Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
File: LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft (raw, json)
Hash identifier: wDh/McMHwDsRPsCZrOZVrHDXkpD5YhEhDYJdviox97Y=
Subject key identifier: EA:A3:4F:B2:AF:3D:4E:02:F7:CC:D4:35:77:87:82:DC:5C:29:F2:9C
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial: 019CAB6B5510AAAAB532BC33DE4AB3DDB913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
Manifest number: 08F4
Signing time: Sun 01 Mar 2026 22:01:03 +0000
Manifest this update: Sun 01 Mar 2026 22:01:03 +0000
Manifest next update: Mon 02 Mar 2026 22:01:03 +0000
Files and hashes: 1: 4B896DriFtAolXOY-xdv5QVHnqc.roa (hash: wR37hBGCsDrwex8V1Zs7ZSZ8bVSJce10KqTd05gjF0c=)
2: C2FZwLx5J6LOD83i2EDZOR5RtUI.roa (hash: TfNzI2cSGpuwkVH14MS6urWLY0KlAYesDO88Jrb6EW8=)
3: LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl (hash: rkrYlk98DbuVMJMoBeJFWRMA+1V9ewzyFqGT7fI6uJI=)
4: Y4jQJn9-X8hzytmQcxrO0HZU2f0.roa (hash: bSnQnShvbXI84/DgdDetWzox4Bh8KlqChBqyyJnAbOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:55:10:aa:aa:b5:32:bc:33:de:4a:b3:dd:b9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Validity
Not Before: Mar 1 22:01:03 2026 GMT
Not After : Mar 2 22:01:03 2026 GMT
Subject: CN=eaa34fb2af3d4e02f7ccd435778782dc5c29f29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:ed:1e:50:28:ee:37:4c:70:82:31:3b:28:
f1:f8:da:b6:5e:26:84:c0:9a:cf:cd:41:7e:59:f2:
f2:c7:9d:ac:7d:71:97:b4:70:69:1f:bc:82:df:14:
87:e7:a9:c6:14:8b:9b:b1:8a:16:5e:b7:39:7c:2b:
9f:7d:93:a6:45:af:87:7a:fe:4b:84:d1:67:e6:a9:
2c:24:cd:29:8e:88:4b:c6:06:33:e6:90:7d:43:74:
16:1f:8b:30:42:51:9e:b0:e8:9f:7b:d5:e5:e0:ab:
98:19:b2:6e:86:77:25:7f:70:87:ff:24:1a:5a:e3:
59:40:f4:02:8e:72:da:6b:bc:92:a4:f3:d4:86:ab:
68:1d:9d:96:31:f4:32:31:ee:81:8a:4a:28:12:c4:
e2:f1:7d:0e:83:cd:52:7e:2a:81:ec:3d:da:c9:6c:
45:ba:3d:5f:13:73:21:32:f4:7c:15:46:30:02:0b:
2b:05:06:75:04:1d:95:0b:95:48:6e:1d:07:67:7c:
f1:58:7c:92:06:13:bc:4d:28:09:d7:a4:1d:a9:97:
da:2b:69:38:a4:f2:8f:33:c8:da:a1:b7:a1:a1:db:
29:a4:37:0b:fc:4c:3b:9d:ba:3a:91:4b:45:1d:cf:
bb:3d:80:6d:0b:8f:1a:44:c9:80:e4:b0:d1:29:25:
5f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A3:4F:B2:AF:3D:4E:02:F7:CC:D4:35:77:87:82:DC:5C:29:F2:9C
X509v3 Authority Key Identifier:
keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6c:20:5e:31:dd:17:da:79:87:a6:82:45:e7:ad:96:79:87:
93:2e:f3:79:5c:be:8b:a3:17:de:be:cf:4a:2d:5a:e1:36:8c:
9a:f0:f0:80:3e:ad:87:40:86:7f:6d:e1:e9:71:9e:e5:9f:fa:
44:89:89:c9:82:36:d5:12:86:f3:6d:3e:1c:67:c5:59:f6:08:
f3:0d:2e:84:20:70:91:84:7a:5e:a7:dd:a9:c4:85:50:51:17:
79:77:0f:92:55:bf:61:fe:58:1b:03:03:1f:90:dc:38:72:d3:
60:85:ee:ac:31:d6:5f:45:09:02:30:b7:a3:90:e6:9a:5d:4f:
b0:56:a3:88:20:c7:d3:7d:4b:ce:e1:aa:5a:c0:7b:ef:ac:46:
46:79:e6:b9:78:4f:70:54:0f:fb:28:1a:ee:14:b8:54:9c:9b:
22:3f:96:be:cc:ad:01:f4:4c:ef:5d:91:26:d6:de:34:1e:51:
80:29:34:a5:b7:a8:e2:76:6a:fb:91:e9:20:9e:c4:35:9c:d6:
ca:4b:48:eb:93:ef:ba:b0:1c:f7:48:d8:c7:22:0f:c1:d1:dd:
f3:87:fe:4a:82:8b:ac:eb:91:5f:54:18:81:4e:a0:5e:ea:44:
c7:b8:01:11:e0:18:99:8b:17:8d:68:e9:b7:6c:de:4d:07:5e:
09:4c:72:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:33 2026 by rpki-client