Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
File: LkFFfaHqbHmxtr6lLGSnobXylkg.mft (raw, json)
Hash identifier: 6WrWj9Rg9HU8Y91kDqOcYFjgTRSziyFcG2Ap6hpfsm0=
Subject key identifier: 4E:81:65:39:1A:07:9C:91:87:CB:E0:FE:04:87:3F:0C:59:BF:0C:3A
Authority key identifier: 2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
Certificate issuer: /CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Certificate serial: 019CAAFD7B73FB390A60B1714891761EDC6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 20:01:04 +0000
Manifest this update: Sun 01 Mar 2026 20:01:04 +0000
Manifest next update: Mon 02 Mar 2026 20:01:04 +0000
Files and hashes: 1: 41BadyilkbxexUsN9_QCLE-lN9U.roa (hash: mKipKbsOuZUI5PBjgwAvlkxPu0eVLjnhl1jdP6GuFz8=)
2: LkFFfaHqbHmxtr6lLGSnobXylkg.crl (hash: 5VpzGfvDG8YuM9f5onZLX6xGpjsgSrZdNCbInu+gca4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:7b:73:fb:39:0a:60:b1:71:48:91:76:1e:dc:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Validity
Not Before: Mar 1 20:01:04 2026 GMT
Not After : Mar 2 20:01:04 2026 GMT
Subject: CN=4e8165391a079c9187cbe0fe04873f0c59bf0c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9e:71:9d:13:52:91:23:0f:2c:21:ae:d4:24:
8b:4e:18:72:e7:0f:d4:94:bb:3b:b4:da:c8:99:f1:
b2:7c:8c:06:96:67:41:21:f1:e6:1a:fa:c8:ed:fd:
44:57:89:b6:c7:21:4a:15:d1:47:8c:73:23:c2:c3:
3b:74:2c:c8:ab:3b:f5:ce:97:5b:d5:c9:6e:4a:aa:
19:db:1c:e1:74:7e:7e:56:9b:96:8d:b7:fd:83:4f:
86:22:77:6c:09:d0:47:77:b2:96:dc:e1:fc:d0:1e:
5e:34:ef:ac:f6:18:2c:28:74:45:85:a3:a9:c7:a4:
75:e2:9d:9f:a7:a2:1f:6a:a5:92:79:32:88:a7:56:
06:d3:41:18:f9:85:50:4a:34:87:1d:6d:c9:f1:6a:
bf:c8:91:d4:3d:c6:3c:41:43:06:4d:29:63:ca:e7:
c6:76:b6:3e:68:4c:a4:c4:74:ef:a9:46:50:d4:20:
61:9f:b6:78:6e:00:f3:08:96:21:93:7d:c3:b6:b9:
2c:27:f4:b4:cb:6d:88:37:44:61:84:a6:58:73:ee:
f7:88:6b:a8:dc:db:0c:dd:b4:25:d7:20:c9:f0:82:
0d:7e:ec:89:2b:d3:b8:09:c2:ce:7b:93:3b:e8:40:
c2:06:4d:a7:08:39:9e:d4:7d:88:e8:0c:b5:9c:1a:
d2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:81:65:39:1A:07:9C:91:87:CB:E0:FE:04:87:3F:0C:59:BF:0C:3A
X509v3 Authority Key Identifier:
keyid:2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:88:2e:54:31:c3:b5:c2:12:3d:28:cd:80:04:1b:28:2c:a5:
f8:0c:fc:08:f8:65:a4:6b:dd:55:e5:e4:4c:5d:9d:7b:fd:65:
f0:c7:7b:22:e3:5b:a7:49:3b:f7:77:ea:9a:60:06:0e:b5:8d:
46:a3:1e:37:9b:ba:bb:99:30:96:6a:74:77:4c:ee:ca:be:a6:
0a:d1:46:ba:0e:54:57:3f:9f:3e:73:97:25:c8:e7:e6:aa:ca:
dc:d7:7e:29:d8:95:f0:e7:d3:72:53:12:23:d0:72:b7:08:73:
22:42:7a:fe:cc:bf:27:98:aa:e8:9d:a5:83:a3:4a:13:1c:79:
9e:a3:24:61:90:ea:42:bf:c7:32:65:24:11:86:b1:b5:67:52:
db:f6:d9:76:06:3e:67:9f:f9:36:4c:16:9c:c7:73:ab:32:94:
da:c3:09:bb:f3:52:0b:90:72:04:65:05:e7:b4:12:81:f0:6b:
66:cf:d1:20:57:e9:12:3e:5b:9f:fb:83:5c:6d:6e:51:4f:a8:
fb:52:d4:34:83:87:4c:31:c1:36:8f:5f:f7:b1:b1:51:9b:c0:
bb:a2:3b:07:d0:c2:a1:6d:f3:09:bf:8b:62:c7:45:9d:95:4f:
4c:4a:e4:4b:a9:f9:b5:f0:c4:60:46:c0:8b:69:00:dd:e9:d6:
45:75:88:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:40:37 2026 by rpki-client