Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
File: Lg1AUXqHO33CrrKNDtai-ZOj100.mft (raw, json)
Hash identifier: xWJl2axjKpAo+3bw1UaAZePwH+Z+UfVfsZfQfeTbcAA=
Subject key identifier: F0:9A:7E:6D:49:13:07:38:F4:FC:FE:56:33:1F:ED:5C:54:EB:B4:2D
Authority key identifier: 2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
Certificate issuer: /CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Certificate serial: 019E20C814DEFDCC1FD1EA14EEE1899E1B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
Manifest number: 15EE
Signing time: Wed 13 May 2026 10:00:43 +0000
Manifest this update: Wed 13 May 2026 10:00:43 +0000
Manifest next update: Thu 14 May 2026 10:00:43 +0000
Files and hashes: 1: Lg1AUXqHO33CrrKNDtai-ZOj100.crl (hash: mmyZ5U7sYQz4sNyzTy48Plf93Oqu6yBrwuKTzh0Yipc=)
2: mgEpeI12MEc1I9Yl4CGTBmBk2bE.roa (hash: +I2yVa8SpbahJZG3cLdGFLaq+xiLLvaqsYXX2ZnSZ5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:14:de:fd:cc:1f:d1:ea:14:ee:e1:89:9e:1b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Validity
Not Before: May 13 10:00:43 2026 GMT
Not After : May 14 10:00:43 2026 GMT
Subject: CN=f09a7e6d49130738f4fcfe56331fed5c54ebb42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fc:3f:64:a1:2e:37:63:79:1c:fb:6e:2b:aa:
2b:38:ad:20:d5:7a:93:c5:69:64:7d:a2:10:4d:e8:
cc:20:1e:c5:3a:84:f4:d9:44:ed:74:52:66:e1:88:
c8:19:b6:ad:c0:b3:66:65:b5:24:18:fe:53:6a:4c:
9b:49:66:5d:91:05:d8:3d:94:90:70:1a:ae:4e:f0:
a3:76:fc:38:c6:d1:af:2f:ca:c5:82:08:ef:99:07:
46:e8:25:30:c1:a3:c6:cd:ec:b8:22:8a:dd:62:aa:
96:c0:b0:70:50:31:02:26:e9:a5:29:f9:71:9c:a0:
94:72:0d:11:d7:e0:b8:a0:c5:eb:dd:de:75:a8:8a:
f5:08:c2:3d:e2:04:54:0b:e9:bd:16:90:1b:5a:fe:
2e:72:90:b5:86:4c:b7:f0:89:20:28:fc:df:42:cd:
91:c3:85:43:21:19:ae:e1:33:91:ce:ed:a4:91:5a:
71:5f:03:69:bd:d6:05:09:d6:41:db:7a:83:2f:82:
5d:6c:d3:b9:f5:96:07:cd:32:a1:84:98:09:7d:1e:
81:c8:1e:31:e5:2f:5e:0f:c9:f6:1e:dd:d3:c9:c3:
f5:82:01:18:31:d0:69:ea:61:1b:06:3f:4b:1e:d6:
6b:d4:6b:22:65:00:f4:4d:85:26:d1:1f:e4:d9:dc:
38:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9A:7E:6D:49:13:07:38:F4:FC:FE:56:33:1F:ED:5C:54:EB:B4:2D
X509v3 Authority Key Identifier:
keyid:2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:60:85:ec:0b:1f:e3:c3:1d:51:21:dd:89:82:48:e1:68:5c:
4a:d3:a9:53:e5:3d:cd:68:4f:c4:90:98:f3:1e:a4:98:2e:0b:
82:ef:c7:85:90:0d:f7:fd:fd:78:f5:7b:4f:1b:ad:c8:89:00:
b7:4a:98:4c:2f:79:a0:51:ff:fa:c8:44:cb:85:11:f0:41:59:
9b:6e:ab:96:51:8d:e5:b2:5b:0c:83:4e:26:7a:61:e5:ba:4a:
cd:5f:e8:82:ac:f3:bd:02:0e:65:43:d0:0b:69:65:de:93:70:
d9:ed:2f:83:86:e9:41:09:b5:f2:b6:e3:a0:da:33:cb:7d:f4:
7f:78:df:ee:79:33:a9:58:ba:c7:ab:9d:22:4d:27:64:50:35:
dc:60:30:84:ef:c0:a8:f7:9a:ca:cc:8f:37:be:99:a7:17:7c:
42:4c:9b:5f:01:c7:b8:19:73:48:a4:e5:3b:9a:b8:d6:ff:94:
91:ef:41:71:61:be:82:da:62:39:fc:2f:fb:fb:0d:66:99:2a:
3c:4e:e1:dc:15:3c:f5:fa:14:0a:1c:e8:a1:1b:86:de:bd:79:
e9:de:eb:71:07:46:31:ca:2e:d0:ab:ac:75:99:a5:e1:0f:d5:
e5:2e:6d:e2:ba:aa:d6:a7:83:2a:bb:36:7e:40:19:e5:e9:de:
97:46:80:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:49:32 2026 by rpki-client