Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
File: LkJv6Qhstq8B85H_T2nACDZNbu0.mft (raw, json)
Hash identifier: zZe33oH0oYgFpZIbEOZrk6C5OEqRle3xqrpcIzIHTJY=
Subject key identifier: 3C:C9:BD:CA:55:DA:84:E0:81:B1:61:2C:D8:92:DA:7B:DC:35:E1:04
Authority key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
Certificate issuer: /CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Certificate serial: 019CA9B3E4DEB91713DD9081A57E861527E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
Manifest number: 17DB
Signing time: Sun 01 Mar 2026 14:01:04 +0000
Manifest this update: Sun 01 Mar 2026 14:01:04 +0000
Manifest next update: Mon 02 Mar 2026 14:01:04 +0000
Files and hashes: 1: LkJv6Qhstq8B85H_T2nACDZNbu0.crl (hash: 3qHy5ZKevdY2/N8W4NqF8KJcg3DZHTXEr/Z6795uFGo=)
2: l_v0toEM3yMRI49WDNWj-qHlYqk.roa (hash: uFfF5zaJ+lbxDFdCJItNBEsaSDghQGS/Cx4dVGLdX4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:e4:de:b9:17:13:dd:90:81:a5:7e:86:15:27:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Validity
Not Before: Mar 1 14:01:04 2026 GMT
Not After : Mar 2 14:01:04 2026 GMT
Subject: CN=3cc9bdca55da84e081b1612cd892da7bdc35e104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:28:2f:f1:b0:0f:2b:8e:71:fc:26:df:00:c3:
fc:85:2e:8c:b6:36:35:a3:e7:45:9a:85:67:81:83:
11:89:f2:50:4b:5b:bb:19:e5:45:2e:fe:ac:f0:d7:
64:00:a2:72:a8:28:ab:f2:cf:d4:36:b3:c5:bf:3f:
3c:e7:e1:0e:55:72:73:2b:6a:c8:b1:05:28:7a:45:
df:0e:ca:97:97:89:77:96:9e:21:6c:25:b5:03:9c:
68:ae:94:a1:eb:c5:9e:ed:a8:06:85:0f:01:6e:b3:
9c:4e:69:b4:37:79:3e:ed:10:cb:45:d6:40:02:f8:
64:93:29:5c:a6:d9:4a:5d:ad:54:df:7f:09:29:42:
0b:13:8b:ea:78:74:03:a7:d5:cd:44:fe:ef:af:81:
ac:3f:d4:56:c0:52:a8:57:d2:52:78:09:0a:b2:9d:
a7:cc:16:42:ec:e4:6d:85:74:05:ec:0d:67:55:3f:
15:67:b6:c2:b8:6f:24:1d:50:d3:0a:a4:91:c0:fe:
a9:f6:e5:3a:99:4f:5d:f6:03:3d:4b:b4:32:72:f9:
0b:7c:61:db:44:87:12:d2:47:4f:a0:50:56:fc:ca:
e6:6b:f7:09:2a:71:4b:a2:6a:dc:4b:0c:e4:53:f0:
76:37:39:1a:b8:54:9e:7b:7a:0e:73:71:20:ba:63:
11:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C9:BD:CA:55:DA:84:E0:81:B1:61:2C:D8:92:DA:7B:DC:35:E1:04
X509v3 Authority Key Identifier:
keyid:2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:60:84:1b:af:06:db:12:bc:27:d7:68:3a:f2:b6:f3:0b:ed:
15:68:7d:84:ce:f7:51:3d:c9:b6:15:ac:e7:18:46:fc:3e:6f:
e4:ee:bb:3c:60:bf:94:f2:62:9e:60:63:e2:66:d7:31:74:b0:
44:fb:0b:d4:98:bc:24:8c:cd:1f:e9:6e:b5:56:34:18:48:47:
1f:9c:40:55:40:41:a6:3e:dd:9d:73:61:17:ab:7a:fc:95:20:
bb:8c:20:d6:6c:05:94:d3:c3:b2:65:f2:7a:bf:79:73:68:e6:
e9:3d:68:bc:c1:c1:91:25:96:b1:a9:7d:fc:30:42:60:1f:76:
86:03:a2:52:2c:07:84:de:d3:02:a7:e6:bc:f3:23:18:39:f6:
a7:5f:ee:c1:08:a6:a6:a3:20:31:52:29:be:7f:ce:a1:6d:79:
6d:42:1e:78:4e:94:af:f4:26:76:5a:06:dd:2c:b7:82:fe:04:
a0:45:51:63:12:44:8d:84:2a:c8:0b:05:28:4e:ee:f7:6a:03:
a3:5f:e7:bf:22:ab:bc:7d:fd:3e:86:5f:ab:8a:dc:11:6e:c5:
bd:cd:ea:01:70:fd:88:de:40:47:3a:75:3e:aa:9c:3e:9a:98:
6c:aa:bf:8c:aa:0f:79:38:40:3a:63:ed:a9:3d:11:34:9f:20:
d9:6c:6e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:54 2026 by rpki-client