Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
File: lakErGCT4eIpoHTFBQb_7NoBDM8.mft (raw, json)
Hash identifier: dDRVtuzcuyd0RXMSGtli4cfSLCa0n4D+c/v8yVJ7yq8=
Subject key identifier: 38:C3:B4:F4:ED:95:E8:0D:B6:6F:18:8E:19:CD:7C:0B:AF:A7:4C:B5
Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
Certificate issuer: /CN=95a904ac6093e1e229a074c50506ffecda010ccf
Certificate serial: 01A14D2B7A2388D589665B80B5810E27B3F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
Manifest number: 1024
Signing time: Sun 18 Oct 2026 04:00:57 +0000
Manifest this update: Sun 18 Oct 2026 04:00:57 +0000
Manifest next update: Mon 19 Oct 2026 04:00:57 +0000
Files and hashes: 1: iqe4oUfCnKK4WwKFvUUmojN64us.roa (hash: rTjPU6L7Ao4uZ3Fd4ZWTn1lMEk1o4F4HlPUSbtAtfMc=)
2: lakErGCT4eIpoHTFBQb_7NoBDM8.crl (hash: PwPJXY4yhb+71wRHmXWGzBkiVu38ykLW7184kaCqkns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:2b:7a:23:88:d5:89:66:5b:80:b5:81:0e:27:b3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf
Validity
Not Before: Oct 18 04:00:57 2026 GMT
Not After : Oct 19 04:00:57 2026 GMT
Subject: CN=38c3b4f4ed95e80db66f188e19cd7c0bafa74cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ce:90:31:1e:88:eb:3c:5b:b3:f4:80:a3:b7:
54:72:d5:f8:c2:74:2f:3a:ab:65:99:96:82:c0:33:
9c:b7:7e:40:5b:e0:06:42:65:8f:b1:46:65:7d:49:
81:61:2c:3d:9a:90:4d:32:28:7f:07:0a:c9:b8:c0:
2c:94:f4:13:8e:35:6f:53:c8:3f:71:1c:01:ed:f4:
cb:21:49:38:a4:04:74:dd:43:51:80:16:2c:37:79:
37:6f:91:db:35:79:ee:2d:c3:26:f9:ca:a6:a9:ec:
6c:ae:7d:33:45:78:dd:ea:fd:b5:51:a9:eb:c0:32:
b4:fd:10:3a:00:08:84:04:9d:9b:b5:60:37:b6:c9:
07:a9:92:a7:b4:e6:7d:1d:6a:25:7c:0c:44:85:8d:
6b:5e:74:ac:c5:4d:1a:bb:ba:79:10:60:89:a8:fb:
ab:da:5f:73:98:49:9c:25:21:da:8c:91:c5:4d:d5:
a2:ec:cc:21:d7:56:0a:b0:ca:e7:37:eb:3e:f0:08:
81:d3:de:c6:c8:11:f6:5a:f1:6b:14:52:d2:18:8a:
4d:74:38:18:b9:53:1d:ef:72:e9:70:e4:31:14:70:
c2:89:8a:eb:f5:62:ba:f8:44:4c:33:fe:1d:65:8f:
ed:a3:fa:e3:7b:77:92:a6:35:1c:f1:60:39:bd:7d:
f6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C3:B4:F4:ED:95:E8:0D:B6:6F:18:8E:19:CD:7C:0B:AF:A7:4C:B5
X509v3 Authority Key Identifier:
keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:46:51:85:04:9d:39:a0:b2:82:cf:d4:98:ab:cc:de:2d:1c:
63:c6:0b:f1:69:41:56:17:46:e6:06:1b:eb:39:7f:0d:9c:c7:
37:74:cb:fe:a7:7d:7b:8a:15:e3:ec:27:4c:b2:7f:52:6f:6c:
82:8e:46:45:d4:bd:f3:5a:44:d5:70:4b:a9:d0:e3:e0:39:0b:
ba:82:f8:cf:d5:4e:9e:99:12:19:61:7e:69:52:f3:16:f5:87:
29:3f:c0:8c:6b:ae:d3:ae:e3:bb:28:62:e1:fb:fd:cb:33:7e:
7c:91:23:a9:52:34:ba:af:f6:21:bb:8b:10:15:71:9a:d7:68:
09:12:eb:5a:28:bd:b3:bf:70:fa:d1:d8:ed:b1:85:74:c9:b9:
82:a8:23:a5:f9:45:9f:70:1a:58:15:22:86:80:42:01:b9:47:
16:4f:b8:3b:a0:59:59:fd:5c:99:e8:b0:3e:87:e8:a8:ff:93:
59:eb:b3:12:3e:90:f1:95:69:21:b1:51:13:53:27:b1:e1:f9:
47:be:fd:f3:49:49:01:7b:0c:56:fd:c8:e5:26:5a:9b:23:ee:
97:f2:b8:f0:2b:15:c1:37:5b:ff:ab:e5:99:ec:ee:60:39:96:
a3:12:b1:8e:61:41:52:97:b1:05:f6:14:ca:40:ea:e0:13:91:
b8:02:1c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:02:56 2026 by rpki-client