Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
File: LkFFfaHqbHmxtr6lLGSnobXylkg.mft (raw, json)
Hash identifier: L0GdyMZ99kIQEi9tmwUE24rUAuOKGV95+Molen29nVU=
Subject key identifier: 6A:BF:72:EC:31:DC:28:E4:73:32:FD:D3:9F:12:C4:A1:B2:8D:26:0E
Authority key identifier: 2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
Certificate issuer: /CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Certificate serial: 019EC1EE1823619175366A0E0D3044419A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 17:01:06 +0000
Manifest this update: Sat 13 Jun 2026 17:01:06 +0000
Manifest next update: Sun 14 Jun 2026 17:01:06 +0000
Files and hashes: 1: 41BadyilkbxexUsN9_QCLE-lN9U.roa (hash: mKipKbsOuZUI5PBjgwAvlkxPu0eVLjnhl1jdP6GuFz8=)
2: LkFFfaHqbHmxtr6lLGSnobXylkg.crl (hash: 3MEyeyLezOlKTT6CVPD3VU5E7MxEhaLVdXacCUQE0To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ee:18:23:61:91:75:36:6a:0e:0d:30:44:41:9a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Validity
Not Before: Jun 13 17:01:06 2026 GMT
Not After : Jun 14 17:01:06 2026 GMT
Subject: CN=6abf72ec31dc28e47332fdd39f12c4a1b28d260e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5f:fd:9b:9f:5e:61:a6:eb:ad:35:f9:8c:92:
be:1d:2e:f4:90:19:0f:ea:69:20:69:c8:7c:95:dd:
7e:f8:1a:e1:0e:b0:d2:b1:4a:33:8b:70:64:d3:12:
d8:a1:01:eb:08:05:d7:3b:f2:9e:6c:a8:74:89:34:
33:14:a7:fc:33:ce:f8:3d:f9:dc:26:39:b7:a8:83:
fe:ee:de:01:8d:91:2e:ed:c8:d1:76:5e:c5:63:08:
41:9a:0d:3c:19:7f:c4:e8:0a:88:68:48:aa:81:cf:
f4:b2:af:27:bc:bd:96:82:94:8a:9b:eb:5b:f6:4f:
3c:1f:5d:85:bf:0f:ff:53:c1:de:42:a1:a4:84:9b:
80:1e:83:27:17:ad:d0:64:1e:16:6e:10:15:9b:1d:
42:e1:49:af:47:20:6f:1b:76:01:5d:11:84:ec:c3:
93:cf:12:25:ab:a1:16:36:95:23:2b:2b:30:cb:b1:
fa:67:3e:14:3e:66:ee:51:a3:5d:7b:8c:b1:ea:dc:
d6:a5:06:e8:a3:c0:7e:e4:68:07:db:b0:ff:c5:89:
f4:6b:1d:ef:45:dc:de:4a:07:46:a5:6e:bf:44:71:
67:47:28:1b:b4:7f:6c:83:27:72:b9:a2:3f:34:3c:
85:ef:1d:45:d7:09:eb:0b:a4:09:87:08:74:3b:1c:
26:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BF:72:EC:31:DC:28:E4:73:32:FD:D3:9F:12:C4:A1:B2:8D:26:0E
X509v3 Authority Key Identifier:
keyid:2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:1e:85:1f:8e:d6:14:2f:6d:39:3e:22:0f:d2:b3:c8:a3:7d:
b6:6a:23:f0:96:86:99:0e:05:f0:02:e2:44:8d:e8:e2:90:47:
d8:2f:00:f4:b1:ec:26:ea:0d:62:6c:f8:6d:b9:3f:fc:d1:67:
22:15:38:20:e6:1c:ed:7c:15:ac:00:56:39:29:a1:80:6f:aa:
1d:3a:8a:b7:43:74:aa:a6:7f:72:e5:70:f3:1c:0d:f6:7a:4b:
80:a3:20:c6:22:90:f1:02:f4:32:d2:ff:a0:81:85:61:05:59:
b9:e0:2c:d7:60:ae:ff:e6:38:bb:b5:f8:2f:c3:9f:70:ca:64:
b1:cc:8a:ff:47:03:a4:14:6c:7f:66:50:4a:1f:8b:10:53:24:
6e:de:84:d3:5e:45:5a:29:91:4b:d4:f9:05:07:63:79:e4:30:
c6:c2:4b:96:1f:76:5f:c1:be:d5:2b:50:b1:b3:8a:72:f6:6f:
4c:3e:67:be:08:ff:cb:ce:0e:88:5b:af:95:93:34:ad:e7:21:
cf:26:be:ef:4b:41:1d:f6:2e:8d:42:24:12:b8:a6:ae:71:8f:
57:9f:de:a8:18:f5:14:a3:48:58:c8:52:8f:e9:99:77:29:63:
6d:e2:e0:63:6a:8f:fb:4c:cc:30:e8:a4:32:70:aa:66:e2:76:
3e:56:5a:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7B7hgjYZF1NmoODTBEQZovMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNDE0NTdkYTFlYTZjNzliMWI2YmVhNTJjNjRhN2ExYjVm
Mjk2NDgwHhcNMjYwNjEzMTcwMTA2WhcNMjYwNjE0MTcwMTA2WjAzMTEwLwYDVQQD
Eyg2YWJmNzJlYzMxZGMyOGU0NzMzMmZkZDM5ZjEyYzRhMWIyOGQyNjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1/9m59eYabrrTX5jJK+HS70kBkP
6mkgach8ld1++BrhDrDSsUozi3Bk0xLYoQHrCAXXO/KebKh0iTQzFKf8M874Pfnc
Jjm3qIP+7t4BjZEu7cjRdl7FYwhBmg08GX/E6AqIaEiqgc/0sq8nvL2WgpSKm+tb
9k88H12Fvw//U8HeQqGkhJuAHoMnF63QZB4WbhAVmx1C4UmvRyBvG3YBXRGE7MOT
zxIlq6EWNpUjKyswy7H6Zz4UPmbuUaNde4yx6tzWpQboo8B+5GgH27D/xYn0ax3v
RdzeSgdGpW6/RHFnRygbtH9sgydyuaI/NDyF7x1F1wnrC6QJhwh0OxwmHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGq/cuwx3CjkczL9058SxKGyjSYOMB8GA1UdIwQY
MBaAFC5BRX2h6mx5sba+pSxkp6G18pZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZmFkOGItYTAzMy00NDg0LTg4NWUt
ZTAyODcyZDFkYjAxLzEvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84ZmFkOGItYTAzMy00NDg0LTg4NWUtZTAyODcyZDFkYjAx
LzEvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANB6FH47W
FC9tOT4iD9KzyKN9tmoj8JaGmQ4F8ALiRI3o4pBH2C8A9LHsJuoNYmz4bbk//NFn
IhU4IOYc7XwVrABWOSmhgG+qHTqKt0N0qqZ/cuVw8xwN9npLgKMgxiKQ8QL0MtL/
oIGFYQVZueAs12Cu/+Y4u7X4L8OfcMpkscyK/0cDpBRsf2ZQSh+LEFMkbt6E015F
WimRS9T5BQdjeeQwxsJLlh92X8G+1StQsbOKcvZvTD5nvgj/y84OiFuvlZM0rech
zya+70tBHfYujUIkErimrnGPV5/eqBj1FKNIWMhSj+mZdyljbeLgY2qP+0zMMOik
MnCqZuJ2PlZaBw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:56:32 2026 by rpki-client