba:a2:da:6c:0b:7c:
3f:36:48:de:f0:90:81:c4:25:c7:aa:63:48:ca:27:
cb:82:92:6c:d8:40:39:74:b7:14:70:b4:d0:79:48:
53:d0:51:d6:c0:b3:33:6e:6a:df:0f:86:18:d6:2d:
7b:1d:37:9f:9c:23:a5:be:cb:0a:bc:d1:2a:e3:58:
82:a4:e5:bc:fd:9a:0f:33:00:9b:5c:d0:da:c3:b7:
9b:b7:c4:16:09:b4:18:59:e4:3e:80:8b:79:56:0c:
f8:d1:05:32:da:de:79:d0:2e:b8:18:4c:c4:17:78:
67:f2:55:e7:d4:32:70:53:ef:69:c2:ea:01:2f:90:
71:35:5d:37:5f:63:51:cb:93:f5:83:65:59:ba:c3:
f6:ab:8b:4e:70:71:5d:25:ed:d0:85:6b:0a:10:3c:
ea:e4:3d:4a:ae:44:f0:f0:e9:0f:05:f1:b7:3b:cf:
d5:ab:2b:7a:51:fa:2f:2c:c5:62:d1:0c:65:91:1e:
7d:14:ee:41:10:6d:16:e3:7a:2d:1e:9f:36:fe:22:
d1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:95:6F:D0:85:1F:4D:20:C9:B5:F7:2F:4B:5C:69:70:64:01:EE:82
X509v3 Authority Key Identifier:
keyid:2C:AC:C8:5C:99:A8:E1:DB:7D:1C:52:26:7C:2D:DB:D3:C3:9E:18:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a4:fb:7a:f6:ff:63:40:00:57:f5:98:6e:19:2c:58:34:28:
fa:9e:f7:f3:7e:f4:48:c7:16:b5:c6:d5:14:84:66:01:7e:af:
1b:66:da:f1:30:4d:d3:a0:12:3c:db:b6:7a:8f:ee:0f:11:03:
57:9b:45:2d:c0:d3:bb:6d:04:82:b5:33:84:15:ec:74:2c:d8:
5b:f4:21:2c:fc:0e:a2:ee:6c:65:65:b6:2c:e9:df:64:14:43:
1f:0a:c4:d0:2e:ad:88:4b:43:7a:d7:83:c8:8d:df:c0:e6:41:
7e:a4:6e:28:9f:17:ad:1d:25:3c:c9:ff:5f:9f:3f:d6:e5:6d:
8f:2c:17:4a:53:d4:83:68:25:6d:0d:94:8f:4c:40:3c:24:23:
90:07:e9:fd:d4:38:5f:4e:39:20:e2:cc:95:81:83:9b:4e:5d:
8b:b3:c3:2f:92:42:93:19:17:99:2d:37:24:ba:39:6a:b1:1d:
b9:9b:c6:87:00:8f:43:63:79:8c:04:85:a7:86:2a:70:04:19:
b1:04:16:33:10:db:8a:f4:d4:df:30:20:7c:f5:b5:0d:fc:c4:
e6:53:3c:5e:6f:8f:fd:3c:35:68:8f:d4:9e:66:d2:92:66:f5:
40:a4:48:4a:2d:04:75:4a:9e:b5:5d:87:5c:26:f8:a8:01:e4:
78:8e:ac:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:17:34 2026 by rpki-client