Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
File: LcgdJMRd2qNF-QZN4p-8p7EppSw.mft (raw, json)
Hash identifier: t2w33gRQT5KoPywVBhL+JTsC6NPqSrlfvcTv6ojU0S0=
Subject key identifier: C8:4F:4D:E2:84:C3:77:EC:1D:2E:9A:AF:1E:79:89:94:05:EA:CD:94
Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
Certificate issuer: /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Certificate serial: 01A1DE39950C290C69A8E9B29F7C21FB9CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
Manifest number: 1B0E
Signing time: Sun 15 Nov 2026 08:01:17 +0000
Manifest this update: Sun 15 Nov 2026 08:01:17 +0000
Manifest next update: Mon 16 Nov 2026 08:01:17 +0000
Files and hashes: 1: 1jBYr9FWsRPu64lYAnK0ta-WBdA.roa (hash: 3LputYmrn0IPDDaA7qSescZ3E0lTXKfvLlqfzkE/kU0=)
2: LcgdJMRd2qNF-QZN4p-8p7EppSw.crl (hash: uu9JWhImQhPi9AwSYAoHIlO93OrgsNsishNPhjKco9I=)
3: PTD9xAwEKqmx4gmmtDTPK0hTyJw.roa (hash: ovDAPJ84DYuT4dk89ty5XzeA2lvBX0g4FHWlLvwK+L4=)
4: e0gBckKM8RCRyEWahinENn_HbtU.roa (hash: DWkQzCqPzt4lmehS+9KyYFJuTYn4w267Y8hX/gXWw5Q=)
5: hXW_JJYbDEuARBvQ3ahscidHNa4.roa (hash: vgu1i3fvHneLweEnm2qJqevE9QNy+k15JJYScMlG9SQ=)
6: iAjz_7XGgeyKjKOC5mMhN8Ql2MM.roa (hash: 9fe4RXvq0cI0elK7H6sALndgETw3KtEVWMKky23SlPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:95:0c:29:0c:69:a8:e9:b2:9f:7c:21:fb:9c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Validity
Not Before: Nov 15 08:01:17 2026 GMT
Not After : Nov 16 08:01:17 2026 GMT
Subject: CN=c84f4de284c377ec1d2e9aaf1e79899405eacd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:77:0c:59:64:f1:7e:89:db:a7:37:40:e5:35:
18:8e:7a:95:89:bd:81:ff:09:af:27:ba:62:49:0b:
60:d8:09:59:79:92:54:23:c5:3c:c0:01:0d:49:b8:
2e:da:51:1e:1b:22:a4:fd:33:2d:6c:b2:ce:d8:c5:
93:80:42:96:6c:69:52:8e:fe:5f:ad:c7:82:12:91:
6d:00:38:53:e9:87:a3:24:4e:28:30:5c:e7:09:9f:
98:f0:32:b5:89:bb:d1:36:e1:ee:92:c8:dc:a0:ba:
d7:35:b4:2a:de:7b:4c:58:37:f8:be:d9:e6:19:a2:
21:c1:73:55:c5:2d:4b:67:18:59:75:4f:e2:27:12:
d9:97:25:0c:b4:be:e7:ef:41:83:9f:9e:db:7c:53:
9d:e0:38:7e:fc:61:47:5d:eb:5b:f6:f1:a7:36:bf:
51:73:9d:bf:fe:30:59:40:8d:72:d5:cc:70:65:f9:
cd:5f:34:fb:a0:98:29:fc:f8:8d:1a:d3:94:9c:42:
92:03:9b:c1:30:57:93:97:05:e4:9d:09:cc:db:af:
84:d7:7a:a9:e3:2e:18:b6:58:8d:d6:93:ed:e6:5c:
76:36:4e:c1:c5:4d:a7:3c:a5:94:e3:15:86:53:a3:
ca:c4:b6:0a:f9:58:04:ea:a1:73:2d:a1:f0:84:c0:
26:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4F:4D:E2:84:C3:77:EC:1D:2E:9A:AF:1E:79:89:94:05:EA:CD:94
X509v3 Authority Key Identifier:
keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a4:fe:4b:fc:1c:eb:2b:6c:2b:c8:1f:19:61:71:af:30:5d:
80:6d:9c:29:15:39:c9:f0:2b:0a:5d:8d:aa:55:64:83:0b:a6:
20:84:ad:d7:c6:db:bc:f1:51:6d:a7:2a:0c:22:d7:ab:28:b3:
f7:da:3f:29:92:36:f6:3e:c9:41:66:76:5b:a3:2e:dc:81:f9:
47:3f:cf:96:db:1d:99:f9:68:f4:f6:e6:80:42:c4:53:22:8d:
be:29:6c:30:86:31:cd:d9:28:53:cf:cc:c9:18:a2:b7:25:7d:
cd:fb:37:cb:5e:4c:82:12:4e:bc:a3:26:c0:1b:67:3d:1a:bb:
2c:72:98:05:36:68:af:4d:a5:cb:81:68:31:9b:6e:01:07:f3:
39:66:d2:b1:91:4b:67:e7:55:05:74:e5:36:be:7d:5e:79:d9:
b7:a0:e5:fa:e3:aa:5b:d6:12:5c:bf:92:b8:be:73:98:31:f6:
6d:af:80:62:a7:bf:32:84:98:f6:61:34:e4:76:4a:de:f3:b3:
51:e9:19:38:13:4d:32:43:f8:f0:cb:31:cc:2f:6c:58:b5:b4:
26:ef:96:88:aa:e1:ae:66:c7:2e:fd:fd:8e:08:ce:56:9a:ba:
64:78:f9:34:70:0f:54:bd:cb:d7:13:32:0b:4c:27:49:84:ca:
2f:a5:b8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:16:15 2026 by rpki-client