Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
File: LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft (raw, json)
Hash identifier: RsMfZ45dPuwdp9Df2KDsespBIYZsHDzuRZyxPstOUzQ=
Subject key identifier: C5:8B:A7:8C:63:D2:73:2D:CD:91:B8:6F:17:CA:D1:95:83:07:62:CE
Authority key identifier: 2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4
Certificate issuer: /CN=2c6d66124362880f5e4c54852f8376d2b9d137f4
Certificate serial: 019D27A90D9E9912E0F98A89FA00D741F01B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 01:01:23 +0000
Manifest this update: Thu 26 Mar 2026 01:01:23 +0000
Manifest next update: Fri 27 Mar 2026 01:01:23 +0000
Files and hashes: 1: LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl (hash: 0piRMHCx+OwgKA3RlEzSwdTowX2lOcV2ST5c+iALnUQ=)
2: ryFj2GxBCUHxcU9By0CLGyySjUU.roa (hash: +qBjM3t9H6frModQFkziGcyOptoFBOpKMn5rB/eU/wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:0d:9e:99:12:e0:f9:8a:89:fa:00:d7:41:f0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c6d66124362880f5e4c54852f8376d2b9d137f4
Validity
Not Before: Mar 26 01:01:23 2026 GMT
Not After : Mar 27 01:01:23 2026 GMT
Subject: CN=c58ba78c63d2732dcd91b86f17cad195830762ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:84:c1:ed:fe:30:54:79:c6:4b:9b:d5:8e:86:
a9:53:eb:60:9d:ce:04:c4:96:4a:5b:11:b1:74:58:
53:43:b9:ea:01:5b:fe:61:48:3b:c3:85:f8:ab:d1:
db:20:8c:66:03:81:2f:7f:d8:8b:16:1c:e6:f6:0a:
1f:cd:2a:b8:58:62:18:0f:a3:87:0f:89:be:3e:8b:
51:3b:3e:7d:d1:20:ca:02:05:83:6d:a4:2d:7b:43:
79:cb:14:e5:d8:6b:a7:e7:a4:0c:c7:df:ac:3b:29:
f6:23:ad:54:4f:24:1b:12:c6:8d:44:5a:ab:b0:5e:
cd:72:ed:7f:57:29:92:d4:41:d4:61:ea:73:ce:93:
61:8a:4b:9b:94:10:66:b6:55:f2:08:da:b4:48:40:
72:11:1c:a1:55:cb:07:6d:f4:44:e7:de:0e:9d:ef:
8d:0b:0e:e0:8b:31:f3:27:9b:1f:10:ef:20:cd:86:
64:3b:56:8e:ad:f5:7b:44:49:80:cb:82:70:2c:c8:
d3:ab:99:0b:e3:4d:47:23:b6:8f:26:33:ae:ae:ed:
a7:13:47:d6:39:0e:d7:cc:d7:7a:dc:22:65:8b:05:
18:db:e5:e8:2a:21:fb:7a:5a:18:2b:c9:f8:36:92:
61:fd:c9:d4:21:9c:aa:6f:32:ae:c6:3e:02:97:3e:
09:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8B:A7:8C:63:D2:73:2D:CD:91:B8:6F:17:CA:D1:95:83:07:62:CE
X509v3 Authority Key Identifier:
keyid:2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d1:14:2c:7e:44:06:08:5f:fe:92:c7:d5:14:f1:0e:14:6a:
d6:9f:60:50:ef:ad:53:6f:1b:ec:60:c7:2a:f8:6d:57:8f:7d:
65:7b:c8:88:a2:7c:c2:71:ed:40:a7:d3:3c:8a:fb:8a:3b:e9:
ea:b7:a2:3b:e6:2a:48:a5:65:23:0d:b4:14:c7:fb:15:a3:85:
df:73:e3:e4:4a:b0:e4:de:f8:7c:73:3c:37:d1:cb:8d:17:a5:
18:d6:84:12:0b:a1:01:2e:df:6c:eb:ef:11:9a:dd:10:15:60:
5b:45:63:4a:6d:66:d1:66:2f:b3:45:89:1b:fb:33:fa:40:f6:
06:4a:74:00:6b:b1:5f:5f:7a:ce:41:67:2b:be:a1:34:86:f5:
45:7e:01:1e:92:81:9e:03:60:a3:10:8f:de:3a:3a:b3:e3:4c:
45:fb:16:40:50:b0:bb:6e:2e:75:8c:db:2b:9e:a3:a3:ca:5f:
cd:8b:b6:1d:02:da:2b:8c:9b:26:f4:7c:94:bc:9e:fc:6d:a5:
48:8b:d9:13:6e:f8:5c:3c:34:2b:23:9f:a2:89:c3:60:8d:57:
2c:f3:40:99:06:7b:0c:ea:dd:54:84:60:4b:11:12:e3:3a:09:
a2:2b:3b:0b:2c:4d:cc:5a:e5:bd:88:39:b4:c1:d6:7b:01:14:
68:5e:90:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:36 2026 by rpki-client