Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
File: LkFFfaHqbHmxtr6lLGSnobXylkg.mft (raw, json)
Hash identifier: YIy+FydzwVCwv5lp6ZmZSEuvfPH+k0aPflLJUoMPHkI=
Subject key identifier: 27:1C:D5:42:79:CE:CD:69:1F:23:6C:59:7B:BE:7F:4E:4E:3C:A5:ED
Authority key identifier: 2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
Certificate issuer: /CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Certificate serial: 01A0D314F9A099AC3CFB8C3A1F4B09CCE636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 11:02:42 +0000
Manifest this update: Thu 24 Sep 2026 11:02:42 +0000
Manifest next update: Fri 25 Sep 2026 11:02:42 +0000
Files and hashes: 1: 41BadyilkbxexUsN9_QCLE-lN9U.roa (hash: mKipKbsOuZUI5PBjgwAvlkxPu0eVLjnhl1jdP6GuFz8=)
2: LkFFfaHqbHmxtr6lLGSnobXylkg.crl (hash: KsUlcfxApfW/fkzfdMkBc8kWxdEhzhu4q60ghQUN63M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:14:f9:a0:99:ac:3c:fb:8c:3a:1f:4b:09:cc:e6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Validity
Not Before: Sep 24 11:02:42 2026 GMT
Not After : Sep 25 11:02:42 2026 GMT
Subject: CN=271cd54279cecd691f236c597bbe7f4e4e3ca5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c6:af:82:fe:9f:a1:df:47:62:3d:b3:7f:45:
67:0c:0b:c6:78:cd:cb:ee:1e:1c:7e:8d:da:dd:02:
39:1f:fb:78:b1:98:e5:77:22:d7:b0:44:88:ee:d6:
6b:7c:14:34:c7:e8:ba:b1:95:68:2a:dd:61:08:68:
0c:7e:be:5b:eb:df:8d:f7:c2:fb:6d:dc:6a:d3:56:
ee:a6:8e:be:17:c4:74:60:a4:3f:84:2f:e0:9e:c9:
ba:8d:11:07:cd:43:12:dc:1a:5e:60:d0:05:e4:96:
4c:b7:ae:72:59:46:a3:da:f3:ae:4b:c7:ab:87:48:
5a:4d:e2:6b:98:d4:ec:9f:59:c6:d5:77:b1:ce:59:
db:52:98:83:8e:0b:d4:b4:d0:54:d9:63:31:84:a6:
a4:56:c5:08:c7:2f:79:81:5d:f3:15:c3:60:82:e7:
66:7f:45:22:9d:95:16:27:0f:1a:0a:af:a7:d5:55:
3a:2f:5d:d3:5e:02:8e:0a:18:a7:b7:58:ca:41:6f:
cb:82:f6:a0:ab:cf:3a:34:b3:9a:47:15:f1:f5:bf:
f8:a0:7b:c9:d2:fa:a2:96:45:e8:21:15:cb:73:6e:
1e:0a:05:1a:c6:91:20:11:97:95:19:c5:8b:d8:07:
9b:b0:d1:68:6f:1a:01:2f:ea:b8:53:31:70:20:f2:
34:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1C:D5:42:79:CE:CD:69:1F:23:6C:59:7B:BE:7F:4E:4E:3C:A5:ED
X509v3 Authority Key Identifier:
keyid:2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:55:f3:7d:e7:d8:d1:95:5f:3d:f4:1b:b9:85:be:18:d4:6f:
2a:59:d5:b8:07:e1:c9:02:c4:b6:aa:b2:5f:01:c6:3b:1b:c2:
08:2c:bc:9d:3a:c1:db:e9:3a:b6:93:67:d4:c9:0d:1c:20:0e:
90:6a:23:cc:d7:aa:52:83:8f:ca:28:c6:8a:ab:0f:a3:3a:95:
e2:91:39:22:50:a6:59:84:33:a0:a0:e7:ae:6a:72:ee:fd:2f:
91:3d:e4:18:71:fe:9b:10:6a:f2:bd:9d:f8:35:2c:3f:6c:46:
4f:37:ab:bd:37:47:be:35:0a:ad:50:36:57:a6:5e:b0:96:a6:
ef:cb:0e:dd:9e:d7:1c:89:9c:8b:72:40:b0:79:3e:ec:7b:ee:
d4:44:5e:d0:eb:50:a1:17:5a:bf:bd:85:e3:62:a3:cf:b3:c2:
d3:72:07:1b:67:ba:d8:51:a8:cc:3d:c5:11:d2:b1:e9:29:d9:
c1:1e:38:4d:ee:ba:b7:84:3f:74:d0:b1:a4:e3:bc:0e:ec:dc:
b7:d1:04:32:77:c2:4a:3a:d7:e0:84:2b:e8:52:50:d2:c8:4f:
a0:35:7c:d2:63:fc:31:e9:7c:cd:03:4d:d2:32:f1:3c:a8:9f:
02:b8:ee:42:81:7d:db:29:9f:fe:82:b2:b5:56:63:d6:f9:35:
a4:2a:b9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:19:47 2026 by rpki-client