Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
File: LkFFfaHqbHmxtr6lLGSnobXylkg.mft (raw, json)
Hash identifier: cQ4r1R5u1TzGReeyqGszoELyuY++42gjQIihju7nzl4=
Subject key identifier: 35:4C:11:B2:67:69:2D:31:CB:E7:99:2B:57:E5:2B:F2:36:70:53:B8
Authority key identifier: 2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
Certificate issuer: /CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Certificate serial: 019FAB9A7D12603146FD41AF1B4AC4AC0917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 02:00:56 +0000
Manifest this update: Wed 29 Jul 2026 02:00:56 +0000
Manifest next update: Thu 30 Jul 2026 02:00:56 +0000
Files and hashes: 1: 41BadyilkbxexUsN9_QCLE-lN9U.roa (hash: mKipKbsOuZUI5PBjgwAvlkxPu0eVLjnhl1jdP6GuFz8=)
2: LkFFfaHqbHmxtr6lLGSnobXylkg.crl (hash: 69uO8JXtL89QFxez0hZDCWy9qMqiFbQk8ejQ6vVT2+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:7d:12:60:31:46:fd:41:af:1b:4a:c4:ac:09:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Validity
Not Before: Jul 29 02:00:56 2026 GMT
Not After : Jul 30 02:00:56 2026 GMT
Subject: CN=354c11b267692d31cbe7992b57e52bf2367053b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9b:f1:92:67:05:0f:a9:62:36:3c:ce:f1:b8:
5d:47:23:dd:e9:5b:dd:69:39:dd:d6:d1:16:fd:d2:
93:62:22:b0:e6:a2:bd:e1:79:7a:dc:da:52:7d:8b:
e4:dd:5a:47:28:1e:d8:f9:4b:68:a1:b0:0e:de:93:
39:4a:3e:f0:d2:7b:a4:f0:ce:56:17:00:c2:ac:0c:
f7:70:6e:59:b8:b1:78:db:c6:d3:e6:a9:67:ec:f3:
c4:e0:1d:02:bf:d0:3e:7d:e5:cf:3a:54:7c:6f:2f:
25:dd:45:f3:f5:12:91:6d:55:12:98:d9:55:4f:00:
2e:b8:fc:ca:d0:89:8d:63:14:0e:44:45:ae:0c:a3:
4a:3e:53:b9:87:e8:eb:4c:33:e1:cd:61:9a:d7:ab:
57:f8:c6:6e:4c:5d:84:61:a8:71:d3:69:e3:26:04:
24:4f:98:91:79:29:16:6e:90:56:61:a9:0a:f7:7d:
58:e3:f7:cd:0b:c9:d7:f7:d0:43:c6:6c:20:ed:b0:
64:a9:dd:6d:a0:40:38:9c:dc:9d:71:1a:8d:a1:c2:
ca:1e:ef:0f:c2:d9:95:1a:a9:06:33:ac:26:32:dd:
ea:89:df:07:4c:35:32:17:df:03:90:a6:88:6a:63:
ba:8b:03:59:ff:b4:44:9e:c7:60:0b:a7:da:45:48:
23:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4C:11:B2:67:69:2D:31:CB:E7:99:2B:57:E5:2B:F2:36:70:53:B8
X509v3 Authority Key Identifier:
keyid:2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:af:10:ee:46:c3:df:20:e7:bb:0e:5d:f2:35:42:59:10:0c:
e8:fa:e2:52:30:4e:a1:ba:20:cb:4c:da:4f:5b:b5:93:45:f1:
d7:75:ef:15:2e:35:dd:82:d3:ae:45:aa:bb:dc:6e:05:0c:9f:
50:b7:96:15:e0:20:8c:df:af:b9:de:18:97:fc:4b:11:bb:22:
bb:e5:75:86:7e:af:15:80:ea:03:c5:f8:cd:d4:d3:33:f1:0d:
bb:a1:f6:dc:18:1b:a3:16:8c:c7:c2:3f:d4:94:85:ba:c0:fc:
88:64:72:a0:c0:a1:e4:80:42:8c:2b:dd:65:3a:ae:18:ce:0a:
31:5c:f1:89:78:2c:4a:fd:2e:f5:b1:80:8c:ea:ec:1e:6a:2c:
e9:90:7d:c3:3d:0e:8e:7a:35:74:04:15:1f:de:96:c2:53:e2:
b8:1a:3d:74:c5:bb:fd:10:21:5d:ed:4a:7b:9d:c7:b6:ca:9c:
d4:ac:bb:43:9a:52:2f:fa:8d:fd:dd:48:88:fe:98:9e:97:b5:
f5:b3:29:91:e8:d3:13:69:ce:90:1a:3c:bf:1f:eb:19:e6:39:
5b:cf:cb:86:0a:2a:74:c9:4e:b8:64:b9:d8:65:82:09:04:ea:
f6:1e:00:e8:e7:fc:e2:5f:36:b5:c1:98:2a:fa:c9:d9:6b:b3:
63:a8:8d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:46:01 2026 by rpki-client