Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
File: LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft (raw, json)
Hash identifier: xLd0x/NoxWbh256DUO/5VTyyCiT7jsxbIYf0tSigG48=
Subject key identifier: E3:A1:63:46:76:6F:C4:B1:7A:1C:F8:64:9C:10:3A:85:33:43:3F:A2
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial: 019DA48ABED4A2F2E1CD07A92C62E7D58CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
Manifest number: 0975
Signing time: Sun 19 Apr 2026 07:00:49 +0000
Manifest this update: Sun 19 Apr 2026 07:00:49 +0000
Manifest next update: Mon 20 Apr 2026 07:00:49 +0000
Files and hashes: 1: 4B896DriFtAolXOY-xdv5QVHnqc.roa (hash: wR37hBGCsDrwex8V1Zs7ZSZ8bVSJce10KqTd05gjF0c=)
2: C2FZwLx5J6LOD83i2EDZOR5RtUI.roa (hash: TfNzI2cSGpuwkVH14MS6urWLY0KlAYesDO88Jrb6EW8=)
3: LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl (hash: fXgUOaUUepUl1Q3etAmA1zQgcwG9Hah42oxR0h1B7QY=)
4: Y4jQJn9-X8hzytmQcxrO0HZU2f0.roa (hash: bSnQnShvbXI84/DgdDetWzox4Bh8KlqChBqyyJnAbOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:be:d4:a2:f2:e1:cd:07:a9:2c:62:e7:d5:8c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Validity
Not Before: Apr 19 07:00:49 2026 GMT
Not After : Apr 20 07:00:49 2026 GMT
Subject: CN=e3a16346766fc4b17a1cf8649c103a8533433fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:96:01:44:52:aa:1b:bd:5f:2d:c6:a6:f6:87:
33:3d:bb:47:35:c5:c3:9f:4d:b1:b7:ec:be:59:4f:
aa:e2:7c:2c:12:a3:c5:e7:e1:2a:3e:ec:b4:52:d6:
71:a1:87:75:17:6e:80:e8:6f:82:1e:65:b4:41:45:
dd:b5:6d:97:bc:44:3d:0f:af:24:ce:b7:32:4b:2f:
a9:d4:fa:48:d0:a4:33:a9:cc:d8:27:3a:a5:13:0c:
0c:25:e9:15:6a:9a:d5:93:88:1e:6e:05:e9:4d:48:
84:45:bf:0e:e4:80:f6:1a:9f:77:b2:0e:0f:cf:9a:
0a:e0:e9:4e:21:6f:33:46:79:c2:64:eb:e1:16:d0:
57:be:76:80:05:01:df:2d:cf:bc:1b:47:11:49:ea:
8f:57:1a:f7:4d:7a:6e:3d:17:d2:69:d1:e7:80:a2:
18:7e:4b:90:94:ae:0d:86:35:a2:df:32:91:f0:f3:
cc:5b:2b:18:dc:36:a1:de:ef:fa:13:69:98:3e:e4:
f3:58:bd:43:ee:2c:d7:82:da:83:e9:e5:52:99:a0:
ad:70:21:ba:c0:65:c5:57:30:3f:5e:f0:9e:a0:56:
7e:99:d4:9c:03:8f:4f:a3:ac:26:21:41:a1:61:96:
0c:d1:7f:0c:93:02:41:69:14:93:7e:17:fd:79:59:
54:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A1:63:46:76:6F:C4:B1:7A:1C:F8:64:9C:10:3A:85:33:43:3F:A2
X509v3 Authority Key Identifier:
keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a5:a4:f1:05:82:20:b0:af:a1:6f:1b:5f:0d:40:83:bd:57:
74:98:98:21:0c:95:fd:0a:7b:37:46:f4:eb:aa:15:1e:7b:8e:
55:24:a5:10:ef:e2:25:17:2b:3b:7a:c8:58:01:0d:90:92:3c:
05:d2:f0:46:b5:5f:dc:3b:1c:6e:05:9e:86:35:47:bf:22:f1:
b9:d2:a3:ec:0c:2c:ce:8c:1e:6f:99:ae:73:23:07:b2:e2:bf:
4b:ef:69:35:a3:97:5d:52:03:9c:65:39:06:82:e6:15:94:e1:
52:b3:d4:ef:86:6c:6c:2c:86:9c:4e:84:9f:3e:fb:31:2d:65:
17:27:cd:fa:8a:08:04:a3:34:8e:08:74:eb:e8:95:81:20:fa:
5b:1c:b9:38:73:dc:26:f5:b1:c3:59:3c:96:56:51:eb:1d:73:
ad:74:a6:ff:b4:e8:e6:bf:4a:7c:e1:ba:c3:96:94:a8:59:cd:
70:59:b5:e9:82:83:4e:96:b6:44:d1:d0:c1:70:78:d8:f6:63:
02:a7:f6:ac:08:49:43:8d:ed:05:fa:e3:f6:8f:7c:58:ad:54:
93:e6:98:68:dc:c4:63:a2:67:db:bf:75:af:df:b8:41:f4:55:
1a:ed:c7:98:f1:67:2a:cb:c1:81:d1:77:af:37:6b:0b:7b:ea:
26:69:a3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:32:50 2026 by rpki-client