Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
File: Lg1AUXqHO33CrrKNDtai-ZOj100.mft (raw, json)
Hash identifier: LRzR1m43PRzwseXnk/Bf4SuR7P8K5n71qaj/+IphcS0=
Subject key identifier: D4:DF:8D:F6:73:E6:CF:92:A3:1C:29:0A:F5:AD:B5:5C:DD:95:34:0E
Authority key identifier: 2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
Certificate issuer: /CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Certificate serial: 019F9580C086D5AF022B2FD7B32882213862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
Manifest number: 16AF
Signing time: Fri 24 Jul 2026 19:01:10 +0000
Manifest this update: Fri 24 Jul 2026 19:01:10 +0000
Manifest next update: Sat 25 Jul 2026 19:01:10 +0000
Files and hashes: 1: Lg1AUXqHO33CrrKNDtai-ZOj100.crl (hash: ehRtPMH+da7F7gEr5cf86Rxzk1D0/NlPinNT2EJLFQY=)
2: mgEpeI12MEc1I9Yl4CGTBmBk2bE.roa (hash: +I2yVa8SpbahJZG3cLdGFLaq+xiLLvaqsYXX2ZnSZ5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:c0:86:d5:af:02:2b:2f:d7:b3:28:82:21:38:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Validity
Not Before: Jul 24 19:01:10 2026 GMT
Not After : Jul 25 19:01:10 2026 GMT
Subject: CN=d4df8df673e6cf92a31c290af5adb55cdd95340e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:94:46:03:88:a7:a3:6d:35:64:83:68:8b:d4:
ce:38:a6:af:10:6b:0c:d6:91:78:b7:ec:4b:b0:58:
60:13:dc:5c:8e:fe:bf:d1:f8:44:50:d8:00:c3:d9:
3f:09:2a:4f:ed:ad:47:c3:81:41:84:2f:fe:7f:fa:
fc:0a:e2:a3:07:94:fd:77:db:40:2f:f3:e5:8d:20:
e5:e7:bc:c4:57:33:be:7d:33:1b:8c:40:bd:81:d9:
30:01:ec:8e:ee:39:f3:94:f9:4d:c5:44:c4:25:ca:
13:e7:da:ae:71:99:38:84:a6:13:bf:a4:73:07:eb:
8d:54:f0:f9:3c:8f:28:5e:45:4b:47:74:5d:c8:14:
11:34:d4:b7:82:05:4d:9f:f7:5a:5c:90:45:8d:ce:
2b:e8:d6:f7:72:b6:a6:e4:43:94:3a:60:84:2d:49:
cd:8d:f8:8b:5f:34:a0:43:0d:5d:99:53:dd:70:3d:
69:55:0d:2b:50:46:b8:f1:ab:c5:84:cc:61:66:db:
09:85:30:f4:54:da:31:42:34:6a:d2:a2:00:a0:1c:
55:55:c3:f0:6d:4d:9a:bc:f4:4f:93:dd:1f:71:ca:
4e:d5:ec:f3:2d:14:55:bb:97:9d:3b:a0:f3:6b:c2:
65:99:12:8d:22:5c:ca:47:30:a2:53:61:52:d7:5d:
21:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DF:8D:F6:73:E6:CF:92:A3:1C:29:0A:F5:AD:B5:5C:DD:95:34:0E
X509v3 Authority Key Identifier:
keyid:2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:0c:cd:81:0c:b9:31:0d:50:4a:5a:20:15:95:8e:e3:30:bb:
d5:a3:7d:7f:fe:3c:a6:f2:9b:d5:e2:00:9c:00:6f:bd:83:e4:
b4:b0:bc:af:9c:d8:a6:0e:ad:a7:7c:84:7e:98:7b:92:d3:bc:
7b:d4:17:1a:dd:c3:df:c8:e3:97:b3:91:8f:d9:33:60:17:3b:
4b:0e:81:4b:89:45:e0:8a:0f:51:ea:2d:1e:65:a2:20:04:35:
67:fc:17:9d:dd:69:5b:05:76:cc:07:f4:d4:bc:3a:b4:eb:d0:
53:09:70:3d:2c:e8:31:bb:c9:70:98:70:1a:1d:67:13:10:28:
0f:bf:f5:ab:78:9f:73:70:69:47:3f:fb:48:46:3e:3b:a7:d6:
d3:03:c7:d3:fe:8d:9b:fc:14:26:47:4a:f2:fc:62:74:be:b0:
cf:8d:a7:2b:5c:15:1c:44:5f:cd:ba:3e:52:04:43:3e:18:aa:
c6:d4:10:f5:c0:08:0a:e9:15:33:e4:2b:4f:04:bd:b4:c5:eb:
5c:71:41:cc:f5:03:ff:d0:ed:a5:ae:98:39:80:ff:98:81:15:
ec:2f:a4:e6:5a:0a:20:02:c9:3c:c8:46:89:e2:4d:73:0a:87:
98:97:68:1d:45:a9:80:99:8c:15:a0:b6:26:08:f5:b8:42:e5:
d5:66:7d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:53:40 2026 by rpki-client