Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
File: Lg4zjXPnWEaEVmMvW8quB68NhzE.mft (raw, json)
Hash identifier: f5aSuDF/sOVFBtn7kNg9U12hXxwb99HO3I8oBjfz620=
Subject key identifier: CB:35:7A:BB:BF:D7:78:68:68:0C:7D:6B:9C:DB:7F:75:4C:1C:31:D3
Authority key identifier: 2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
Certificate issuer: /CN=2e0e338d73e758468456632f5bcaae07af0d8731
Certificate serial: 019DA3E6ED60C1BB4F9588E2F3AC9EC67EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
Manifest number: 1889
Signing time: Sun 19 Apr 2026 04:01:53 +0000
Manifest this update: Sun 19 Apr 2026 04:01:53 +0000
Manifest next update: Mon 20 Apr 2026 04:01:53 +0000
Files and hashes: 1: Lg4zjXPnWEaEVmMvW8quB68NhzE.crl (hash: 9ACZnR6971H7rbrxL6F7tEG4XJnU1GaMCx7VQfSmhCI=)
2: hs1mGbyytLZUcmmoRa1vmUrBtV0.roa (hash: Q7jJNRLIE/XZCLjYqKH3txSs09Wat8XFnoEvxouvOI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:ed:60:c1:bb:4f:95:88:e2:f3:ac:9e:c6:7e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0e338d73e758468456632f5bcaae07af0d8731
Validity
Not Before: Apr 19 04:01:53 2026 GMT
Not After : Apr 20 04:01:53 2026 GMT
Subject: CN=cb357abbbfd77868680c7d6b9cdb7f754c1c31d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:40:f9:b2:1a:21:60:22:cd:b7:66:ab:94:d9:
17:4a:68:6a:4e:0b:2e:f8:44:7b:05:e1:4a:1f:ab:
ac:86:52:b0:6b:ef:06:df:77:ae:e7:9e:64:ac:a8:
fe:ec:65:d0:cb:65:27:86:ca:61:c6:58:28:78:c7:
0c:08:7e:a8:c1:59:36:1d:e8:95:f8:88:9f:a6:0b:
8a:fc:1b:bd:c3:59:62:4b:7e:7c:70:04:34:3d:ae:
0b:a9:5c:96:14:83:d7:eb:ad:0f:50:ad:7f:4f:6c:
50:2e:8f:23:e2:1b:9b:08:df:ee:d4:f6:aa:dc:95:
26:f7:bd:24:cb:2a:dc:df:91:35:71:55:5f:89:0f:
80:fe:2d:56:7b:03:dd:02:e2:e5:13:25:3b:7a:be:
ac:20:90:3f:37:e2:e3:cf:94:48:7f:2b:ba:63:76:
8e:b3:1c:5b:ed:b4:86:f1:86:4a:30:5a:66:21:1c:
f6:15:84:fc:61:1c:ed:a9:1e:bb:ec:7f:fb:6e:8e:
05:19:97:8f:01:28:99:56:24:8c:65:b8:9d:43:ce:
a4:ef:68:d4:ee:52:07:ba:6b:fa:a3:53:66:bd:a4:
a5:de:7b:04:8f:ed:2c:d2:f2:93:14:cb:d1:b0:89:
b5:1f:27:2b:ff:70:d7:b6:2d:f4:41:cf:be:df:2b:
b3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:35:7A:BB:BF:D7:78:68:68:0C:7D:6B:9C:DB:7F:75:4C:1C:31:D3
X509v3 Authority Key Identifier:
keyid:2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:46:e1:e0:e0:b1:da:7c:1e:1c:89:87:b9:99:e0:9c:0b:3b:
ab:cc:24:e6:fb:5a:c2:b5:ea:2b:c2:f3:5e:c0:93:72:a3:59:
a7:cc:96:c9:b4:62:71:cd:2d:1a:85:16:c6:ec:89:65:03:75:
e1:fc:bf:0f:f5:bd:c6:34:80:e4:cb:2f:bc:b8:ce:e0:67:53:
0e:58:49:8a:d5:e4:a2:84:5c:2f:a2:36:ed:02:7b:66:dd:a8:
ef:aa:a9:58:a2:b5:0c:b7:cd:0c:27:b4:09:52:fb:6f:68:25:
03:3a:23:bd:5f:58:1a:6f:05:eb:61:07:ec:bd:b8:0f:65:3d:
ad:48:02:80:16:f3:53:a3:9a:33:b6:ee:0b:07:f3:d9:53:ff:
45:77:88:5c:fb:99:b5:59:6d:61:c0:1a:a4:7d:ef:79:91:29:
c1:59:ff:e1:aa:c3:1a:10:c0:59:b3:de:a9:7f:84:a5:27:cb:
16:92:1a:19:0f:ff:52:a6:58:57:89:b5:00:1f:46:7e:7b:20:
77:cc:06:1c:89:24:12:a6:ca:80:8d:b5:e8:3a:78:33:b5:47:
64:0a:c1:a2:7d:d5:08:7f:ee:da:35:0d:60:0e:c4:54:f1:29:
89:f4:01:51:82:60:e0:f5:a9:61:11:8a:b3:90:18:19:9b:28:
c6:29:5f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:58:12 2026 by rpki-client