Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
File: Lg1AUXqHO33CrrKNDtai-ZOj100.mft (raw, json)
Hash identifier: svD+FG9WomTGxZn7Di81G5TbblY7plgEBSA4ISMFk3w=
Subject key identifier: 7C:4D:63:AD:3A:7D:33:47:34:9A:41:0B:58:3A:54:94:FF:2B:E2:74
Authority key identifier: 2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
Certificate issuer: /CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Certificate serial: 019D2996D50AAF4AC904437DB9E4B64993F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
Manifest number: 156E
Signing time: Thu 26 Mar 2026 10:00:43 +0000
Manifest this update: Thu 26 Mar 2026 10:00:43 +0000
Manifest next update: Fri 27 Mar 2026 10:00:43 +0000
Files and hashes: 1: Lg1AUXqHO33CrrKNDtai-ZOj100.crl (hash: ioW+wEnHJhqMwRVAqHPiwcVrPFrxl/ys4qd6Pw9JOMw=)
2: mgEpeI12MEc1I9Yl4CGTBmBk2bE.roa (hash: +I2yVa8SpbahJZG3cLdGFLaq+xiLLvaqsYXX2ZnSZ5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:d5:0a:af:4a:c9:04:43:7d:b9:e4:b6:49:93:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Validity
Not Before: Mar 26 10:00:43 2026 GMT
Not After : Mar 27 10:00:43 2026 GMT
Subject: CN=7c4d63ad3a7d3347349a410b583a5494ff2be274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:eb:5b:b6:de:67:e3:c8:52:0b:1e:7b:f8:ef:
7c:07:04:9f:e0:60:4c:f3:bc:91:79:89:78:d1:41:
ee:28:25:9c:e7:07:0a:27:cb:06:80:7b:1f:d9:41:
70:3b:d5:96:f4:4e:da:bb:9e:23:e2:07:f9:d3:4f:
53:a8:06:d4:34:25:26:48:dd:ab:b0:93:4f:88:6b:
b8:57:fb:9b:e2:51:92:8d:87:30:e8:84:46:2e:ba:
f3:88:df:6f:dc:ab:14:0e:b5:28:d2:29:c3:84:1e:
02:76:f6:6b:1e:86:26:5e:89:f6:68:2f:3b:0d:0c:
13:6d:b1:3b:d7:8e:71:35:fc:eb:85:36:c6:a0:4e:
9f:5f:d6:83:65:60:b6:37:c2:ae:e0:1d:a8:66:43:
bb:91:6b:68:95:91:e5:d2:66:84:73:fd:c7:75:63:
e3:d6:0d:e6:7d:f8:1d:39:72:dc:9b:9c:7a:c5:e1:
c6:5a:df:29:7a:2c:ba:39:12:34:cf:c4:68:f9:45:
8a:d2:5b:79:8f:47:6e:7b:b4:a1:46:a1:98:66:33:
59:f9:37:f9:a3:3c:82:6a:9e:d6:c8:6e:a8:53:ae:
6d:12:1f:51:e7:e0:d5:67:9e:c3:36:d4:c0:3b:e4:
57:0d:9d:26:f1:02:4f:f2:a1:60:c2:5f:c4:2f:94:
57:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4D:63:AD:3A:7D:33:47:34:9A:41:0B:58:3A:54:94:FF:2B:E2:74
X509v3 Authority Key Identifier:
keyid:2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:21:9e:8f:af:b1:aa:de:d2:53:70:42:9d:ab:73:15:7e:6d:
ab:c3:62:e3:8f:bc:29:13:8c:9f:6d:6f:75:c5:2a:74:75:d5:
84:83:28:7b:96:82:21:f0:b2:e9:e3:f1:05:2e:a8:4a:b8:e1:
7d:39:e1:8b:1f:1c:b7:d5:44:1e:b7:43:0f:af:5c:1e:4a:ce:
f7:bf:26:c6:36:e5:c9:b8:b1:2e:b7:a5:13:80:32:56:6a:bf:
70:fc:d2:3e:2d:6d:95:88:a2:14:38:f2:68:b2:91:7c:a1:87:
e2:a2:b1:f4:ff:dc:6b:7a:07:42:61:c3:0e:64:c4:3c:d0:08:
91:92:94:57:f5:7a:45:b1:1b:2e:0f:63:11:f6:a3:51:5b:18:
fa:ff:42:41:57:8b:16:6f:5a:ca:27:83:d1:10:67:15:01:d7:
27:89:af:cb:d8:29:3e:e7:9f:27:42:f2:b1:17:d9:0e:4b:ea:
e6:d3:ca:6c:17:d1:0a:a2:9c:a9:36:ca:09:fb:a1:4e:35:25:
f5:30:11:68:d7:f7:81:54:09:1f:e5:b8:20:c2:46:f8:bc:58:
00:31:da:ce:96:a9:89:4e:77:d2:0f:db:09:13:32:f2:d2:98:
2b:d8:d3:df:44:48:90:dc:a8:51:6b:8a:88:6d:56:fb:1f:63:
56:9d:14:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:05:56 2026 by rpki-client