Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
File: LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft (raw, json)
Hash identifier: aobSvbHbPzBrgcDuNmYAn6IL1ftv38cxQr2gL1lWKNs=
Subject key identifier: 3D:44:7E:BB:EF:B8:67:23:B8:80:F8:A7:D5:DE:59:67:2E:ED:88:48
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial: 01A0D9BB7B75E83E04B2287BF0AD4E81CEF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
Manifest number: 0B29
Signing time: Fri 25 Sep 2026 18:02:17 +0000
Manifest this update: Fri 25 Sep 2026 18:02:17 +0000
Manifest next update: Sat 26 Sep 2026 18:02:17 +0000
Files and hashes: 1: 99amBODsi9s5b9k8-QBJkKF-3q4.roa (hash: OHHvjBhCrGH4FeeziC6XYn1JSgPeAHm7eeCU0qJDW20=)
2: EPLdVGqgndROjM1h4IO_FWuwnaY.roa (hash: /YB21bOG3+IaQBnf7/CbNsMYZ3z/ogc3ZIoAgo5ItaU=)
3: LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl (hash: 9edwMIJCQIflraUl1q8lX4MCn3bMg4ck+WXRDhiWxSo=)
4: UjuNFxeX8fazTAfeX2snVIKavtY.roa (hash: k2bGDOF8FeZvoCzGHZtaXm0p6TSR5w0hxHzqhmBjQ+A=)
5: fbal2Br98lSXtg0RnGPPTjowGa0.roa (hash: RIojxTuuDh3dUT1tXWggbfWitD+sBxAZGS6Rfs/+xC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:7b:75:e8:3e:04:b2:28:7b:f0:ad:4e:81:ce:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Validity
Not Before: Sep 25 18:02:17 2026 GMT
Not After : Sep 26 18:02:17 2026 GMT
Subject: CN=3d447ebbefb86723b880f8a7d5de59672eed8848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:52:0f:90:47:9a:16:92:a9:d2:70:b9:06:bd:
50:71:26:86:cf:43:10:21:c5:a6:bd:07:63:de:fa:
bb:f1:ae:8d:2c:52:c8:4f:d9:d5:f3:94:78:c1:ce:
fe:67:59:62:d0:90:7d:55:cb:33:15:38:59:c4:4d:
dc:30:99:fd:98:03:1a:35:d4:39:83:7e:8f:46:c5:
50:0d:a6:e0:07:9e:ce:f5:60:10:c9:7d:da:fd:bd:
c8:01:13:60:a8:9e:90:23:97:01:09:ee:e3:57:b7:
7a:6f:86:31:56:b1:3d:4f:3c:ec:12:42:94:a1:65:
f1:2e:2d:0e:7e:ce:a9:61:2c:0e:32:92:f6:40:a4:
63:c8:cb:18:20:3a:a0:f4:00:fc:9c:25:38:e9:24:
af:b0:03:77:b6:13:4e:89:f3:ff:52:ce:52:8b:b9:
46:6d:1e:95:f9:b9:1a:e4:76:c3:a6:37:44:b5:6e:
5f:17:a2:16:4b:ba:0e:71:8f:57:7f:38:4e:15:54:
45:8b:d3:49:19:d4:ce:7d:db:ae:43:fd:d6:51:c3:
f8:e3:df:ba:a5:97:d1:85:63:24:22:2f:6c:03:a7:
93:51:88:64:24:8b:f3:bd:d1:fb:f1:14:ef:47:53:
65:4e:b4:07:f8:08:ce:6f:5a:f9:1b:ea:14:42:38:
87:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:44:7E:BB:EF:B8:67:23:B8:80:F8:A7:D5:DE:59:67:2E:ED:88:48
X509v3 Authority Key Identifier:
keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:e9:f7:97:b8:ba:d0:16:8a:f9:a1:21:25:13:ad:21:ee:9b:
09:69:9c:93:63:85:d5:65:4b:11:27:65:b7:22:ce:9a:a6:67:
db:44:ce:92:d1:4c:27:6d:da:b3:e6:3b:44:ab:f1:36:07:c3:
13:a4:8e:41:8b:e9:9c:91:f8:a1:53:48:79:c0:f3:25:b1:94:
b9:75:41:04:ff:14:fc:c1:1e:46:d4:4b:6b:a6:a8:ef:76:6b:
5c:80:89:73:5c:6f:56:d2:aa:95:14:7e:34:68:40:89:51:c3:
dc:92:4d:05:b0:a0:c0:d5:37:87:57:d7:9f:73:31:fe:81:49:
22:4c:75:64:91:05:3f:58:68:e8:00:aa:fc:3a:4e:73:3c:d8:
f3:77:a2:36:be:9e:2c:21:30:9e:59:d1:a1:6e:36:ca:00:15:
dd:5c:88:ed:33:91:ac:34:ae:de:bd:14:be:cd:20:ee:64:08:
d0:3f:fb:64:78:57:67:31:4f:dd:27:86:8e:e9:79:41:f0:8b:
dd:b2:e9:e6:73:1b:b9:3f:15:a3:e7:fe:0d:fb:7e:91:bd:5a:
b4:7d:dd:2f:ff:8a:7c:1e:00:1c:9e:d9:8e:d5:d2:5f:5b:6b:
9c:ad:7b:89:bb:e5:3d:10:dc:33:09:42:ac:2d:0a:90:ef:5e:
8d:81:64:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:23:35 2026 by rpki-client