Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
File: lakErGCT4eIpoHTFBQb_7NoBDM8.mft (raw, json)
Hash identifier: snS9cWqmEX+ZzwWrmo0ZCdBFKnzNF6G81qNgv07rFdE=
Subject key identifier: 4D:CC:BA:A4:A4:20:03:80:AF:0B:FC:13:E8:D4:F0:6B:24:EE:F5:E5
Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
Certificate issuer: /CN=95a904ac6093e1e229a074c50506ffecda010ccf
Certificate serial: 019D2703F669B8C4A12E02196B341491FFC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
Manifest number: 0DFE
Signing time: Wed 25 Mar 2026 22:01:04 +0000
Manifest this update: Wed 25 Mar 2026 22:01:04 +0000
Manifest next update: Thu 26 Mar 2026 22:01:04 +0000
Files and hashes: 1: iqe4oUfCnKK4WwKFvUUmojN64us.roa (hash: rTjPU6L7Ao4uZ3Fd4ZWTn1lMEk1o4F4HlPUSbtAtfMc=)
2: lakErGCT4eIpoHTFBQb_7NoBDM8.crl (hash: ZDxaeyK7v0B3fe7n9ztXgaEdl3r1pNw33w1B+y7wKTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:f6:69:b8:c4:a1:2e:02:19:6b:34:14:91:ff:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf
Validity
Not Before: Mar 25 22:01:04 2026 GMT
Not After : Mar 26 22:01:04 2026 GMT
Subject: CN=4dccbaa4a4200380af0bfc13e8d4f06b24eef5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f5:3c:26:4b:24:2b:60:86:de:b7:45:54:25:
35:96:87:13:3e:7f:b4:7b:b9:5f:6c:f0:9b:48:e5:
ba:b4:62:45:13:31:c2:ed:08:d1:3d:65:aa:d3:ad:
76:18:08:a7:81:22:08:f5:ab:44:25:1d:dc:60:e2:
af:8d:a0:d7:f5:fd:73:3d:51:ca:d4:4f:92:25:79:
25:f0:48:2d:15:14:b2:1b:65:93:80:8e:7b:5c:72:
ab:02:1e:77:f2:2a:dd:d1:1b:fd:77:ae:21:cc:db:
3d:a5:9e:e1:a5:f7:12:f2:75:0b:5f:bd:07:0b:1a:
7d:36:57:c0:17:81:ae:72:8b:af:c7:f1:55:6c:f0:
f7:5a:93:c8:9f:36:78:95:b3:81:88:61:8b:44:79:
ed:cf:f0:b9:c0:6d:4c:6c:aa:32:e8:44:7a:c5:02:
6c:c0:ba:49:cc:df:af:ce:86:69:7b:03:f5:f6:cc:
ee:83:61:34:de:52:21:c3:59:1e:a2:b0:dd:bb:3d:
8c:a4:ce:fa:2e:b8:be:b4:6b:72:d6:a1:eb:1b:75:
2d:60:5a:02:dd:ed:ae:3e:40:a8:bb:df:06:bd:a7:
00:b5:a6:73:8c:7b:70:64:da:8a:52:0d:cd:1f:60:
80:5f:9f:74:f2:2c:f1:e5:e5:56:3c:4b:50:c4:74:
88:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CC:BA:A4:A4:20:03:80:AF:0B:FC:13:E8:D4:F0:6B:24:EE:F5:E5
X509v3 Authority Key Identifier:
keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:42:2b:0b:bf:29:08:32:c0:fc:55:f8:4e:c4:46:4b:a5:c2:
5e:93:07:0e:55:27:66:64:94:d3:15:06:dc:0d:08:aa:fb:bc:
ab:f1:82:80:62:3a:54:05:83:60:81:ed:e6:ad:61:9b:bd:65:
10:b7:4a:e4:73:ba:3a:ff:da:27:8f:c8:e1:40:cd:cd:55:e0:
a4:6d:e0:73:98:51:bb:58:5c:e2:59:4b:61:58:02:7d:a9:85:
b5:01:8b:a8:21:ab:5f:e9:0e:5f:e9:a3:ce:5e:34:f6:4d:e4:
55:eb:2e:a8:a7:3e:2c:2b:31:c9:10:27:97:73:73:cd:ff:a7:
ab:27:bb:73:35:07:1d:ff:28:81:36:ab:1e:13:c1:2f:3e:e9:
84:21:2f:a9:67:b2:a6:67:f1:91:1b:99:bd:02:01:0f:94:0e:
84:dd:3d:ca:2d:5d:1d:d5:19:bd:eb:29:5e:48:82:12:3e:65:
01:da:a9:f0:3a:34:26:c4:eb:7e:7f:d0:94:fe:66:08:32:03:
a8:5f:12:63:aa:bb:69:f5:eb:47:f8:d6:ae:d9:ec:c7:fd:76:
99:33:38:cc:d0:78:78:09:cc:71:2f:f7:56:45:2a:c1:8b:ac:
dd:0f:6a:7c:f2:72:0e:56:2f:15:5b:0e:cc:45:04:26:d2:ec:
d1:97:f0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:27 2026 by rpki-client