Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
File: LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft (raw, json)
Hash identifier: RKSwN9YSKWjjPavdZFQ8npGd8vhgSmQQD/J64109foE=
Subject key identifier: 50:00:6A:A7:25:F5:40:45:A5:EB:C4:FE:E6:C8:57:D8:61:72:70:B9
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial: 019E1DFE4176EE3033E22349541294C0FC2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
Manifest number: 09B4
Signing time: Tue 12 May 2026 21:01:02 +0000
Manifest this update: Tue 12 May 2026 21:01:02 +0000
Manifest next update: Wed 13 May 2026 21:01:02 +0000
Files and hashes: 1: C2FZwLx5J6LOD83i2EDZOR5RtUI.roa (hash: TfNzI2cSGpuwkVH14MS6urWLY0KlAYesDO88Jrb6EW8=)
2: LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl (hash: x8v6hoxCWHVpUmqyvR4D1GTzF7x2J5JvQvNki8+S1+4=)
3: Y4jQJn9-X8hzytmQcxrO0HZU2f0.roa (hash: bSnQnShvbXI84/DgdDetWzox4Bh8KlqChBqyyJnAbOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:41:76:ee:30:33:e2:23:49:54:12:94:c0:fc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Validity
Not Before: May 12 21:01:02 2026 GMT
Not After : May 13 21:01:02 2026 GMT
Subject: CN=50006aa725f54045a5ebc4fee6c857d8617270b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:79:5d:9d:62:75:d9:35:50:3c:bf:a8:6d:
72:b6:5d:98:c2:9a:3f:3e:f7:8e:2e:7b:31:ca:1d:
13:54:74:f6:e0:5a:6d:06:bf:9a:f0:c2:c2:90:9c:
b5:7b:66:77:14:9a:02:2b:47:e6:47:85:b9:7e:77:
0f:fb:57:af:c0:7e:02:1b:82:ff:50:5a:6c:cc:37:
d2:6a:a5:54:c8:96:06:00:d9:f9:d2:28:18:f3:5e:
b1:cb:3f:51:4a:f3:20:5d:0f:c9:9b:15:69:6b:fa:
09:93:97:eb:35:62:54:76:18:ce:2f:f6:88:e3:50:
16:eb:dc:e4:d1:fe:93:89:fc:d3:5a:a1:04:ad:7b:
9a:9a:ba:39:c1:d5:1e:05:aa:58:08:eb:ae:5f:74:
55:13:fc:2b:49:cd:8d:9c:30:e3:51:a2:28:44:e6:
37:cb:da:e8:9c:6d:be:2a:29:56:59:6e:6d:e9:93:
86:3d:8f:8b:ad:b8:48:f5:cb:43:ff:82:52:21:3a:
2e:ef:3d:a5:5e:9b:04:1d:2c:fb:9d:28:9d:ff:28:
df:e6:e3:1c:c5:a7:84:9f:00:92:73:fb:63:57:70:
ce:7e:c7:a9:e0:8b:5d:5d:2b:8b:3a:9f:40:d6:5d:
5c:c2:ef:3b:a8:f0:c2:b4:01:f1:e3:b6:e5:3a:a4:
48:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:00:6A:A7:25:F5:40:45:A5:EB:C4:FE:E6:C8:57:D8:61:72:70:B9
X509v3 Authority Key Identifier:
keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:48:39:df:80:4e:8f:6e:d0:64:7c:19:5c:d9:6a:64:2b:dc:
3d:2b:14:3a:ba:80:10:7e:47:35:1f:2e:11:e4:fb:ca:39:fc:
fd:05:65:2c:0e:e1:23:13:6e:ed:ea:b5:49:80:63:61:f5:5f:
c6:04:f8:4d:7d:a7:a8:ca:8b:64:6e:e1:2c:15:ca:24:ff:42:
38:db:9c:3b:c3:03:30:30:9a:53:df:7b:f4:7a:e4:27:7b:fc:
bc:fe:a4:00:8d:19:6c:91:c2:d3:e4:f5:03:8f:00:af:c6:94:
c9:02:99:cc:44:9e:bc:94:d6:0b:c1:68:3b:b7:f3:94:4c:d7:
50:44:13:eb:3b:e9:f6:31:8d:80:90:0f:34:07:07:8a:65:17:
33:84:63:66:05:48:09:04:d6:37:49:33:1f:00:12:ba:50:35:
33:a2:f2:c2:29:a7:1b:a0:95:ba:1c:f0:a3:76:b8:f3:cd:3e:
15:72:d6:00:60:6c:18:a4:37:ae:9c:c3:45:2e:be:41:16:3b:
87:d2:a4:2d:cf:4c:19:06:3e:bc:71:46:af:98:79:9b:6f:2c:
52:9b:22:ec:7c:ce:e9:09:5d:e7:30:47:cb:81:86:52:75:89:
df:69:70:46:a1:e1:7c:59:62:dc:14:da:99:17:09:2d:f1:dc:
cb:f6:5e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:59 2026 by rpki-client