Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
File: LkX41ix0LqB9y_jFfVjM9dKOPrk.mft (raw, json)
Hash identifier: rh5kX0+6ey02plkRDZy24wdsU7VN2B/3bwCEukZOjUI=
Subject key identifier: 30:A3:80:E3:A6:0C:7B:D9:F9:4E:E5:4B:86:27:A3:A1:44:0B:3D:0D
Authority key identifier: 2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
Certificate issuer: /CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Certificate serial: 019FAA88AD9B1B3A8724B39F7A6E7404FA16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
Manifest number: 1965
Signing time: Tue 28 Jul 2026 21:01:51 +0000
Manifest this update: Tue 28 Jul 2026 21:01:51 +0000
Manifest next update: Wed 29 Jul 2026 21:01:51 +0000
Files and hashes: 1: 3F0Eyl_fFWBZccM3jI1k4TCeJvI.roa (hash: 1mvJ1d/O7KfiqZVWH2l7EuJBCJuW/AroLmAMi43n5kw=)
2: LkX41ix0LqB9y_jFfVjM9dKOPrk.crl (hash: lo6MYI+V5onOIwdNGz28HT2Q8ZwR6qx1gQWmUxoqOEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:ad:9b:1b:3a:87:24:b3:9f:7a:6e:74:04:fa:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Validity
Not Before: Jul 28 21:01:51 2026 GMT
Not After : Jul 29 21:01:51 2026 GMT
Subject: CN=30a380e3a60c7bd9f94ee54b8627a3a1440b3d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:9d:ff:58:2f:0e:09:77:6f:06:02:84:42:
51:ef:04:24:ac:6d:76:26:1c:cb:b6:5c:ea:bf:63:
7d:8d:e2:e5:a7:e4:4f:14:4c:62:19:e0:63:9b:fb:
f9:7a:4e:cf:ec:fe:03:4b:5c:93:99:2b:f1:9f:52:
ec:bb:bb:df:33:eb:62:f3:6a:b4:bd:7e:7d:e6:aa:
c0:c1:14:61:6f:ed:00:99:fb:dc:e4:1a:b3:c5:49:
7d:8b:cd:1b:9c:a2:75:7f:02:e8:cb:6b:e1:10:53:
1e:03:30:e2:67:55:d6:7f:87:b6:4d:fc:73:e2:5a:
72:c7:e6:fe:4b:81:42:ff:01:c2:53:d8:b5:49:6b:
58:92:c8:a1:bd:41:2b:a5:e1:4f:91:53:d8:61:24:
f6:9a:59:67:fc:64:66:de:b0:ae:2c:1e:e6:09:49:
c0:c9:cf:09:97:6a:bc:23:ac:64:fd:f9:a9:f4:3b:
e7:73:5e:99:42:78:07:30:ae:7d:fc:7c:36:09:6a:
73:6b:ef:9b:22:3a:83:73:8f:37:29:62:2c:eb:00:
0a:b6:9a:fe:3c:15:61:e1:70:04:a6:62:10:74:b8:
18:62:9a:4f:e8:ac:b6:9b:9c:00:6d:7f:7d:35:8d:
00:4e:fc:b5:3a:40:87:7f:f6:08:17:10:86:70:11:
55:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A3:80:E3:A6:0C:7B:D9:F9:4E:E5:4B:86:27:A3:A1:44:0B:3D:0D
X509v3 Authority Key Identifier:
keyid:2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:65:8a:c8:9a:27:91:47:fa:4c:90:f5:45:bd:32:f8:d2:9a:
d5:eb:85:7e:00:50:75:b7:d0:39:ba:9a:e7:e5:db:b0:fe:61:
36:3b:37:84:b1:5e:62:23:3a:b6:fa:94:7c:cf:5c:4d:57:73:
ab:24:b6:a9:0a:59:f8:72:c9:f6:bc:ff:11:f6:24:ae:d6:5b:
1a:60:33:3e:4a:14:14:b1:3d:5f:47:a2:57:45:b7:40:08:2a:
dc:7d:99:30:f8:32:94:c6:9e:b3:bb:c9:12:6c:88:99:24:f2:
7a:27:f8:bf:87:3c:17:bd:ad:65:c6:13:0e:8d:8b:54:1a:e4:
85:b1:b6:5d:5f:7c:a4:91:f0:82:a0:3b:2e:ec:66:90:29:18:
86:dc:e0:e6:66:64:af:56:7f:6d:43:a3:89:aa:98:4c:17:04:
c6:61:c7:1f:3e:5e:74:2e:04:82:d0:7b:e1:89:e7:7d:3e:68:
9c:b8:be:57:a0:e4:b3:4c:3c:70:08:d0:2d:33:6e:94:0a:7a:
b5:a2:96:82:21:b6:9d:a9:c2:3f:cc:41:cd:35:26:d9:d0:44:
cf:bd:c9:11:6a:19:4f:6a:60:73:6b:87:e0:60:eb:07:16:45:
9a:4b:e5:9f:55:a2:65:ca:1e:39:9a:04:af:0a:c6:a7:e9:03:
2e:01:b3:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiK2bGzqHJLOfem50BPoWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNDVmOGQ2MmM3NDJlYTA3ZGNiZjhjNTdkNThjY2Y1ZDI4
ZTNlYjkwHhcNMjYwNzI4MjEwMTUxWhcNMjYwNzI5MjEwMTUxWjAzMTEwLwYDVQQD
EygzMGEzODBlM2E2MGM3YmQ5Zjk0ZWU1NGI4NjI3YTNhMTQ0MGIzZDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+6d/1gvDgl3bwYChEJR7wQkrG12
JhzLtlzqv2N9jeLlp+RPFExiGeBjm/v5ek7P7P4DS1yTmSvxn1Lsu7vfM+ti82q0
vX595qrAwRRhb+0Amfvc5BqzxUl9i80bnKJ1fwLoy2vhEFMeAzDiZ1XWf4e2Tfxz
4lpyx+b+S4FC/wHCU9i1SWtYksihvUErpeFPkVPYYST2mlln/GRm3rCuLB7mCUnA
yc8Jl2q8I6xk/fmp9Dvnc16ZQngHMK59/Hw2CWpza++bIjqDc483KWIs6wAKtpr+
PBVh4XAEpmIQdLgYYppP6Ky2m5wAbX99NY0ATvy1OkCHf/YIFxCGcBFVaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCjgOOmDHvZ+U7lS4Yno6FECz0NMB8GA1UdIwQY
MBaAFC5F+NYsdC6gfcv4xX1YzPXSjj65MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGtYNDFpeDBMcUI5eV9qRmZWak05ZEtPUHJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8zMjc3NDItODE1Ni00ZmE0LTliZDUt
MjEyMGZkMDU3NWZmLzEvTGtYNDFpeDBMcUI5eV9qRmZWak05ZEtPUHJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8zMjc3NDItODE1Ni00ZmE0LTliZDUtMjEyMGZkMDU3NWZm
LzEvTGtYNDFpeDBMcUI5eV9qRmZWak05ZEtPUHJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFWWKyJon
kUf6TJD1Rb0y+NKa1euFfgBQdbfQObqa5+XbsP5hNjs3hLFeYiM6tvqUfM9cTVdz
qyS2qQpZ+HLJ9rz/EfYkrtZbGmAzPkoUFLE9X0eiV0W3QAgq3H2ZMPgylMaes7vJ
EmyImSTyeif4v4c8F72tZcYTDo2LVBrkhbG2XV98pJHwgqA7LuxmkCkYhtzg5mZk
r1Z/bUOjiaqYTBcExmHHHz5edC4EgtB74YnnfT5onLi+V6Dks0w8cAjQLTNulAp6
taKWgiG2nanCP8xBzTUm2dBEz73JEWoZT2pgc2uH4GDrBxZFmkvln1WiZcoeOZoE
rwrGp+kDLgGzGg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:20:07 2026 by rpki-client