Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
File: LkX41ix0LqB9y_jFfVjM9dKOPrk.mft (raw, json)
Hash identifier: aZuRz3Ro0EnF/jymDAsb0EAKKULbRVY0MfNjtdzTpWk=
Subject key identifier: BD:58:2B:32:1B:5E:53:F2:A9:6B:9F:32:98:88:71:E3:39:26:09:D2
Authority key identifier: 2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
Certificate issuer: /CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Certificate serial: 019CA9EB5C5AF1DC658B0B0ED4DD921EC977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
Manifest number: 17D7
Signing time: Sun 01 Mar 2026 15:01:39 +0000
Manifest this update: Sun 01 Mar 2026 15:01:39 +0000
Manifest next update: Mon 02 Mar 2026 15:01:39 +0000
Files and hashes: 1: 3F0Eyl_fFWBZccM3jI1k4TCeJvI.roa (hash: 1mvJ1d/O7KfiqZVWH2l7EuJBCJuW/AroLmAMi43n5kw=)
2: LkX41ix0LqB9y_jFfVjM9dKOPrk.crl (hash: OKGbmRWwfAf196XTkgVgNEibb4bJJNFtoVCWDgZ7nRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:5c:5a:f1:dc:65:8b:0b:0e:d4:dd:92:1e:c9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Validity
Not Before: Mar 1 15:01:39 2026 GMT
Not After : Mar 2 15:01:39 2026 GMT
Subject: CN=bd582b321b5e53f2a96b9f32988871e3392609d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e8:03:e0:63:d0:c9:48:f6:15:51:60:51:b8:
21:5d:fd:67:a5:d6:e2:e4:7a:6c:eb:13:27:ef:88:
f8:ee:b3:aa:7b:9d:41:03:45:8d:71:1e:65:03:f5:
94:06:08:3c:81:31:27:65:90:ad:e2:7d:d5:6b:cf:
9b:c5:47:5b:c1:02:44:a8:99:d6:0f:19:21:62:1f:
2a:1d:52:0c:85:ae:09:9e:99:3d:02:e3:19:4c:35:
be:4f:31:12:54:46:d1:46:4d:f5:61:92:ab:fb:79:
2f:43:23:6f:f4:c3:45:8a:76:8c:6f:50:84:39:1b:
db:fe:4d:b2:9c:a3:dd:4b:5e:0b:e3:de:58:1e:b3:
e7:2c:da:11:25:0c:b5:99:99:5c:e1:77:c6:bc:19:
46:6b:87:c9:ed:46:e0:0f:72:0f:1b:9f:56:7e:e1:
19:98:0f:75:d0:e0:8d:76:d1:a3:4a:b3:00:2e:86:
7f:de:88:b1:b2:65:71:55:2a:d0:30:34:fd:08:5c:
d6:9d:7c:21:cd:66:3f:bc:ff:28:90:91:22:87:df:
1d:33:00:8d:33:bc:b2:e9:7c:37:31:af:dc:30:5d:
7b:62:4f:8b:a0:a3:54:cc:39:29:d6:34:33:a3:4f:
52:e3:00:bd:2b:53:ef:26:74:a8:09:e0:5e:0d:cc:
e1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:58:2B:32:1B:5E:53:F2:A9:6B:9F:32:98:88:71:E3:39:26:09:D2
X509v3 Authority Key Identifier:
keyid:2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b1:cc:5d:97:f0:08:6c:bf:07:5a:ea:48:5f:c6:fc:81:04:
7f:3a:78:ff:97:d2:c6:cb:94:0b:ee:e4:cf:60:c4:e6:b0:5a:
8d:20:78:5c:2a:b2:7d:f9:31:96:2a:c4:94:c2:24:0c:2e:2e:
ec:f8:bf:83:b2:df:86:8c:f8:33:7b:a4:3a:b3:a4:d2:3f:ba:
4e:08:a9:d4:33:97:37:49:ad:38:69:9f:cf:c6:c8:41:fc:4c:
2a:21:62:04:2c:3d:ae:ee:af:74:63:18:07:3b:a4:ed:3f:e4:
bb:e1:98:42:aa:d5:6d:55:d0:55:09:b6:64:ae:b6:53:65:93:
39:43:f8:a1:a8:f6:48:71:b2:08:8d:4c:de:3a:95:f5:95:bf:
02:3c:79:45:23:b4:d8:b4:74:83:1e:c4:fb:44:96:31:48:3d:
47:5d:82:68:2f:7c:bc:b7:76:ac:dc:28:0b:57:c6:01:9c:cf:
90:dc:7d:b3:c7:5b:c8:bb:54:e7:fe:03:8a:3d:36:8d:34:2d:
40:a6:03:96:e2:27:1c:91:10:22:05:2f:d6:ec:e3:a7:25:67:
71:4f:aa:ea:39:59:34:c3:52:c3:d2:7e:a0:32:46:42:bd:bc:
58:c3:b5:1c:cc:69:32:7e:6b:93:d1:11:55:69:3a:f3:6e:05:
61:d7:49:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:25 2026 by rpki-client