Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
File: Lg1AUXqHO33CrrKNDtai-ZOj100.mft (raw, json)
Hash identifier: /IVWWiHIxH4CKQcyK70fhgEw5uQ73tgqVaMTdwzDRcE=
Subject key identifier: 0E:BC:82:25:06:CD:C7:43:29:DA:2A:75:98:4F:75:CA:E0:9A:7E:D2
Authority key identifier: 2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
Certificate issuer: /CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Certificate serial: 01A12B0DAB27CA8C52ECEAC4273DA306C2DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
Manifest number: 1781
Signing time: Sun 11 Oct 2026 13:01:18 +0000
Manifest this update: Sun 11 Oct 2026 13:01:18 +0000
Manifest next update: Mon 12 Oct 2026 13:01:18 +0000
Files and hashes: 1: Lg1AUXqHO33CrrKNDtai-ZOj100.crl (hash: vrP2o9b8bwZ6EdK3aYJr8e/f9PiKYqcXEBtt7MNDTmM=)
2: mgEpeI12MEc1I9Yl4CGTBmBk2bE.roa (hash: +I2yVa8SpbahJZG3cLdGFLaq+xiLLvaqsYXX2ZnSZ5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:0d:ab:27:ca:8c:52:ec:ea:c4:27:3d:a3:06:c2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Validity
Not Before: Oct 11 13:01:18 2026 GMT
Not After : Oct 12 13:01:18 2026 GMT
Subject: CN=0ebc822506cdc74329da2a75984f75cae09a7ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3c:8c:d8:bb:3b:6a:3a:44:f4:2d:b0:65:f6:
eb:c1:68:f2:68:d8:65:4c:ee:67:c3:0f:98:49:60:
9f:9e:6a:6a:23:ed:ee:9d:d1:bb:47:cc:b0:b0:e4:
42:ac:97:bd:f6:37:72:f4:2f:ad:dd:29:4e:bf:5d:
d6:d8:c5:08:38:d6:76:87:b1:bd:f6:8e:22:69:c2:
05:64:37:54:8e:75:95:f0:4e:93:8d:f7:de:d3:80:
32:b5:2f:6d:da:fa:7d:c0:2b:c8:ad:81:1a:dc:89:
c0:61:08:b5:e6:42:40:a7:b2:08:14:00:91:86:39:
af:01:bf:66:f2:c8:aa:18:45:5b:55:6a:a3:ed:50:
75:ec:35:61:12:74:4d:7f:95:35:5f:c2:c1:40:86:
45:02:24:74:d4:24:6b:f7:56:b2:42:3c:95:b0:70:
5f:af:74:bf:ad:c1:a4:76:7d:43:a5:ff:d7:46:7c:
2d:ff:b8:74:b0:9f:6c:19:19:94:3f:6d:96:b0:81:
70:51:12:48:69:c3:d9:9b:8d:d8:87:0a:d1:c3:c0:
7f:13:44:fa:2f:0b:32:cd:1b:1d:27:31:13:59:dc:
bd:57:1a:e9:05:ca:07:5c:d7:fb:db:0d:cc:d1:98:
80:fc:48:60:e7:97:b5:db:79:6a:48:2c:0c:d4:30:
89:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BC:82:25:06:CD:C7:43:29:DA:2A:75:98:4F:75:CA:E0:9A:7E:D2
X509v3 Authority Key Identifier:
keyid:2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:5a:12:f9:38:c5:11:9b:f9:fe:38:89:89:fc:ce:cf:39:03:
26:03:90:a5:77:06:46:4c:03:00:be:d1:3f:b4:02:0f:40:62:
ca:b8:82:6c:a1:95:58:64:11:46:80:34:dc:80:2f:b6:52:45:
f2:37:f7:31:84:b7:9a:6a:75:67:0c:09:8a:0b:24:a3:a0:75:
26:03:ca:27:57:26:03:7e:2f:e9:37:f3:9f:ef:2b:d7:ba:a2:
88:83:8d:37:2a:6d:97:7d:4d:66:27:2d:9a:3f:8e:5e:a6:88:
d5:55:9b:14:ec:16:9e:bd:28:90:df:29:d1:bd:7a:90:2e:cf:
ba:df:1e:a5:ce:fa:26:cd:1b:a9:34:56:9e:b1:df:68:c2:5a:
e5:e7:15:da:01:4c:2e:2d:21:eb:80:f2:3f:43:35:29:19:ca:
fe:8e:62:02:af:4d:c0:f1:30:94:dd:5a:d4:49:9c:e0:6e:73:
95:84:11:a6:bc:b0:dd:b4:59:46:f0:ae:0b:e3:22:6e:3a:e0:
60:13:7b:e8:f3:49:77:49:3f:12:13:97:8c:b1:4b:3c:7e:25:
b2:f2:1d:39:14:b7:28:85:f5:c7:d2:4b:58:06:6f:0e:31:99:
b7:af:b5:ed:c5:f5:b1:73:31:95:c9:62:6a:ac:72:db:32:9c:
22:c0:f4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:27:04 2026 by rpki-client