Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
File: LkJv6Qhstq8B85H_T2nACDZNbu0.mft (raw, json)
Hash identifier: kfcnEgAxxRJ5OoWGyKxKfVvUzEto5bylMbMNBmm/IYg=
Subject key identifier: EE:E0:F4:CF:B8:7A:86:24:33:22:07:63:CF:30:71:80:34:B3:39:DF
Authority key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
Certificate issuer: /CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Certificate serial: 019D992AF4A2E30D4B30B70FA4CD7C527742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
Manifest number: 1857
Signing time: Fri 17 Apr 2026 02:00:22 +0000
Manifest this update: Fri 17 Apr 2026 02:00:22 +0000
Manifest next update: Sat 18 Apr 2026 02:00:22 +0000
Files and hashes: 1: LkJv6Qhstq8B85H_T2nACDZNbu0.crl (hash: hR5XsVUp8M2F+W3gpucStrjLx16QB7nrO6tUHMNarqQ=)
2: l_v0toEM3yMRI49WDNWj-qHlYqk.roa (hash: uFfF5zaJ+lbxDFdCJItNBEsaSDghQGS/Cx4dVGLdX4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:f4:a2:e3:0d:4b:30:b7:0f:a4:cd:7c:52:77:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Validity
Not Before: Apr 17 02:00:22 2026 GMT
Not After : Apr 18 02:00:22 2026 GMT
Subject: CN=eee0f4cfb87a862433220763cf30718034b339df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:94:d9:7f:ba:f0:32:11:20:d1:26:d4:23:fb:
cc:36:73:03:de:df:20:d9:5e:a9:d3:62:46:0b:ca:
07:86:dc:b9:87:fb:de:f2:c6:84:df:69:25:8e:16:
f4:b1:8e:6f:85:1e:85:9e:70:92:99:21:c2:5a:c9:
18:97:7a:d0:0b:7e:2e:08:6d:aa:8b:18:09:c2:59:
52:db:d8:c2:93:ea:47:b8:19:b9:7c:26:73:9e:34:
e0:30:bd:c3:d6:96:a6:35:42:0d:03:52:04:38:0a:
97:0f:11:99:00:d5:0c:8f:be:16:87:30:05:bf:da:
00:f5:61:0b:c4:68:41:10:7e:89:4c:81:60:0b:ef:
c3:d2:32:5f:f6:52:39:92:2d:c2:ae:49:b4:f7:5e:
09:16:a5:53:92:e1:37:79:bf:41:71:95:e4:80:eb:
e3:ec:76:b5:90:7a:7c:fa:13:80:b0:62:78:0e:7e:
bd:7d:58:f0:a4:85:be:90:c5:7d:69:20:47:3b:54:
9c:24:bc:2f:a5:df:81:9d:69:f5:49:11:28:7e:02:
2a:58:45:25:13:62:95:9b:6f:6e:d9:50:45:fe:0c:
b0:53:69:5e:0c:e4:07:08:6b:ae:a9:42:b1:c8:e9:
18:c3:65:75:89:6d:b1:5e:96:c3:b5:50:a9:70:0e:
7a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E0:F4:CF:B8:7A:86:24:33:22:07:63:CF:30:71:80:34:B3:39:DF
X509v3 Authority Key Identifier:
keyid:2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:bf:2b:1d:0b:33:ae:45:01:f0:9e:74:22:6e:05:3b:8b:6b:
c7:e9:ae:ba:3d:12:da:b5:2d:ca:1e:75:49:fc:98:22:79:b3:
c5:de:a1:b6:f7:a4:22:3f:cf:48:84:32:db:b4:e9:38:0a:f7:
38:9b:79:e0:13:6d:98:b0:db:68:69:fc:ee:11:d7:dc:9a:21:
24:32:f2:86:8f:5e:e0:ff:d1:11:c8:da:fc:8c:55:b9:cd:e6:
fc:5d:a0:f4:24:d8:8a:2f:53:ab:45:bf:f7:a5:7f:51:ff:a7:
cb:d3:c8:30:72:86:b4:8b:64:31:fb:83:a4:34:8c:0b:28:38:
5f:54:3d:68:73:5c:4e:27:7b:21:e8:ce:e3:7d:ab:2a:98:59:
3b:1a:6a:c9:45:8a:03:6f:7d:fb:7b:a1:85:23:67:85:d3:af:
a2:b5:cf:f0:4f:f2:72:b6:f9:5e:31:98:b4:46:db:5e:4d:00:
1c:be:2c:31:7a:9a:de:f4:b3:41:82:22:17:82:8a:db:0d:b6:
b0:8d:51:5a:7c:96:6e:38:8f:64:5d:b2:f7:a5:fb:a5:9a:0f:
57:05:0b:b5:fb:d0:f5:38:b1:43:ef:48:e3:a9:90:71:c8:27:
9b:e8:8b:69:8c:a7:5d:d0:53:7c:79:d5:ee:6f:24:5d:69:14:
e6:92:83:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:51:48 2026 by rpki-client