Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
File: LgO_8-c1I3MjiWRkff2JOyajs0k.mft (raw, json)
Hash identifier: I6usQc+oxxQFoiOH/9lpGHTTMFG0Q91dyDzvgS2PXGI=
Subject key identifier: 45:63:48:FB:99:97:F7:02:3D:43:F4:42:9A:0B:61:5A:89:CC:87:D9
Authority key identifier: 2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
Certificate issuer: /CN=2e03bff3e7352373238964647dfd893b26a3b349
Certificate serial: 019D265F36AE86E4615AF9E256573D5142BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 19:01:06 +0000
Manifest this update: Wed 25 Mar 2026 19:01:06 +0000
Manifest next update: Thu 26 Mar 2026 19:01:06 +0000
Files and hashes: 1: 9ScuOR40JPEdevNO4cbm0kljTAE.roa (hash: z5jkUUVkRMGDyRvntls/c34nppviE90iTNDVa2nDpsg=)
2: LgO_8-c1I3MjiWRkff2JOyajs0k.crl (hash: 64/775jdX9Pd+7nqIJd8oLThoazyJgHGjadVtMN97AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:36:ae:86:e4:61:5a:f9:e2:56:57:3d:51:42:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e03bff3e7352373238964647dfd893b26a3b349
Validity
Not Before: Mar 25 19:01:06 2026 GMT
Not After : Mar 26 19:01:06 2026 GMT
Subject: CN=456348fb9997f7023d43f4429a0b615a89cc87d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:91:45:15:1a:77:c1:5d:2a:7e:73:d4:82:b8:
6c:68:21:ec:db:3a:f0:1a:9f:ed:75:5a:29:ad:27:
71:5f:9b:db:4f:51:9b:f8:ee:33:5d:fa:96:9a:c9:
55:85:83:32:21:db:5f:2d:41:b2:20:21:7b:60:dd:
9f:4c:59:a6:7c:59:18:45:54:cf:af:65:b5:c4:f0:
ee:76:06:a6:88:a8:fb:5a:52:cd:fd:f5:6d:bf:c7:
54:91:2c:64:73:f0:76:d2:85:e5:b9:e5:11:1c:36:
6b:ec:0d:95:b4:59:ef:51:3e:04:19:21:37:6b:8b:
63:35:0f:02:bf:82:0b:a7:6a:66:f4:03:0b:fb:3c:
73:40:8b:9d:7f:2d:6d:c1:3a:67:8a:98:1e:67:f4:
4d:24:70:23:ab:88:d8:56:fd:28:59:47:4b:1c:80:
7c:a6:33:e3:ea:c0:fb:69:1c:35:13:e4:4d:fc:d5:
33:ee:49:34:c2:d3:b1:af:cc:15:fa:23:de:17:e5:
3c:c4:12:b0:7f:f1:84:b0:29:e1:7d:20:e4:e6:f5:
f2:ad:62:5d:a2:f5:09:61:e6:58:90:82:8f:85:bf:
df:66:5c:fa:63:39:b5:39:7c:01:3f:78:28:ba:a1:
94:94:66:d8:08:35:90:be:be:ec:fb:24:26:fb:f0:
6b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:63:48:FB:99:97:F7:02:3D:43:F4:42:9A:0B:61:5A:89:CC:87:D9
X509v3 Authority Key Identifier:
keyid:2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2e:82:a6:4d:1a:d3:38:34:7f:38:e5:fa:a9:9a:4d:49:b1:
30:b4:67:02:97:80:5a:ba:bb:db:b0:7a:b5:20:9a:df:d4:a6:
3d:dd:6e:18:7d:50:9a:18:05:c7:2b:c2:68:a3:31:05:14:66:
38:ee:3e:ee:6f:17:52:91:4a:ef:0b:a4:63:3e:55:39:b1:d6:
17:0b:82:c4:ad:fc:52:cc:3f:54:a4:a8:fa:74:95:0b:d2:94:
f4:37:40:bd:b0:a1:93:ed:a5:a8:0d:a2:1c:b0:67:d2:08:43:
2f:ec:9d:f0:61:12:db:6a:04:9e:56:dd:4c:71:a1:4f:b5:fb:
8f:17:58:72:e4:88:32:e3:69:07:77:ba:31:85:dd:9d:61:37:
0d:fc:bd:c1:d1:e7:2a:a8:9b:4e:16:9b:65:be:49:f1:81:9c:
c9:c4:80:d5:90:d8:d5:7c:2c:13:11:fb:20:05:6f:82:1c:ed:
29:7e:6d:83:a5:d9:c9:bd:10:fd:ce:b9:e8:d1:b5:4a:22:33:
af:18:20:2c:10:3d:73:c9:9d:13:79:b5:3b:cb:97:d7:1c:e8:
38:63:54:98:27:6e:dc:4c:e7:78:e6:48:ca:38:2b:a9:04:14:
62:7b:94:09:59:f5:62:5b:04:80:27:04:9e:30:01:32:89:12:
10:91:d8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:50:50 2026 by rpki-client