Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
File: LBGlP232MAtJEs4T9vqbEA_OJIg.mft (raw, json)
Hash identifier: U7ZX5AKdrnCh8vBzdXxZW2c3HxmJFxkxhss0morNFrE=
Subject key identifier: 44:AF:10:9B:FD:DC:82:50:18:04:71:6E:BC:19:C3:6B:14:B9:04:E6
Authority key identifier: 2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
Certificate issuer: /CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Certificate serial: 019D2B171E9EF3FD12DE7C92D7C78439AA15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
Manifest number: 1597
Signing time: Thu 26 Mar 2026 17:00:28 +0000
Manifest this update: Thu 26 Mar 2026 17:00:28 +0000
Manifest next update: Fri 27 Mar 2026 17:00:28 +0000
Files and hashes: 1: LBGlP232MAtJEs4T9vqbEA_OJIg.crl (hash: ks790QIOIxA9dh/SHWKhu49qGqoDKDI23jeG81UPeMU=)
2: g6y_C3GI08K-f3_sqQmbIIeCsaY.roa (hash: 8xFD9S8CkZPQNdyonHuQIqDDCHQLXi5Cn9ISvZJR0NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:1e:9e:f3:fd:12:de:7c:92:d7:c7:84:39:aa:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Validity
Not Before: Mar 26 17:00:28 2026 GMT
Not After : Mar 27 17:00:28 2026 GMT
Subject: CN=44af109bfddc82501804716ebc19c36b14b904e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:73:d3:39:11:eb:eb:79:d2:3e:09:de:de:
eb:dc:2d:60:38:e9:6f:ba:06:1a:d9:e8:9d:5c:4e:
2a:75:d5:52:15:92:c2:64:af:80:be:41:22:35:96:
c9:bf:57:be:9e:03:a0:60:af:ef:93:c1:5b:eb:e9:
63:1b:00:f4:81:ef:cd:93:56:70:68:f7:dd:95:56:
52:26:97:e2:3f:3b:fe:64:39:d7:9f:58:57:de:cc:
77:a3:b2:e6:e2:23:61:dd:a3:13:63:14:2c:43:38:
86:d8:83:08:66:e8:6b:ac:b0:89:79:c1:92:90:12:
68:e8:56:68:87:06:b5:2b:f8:12:02:64:4b:e0:c1:
02:56:de:f8:95:3a:cc:94:3b:e7:d3:5d:63:f1:92:
a8:6e:2b:93:ee:c6:9b:b2:1c:51:bc:cc:d7:16:34:
b3:77:47:cf:fc:1a:2c:2e:51:a7:4d:5d:5e:5a:5f:
6a:ab:c6:cb:65:b3:0f:1a:9d:63:f0:8b:d9:77:1d:
d1:11:75:b7:39:aa:6a:71:83:a8:00:81:94:de:c7:
50:86:b1:30:8f:21:d3:f9:86:c9:d5:94:58:ee:e6:
84:dc:ce:d3:b8:f3:34:ac:f6:47:07:24:10:b6:e4:
63:bc:ab:4e:be:2d:0f:6e:fb:4e:49:72:ef:ca:d8:
73:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AF:10:9B:FD:DC:82:50:18:04:71:6E:BC:19:C3:6B:14:B9:04:E6
X509v3 Authority Key Identifier:
keyid:2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:23:3f:b6:25:e9:df:4b:63:e9:82:e9:c0:c7:66:c7:23:bc:
75:0a:f1:98:ef:1c:83:f1:21:e1:af:30:22:ba:42:b1:e0:f5:
22:af:48:b5:2f:f2:0d:39:89:1c:d4:f0:05:ae:91:bd:0a:b5:
16:89:43:f2:8d:0b:6b:97:8a:5a:1c:4d:c0:d2:6d:0b:88:a0:
30:54:8c:7f:27:a4:4c:36:9e:cc:c8:e3:b0:a6:86:3d:65:1c:
9d:9a:a7:a7:89:47:45:8b:2b:59:e1:be:a6:ef:ac:56:71:41:
65:08:9e:f5:72:69:14:e6:2e:e5:15:2a:89:45:f8:f2:67:9e:
3a:7c:f5:bb:d3:bd:9d:b1:7c:c8:ba:6a:68:20:8d:e3:68:fe:
63:e4:a9:f2:9e:a3:41:d0:41:e5:74:c4:89:49:8d:2d:65:2b:
5e:75:84:a2:bc:62:64:dd:43:74:75:85:67:60:cf:75:30:6c:
71:f2:82:b3:b0:a1:c0:04:4e:c6:cb:e1:ce:cf:03:cc:be:23:
8c:94:36:83:bf:98:ae:d2:80:cf:86:ec:84:16:da:28:82:09:
92:52:4f:13:ed:92:05:42:75:4b:bb:85:2b:43:ab:fb:4c:1f:
02:ea:72:78:6d:36:e1:80:dd:58:c8:82:9a:17:5d:cd:82:14:
ec:2a:cc:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rFx6e8/0S3nyS18eEOaoVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMTFhNTNmNmRmNjMwMGI0OTEyY2UxM2Y2ZmE5YjEwMGZj
ZTI0ODgwHhcNMjYwMzI2MTcwMDI4WhcNMjYwMzI3MTcwMDI4WjAzMTEwLwYDVQQD
Eyg0NGFmMTA5YmZkZGM4MjUwMTgwNDcxNmViYzE5YzM2YjE0YjkwNGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF9z0zkR6+t50j4J3t7r3C1gOOlv
ugYa2eidXE4qddVSFZLCZK+AvkEiNZbJv1e+ngOgYK/vk8Fb6+ljGwD0ge/Nk1Zw
aPfdlVZSJpfiPzv+ZDnXn1hX3sx3o7Lm4iNh3aMTYxQsQziG2IMIZuhrrLCJecGS
kBJo6FZohwa1K/gSAmRL4MECVt74lTrMlDvn011j8ZKobiuT7sabshxRvMzXFjSz
d0fP/BosLlGnTV1eWl9qq8bLZbMPGp1j8IvZdx3REXW3OapqcYOoAIGU3sdQhrEw
jyHT+YbJ1ZRY7uaE3M7TuPM0rPZHByQQtuRjvKtOvi0PbvtOSXLvythz7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESvEJv93IJQGARxbrwZw2sUuQTmMB8GA1UdIwQY
MBaAFCwRpT9t9jALSRLOE/b6mxAPziSIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEJHbFAyMzJNQXRKRXM0VDl2cWJFQV9PSklnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xZGY4ZTEtNmU4MC00NDNjLWI2ZTgt
ZDlmOTA1ZmRjODlhLzEvTEJHbFAyMzJNQXRKRXM0VDl2cWJFQV9PSklnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xZGY4ZTEtNmU4MC00NDNjLWI2ZTgtZDlmOTA1ZmRjODlh
LzEvTEJHbFAyMzJNQXRKRXM0VDl2cWJFQV9PSklnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZSM/tiXp
30tj6YLpwMdmxyO8dQrxmO8cg/Eh4a8wIrpCseD1Iq9ItS/yDTmJHNTwBa6RvQq1
FolD8o0La5eKWhxNwNJtC4igMFSMfyekTDaezMjjsKaGPWUcnZqnp4lHRYsrWeG+
pu+sVnFBZQie9XJpFOYu5RUqiUX48meeOnz1u9O9nbF8yLpqaCCN42j+Y+Sp8p6j
QdBB5XTEiUmNLWUrXnWEorxiZN1DdHWFZ2DPdTBscfKCs7ChwAROxsvhzs8DzL4j
jJQ2g7+YrtKAz4bshBbaKIIJklJPE+2SBUJ1S7uFK0Or+0wfAupyeG024YDdWMiC
mhddzYIU7CrMrQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:40:03 2026 by rpki-client