Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
File: LkX41ix0LqB9y_jFfVjM9dKOPrk.mft (raw, json)
Hash identifier: uNrBJJYQwgB5u/IcapMsDvhS9aIiE1olOFPtHzMp2ow=
Subject key identifier: 42:CE:D5:E0:37:C1:9E:4E:C2:E5:0F:42:5D:88:6A:D6:80:F7:43:F8
Authority key identifier: 2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
Certificate issuer: /CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Certificate serial: 01A0BEB0C2A73A72CB863EE5233DC3677B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
Manifest number: 19F4
Signing time: Sun 20 Sep 2026 12:00:50 +0000
Manifest this update: Sun 20 Sep 2026 12:00:50 +0000
Manifest next update: Mon 21 Sep 2026 12:00:50 +0000
Files and hashes: 1: 3F0Eyl_fFWBZccM3jI1k4TCeJvI.roa (hash: 1mvJ1d/O7KfiqZVWH2l7EuJBCJuW/AroLmAMi43n5kw=)
2: LkX41ix0LqB9y_jFfVjM9dKOPrk.crl (hash: cUyMF8KdkL7sxh+SCMbUj3Zj/N8Z6b4gL2kjKh9hENg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:c2:a7:3a:72:cb:86:3e:e5:23:3d:c3:67:7b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Validity
Not Before: Sep 20 12:00:50 2026 GMT
Not After : Sep 21 12:00:50 2026 GMT
Subject: CN=42ced5e037c19e4ec2e50f425d886ad680f743f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d7:53:aa:cf:da:43:18:6a:07:d5:41:7b:7d:
74:a7:4a:ae:ba:21:4d:b2:d4:16:55:76:49:6c:bb:
71:2c:91:a6:43:15:e5:46:3b:cb:c8:21:38:f2:25:
d7:fe:19:a2:26:b5:08:b7:28:ea:3e:fb:b1:b9:79:
e6:5c:9a:8c:da:e0:ca:b0:5c:ca:26:c2:5f:16:21:
04:8f:4d:14:fc:19:30:4a:d7:9a:61:3e:9c:ef:75:
71:37:8f:af:b5:58:e0:be:f5:93:34:f1:4f:14:a7:
95:94:a3:f8:54:fe:5e:3d:85:8b:f5:bc:7a:dc:62:
0a:c5:51:9e:43:37:e1:3a:dd:51:9c:1c:a1:df:26:
fd:2b:19:2f:00:3b:82:69:6e:67:0b:22:03:bc:34:
27:1d:08:0d:8d:1d:ed:2f:72:bb:4c:98:3c:80:e7:
97:42:a1:d0:de:c9:c7:43:f8:c7:3b:ec:81:56:95:
d3:e0:e1:56:0c:e6:ef:65:c9:68:ac:c5:bc:67:fb:
71:49:b7:3c:7a:7e:89:b3:a6:c7:08:b6:a1:cb:29:
68:39:3d:5d:17:92:5f:7c:97:50:f2:a5:c2:bc:a5:
2f:62:7a:4c:ee:59:de:c5:53:4c:02:80:ef:3e:a7:
59:22:0a:91:24:31:74:dd:bc:cc:d2:7c:59:aa:a3:
00:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CE:D5:E0:37:C1:9E:4E:C2:E5:0F:42:5D:88:6A:D6:80:F7:43:F8
X509v3 Authority Key Identifier:
keyid:2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d4:d4:7e:76:69:91:57:d6:9b:0c:d5:7a:aa:32:27:ca:b6:
7c:2f:fa:0b:0f:59:03:0f:5f:03:4f:b8:01:a0:1e:45:13:3d:
60:18:30:ee:38:db:cf:5b:9f:6e:5a:7b:0f:7a:87:0b:06:fa:
a1:a2:f5:21:87:c7:3f:ed:2a:0f:4b:3f:15:e8:a3:4e:81:f9:
b7:91:68:89:42:56:7f:a0:18:55:1d:9e:85:8c:0b:ce:67:1f:
30:89:de:1d:c8:18:bd:ed:f4:9f:87:f3:9c:1e:45:de:f4:73:
38:c2:f7:8e:89:ef:01:77:4a:f1:71:ea:e3:40:e9:fc:c5:9e:
ea:cc:3e:3f:19:4b:7f:42:5d:54:25:e0:c8:da:3f:0d:c1:71:
12:09:6f:1a:97:84:7a:20:ab:08:33:a1:98:7c:ad:82:a7:00:
11:3d:9e:65:fb:67:9c:c8:89:83:32:fd:f8:ce:26:ab:19:9f:
38:02:9f:27:3f:d8:03:8d:e4:1d:f9:13:6b:a8:fd:b0:bd:96:
3c:03:43:5e:68:00:ca:4f:91:fe:2d:8e:07:15:7f:fc:5f:43:
8e:22:07:f6:e7:09:ef:08:2c:ac:76:e6:61:68:76:f1:a3:65:
41:fb:1d:a5:bc:c6:7f:24:42:72:e9:33:b2:0e:bd:a1:e2:21:
30:6e:05:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:31:38 2026 by rpki-client