Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
File: LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft (raw, json)
Hash identifier: jMS0YQm/JwAeW1Qp+2VMoer1bCp1jbgIh6voUPYhwcs=
Subject key identifier: 4D:20:7C:FE:73:BF:90:29:77:47:1A:D4:6E:56:FF:7D:D6:EF:00:AC
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial: 019EC3DC38F6CFF7921BA9B987ECBFB6E3D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
Manifest number: 0A0B
Signing time: Sun 14 Jun 2026 02:00:50 +0000
Manifest this update: Sun 14 Jun 2026 02:00:50 +0000
Manifest next update: Mon 15 Jun 2026 02:00:50 +0000
Files and hashes: 1: LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl (hash: N7bkKnav0rq4ODJy718w7w+7ks6Qxzt66H2nLrdQERk=)
2: UN8luFCv80D_HegX80Rq_1yKwcE.roa (hash: TDiFAEDBmlofvjYNrJv/M7/10Dwv1YxGQkuX5cWs9sA=)
3: Y4jQJn9-X8hzytmQcxrO0HZU2f0.roa (hash: bSnQnShvbXI84/DgdDetWzox4Bh8KlqChBqyyJnAbOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:dc:38:f6:cf:f7:92:1b:a9:b9:87:ec:bf:b6:e3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Validity
Not Before: Jun 14 02:00:50 2026 GMT
Not After : Jun 15 02:00:50 2026 GMT
Subject: CN=4d207cfe73bf902977471ad46e56ff7dd6ef00ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ed:47:3a:85:72:84:64:d8:06:29:60:2d:3d:
44:38:9b:e9:73:8d:ee:42:67:42:1c:dc:42:ad:10:
3f:7f:21:50:cf:13:30:42:2d:41:b8:fd:96:7e:96:
a0:a2:a7:36:1f:de:a6:02:64:23:86:9e:58:76:22:
53:2a:44:e9:0e:a3:05:37:00:46:83:55:2a:5c:b3:
95:2d:62:be:c5:c7:ae:85:40:59:be:56:88:7f:75:
cc:d4:5c:cf:42:e5:b7:f6:b4:de:c0:9e:38:6e:f8:
eb:e8:6b:a8:87:cc:ad:e0:2c:69:32:e9:4e:41:80:
3f:6f:2a:9c:48:d5:fe:ce:7a:1e:52:42:47:98:43:
9e:a5:eb:69:35:8e:29:f2:a1:25:e2:98:20:12:20:
f0:d2:7c:c4:c4:95:68:4b:cd:8d:a0:5a:14:38:ab:
1d:c4:bb:2e:0b:20:58:bb:a4:55:06:9b:d8:24:49:
48:df:61:64:69:38:87:79:50:a9:5d:c0:c5:fe:e3:
d5:fb:88:2b:80:b2:28:48:1b:2b:8a:38:1e:65:62:
20:de:ae:e3:8e:db:df:b6:53:b2:9e:f1:f1:ba:01:
a6:9f:c9:49:ff:f3:f8:6e:1c:8c:12:20:8b:2e:b6:
b4:43:10:38:c0:a2:6e:94:7d:b2:61:6b:c8:df:71:
67:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:20:7C:FE:73:BF:90:29:77:47:1A:D4:6E:56:FF:7D:D6:EF:00:AC
X509v3 Authority Key Identifier:
keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:1e:34:aa:65:61:ac:42:83:82:2c:93:ec:79:c5:cf:61:d3:
ae:d9:54:da:73:4a:2b:1c:6b:00:bc:7e:b5:6e:f0:37:f8:19:
8b:c6:de:86:e4:a8:69:66:8a:58:ef:72:46:a2:db:aa:c3:d7:
1d:91:e5:5d:8f:b3:2f:e8:ee:e4:c0:13:a4:4d:08:f6:08:ea:
30:d6:35:5b:0b:7b:38:f8:f0:0c:c1:a5:e5:52:90:90:39:e1:
7e:31:ba:41:bd:b3:24:f4:20:9f:3c:59:4f:38:18:54:3d:d0:
4d:ff:a1:2b:08:0c:98:4c:1a:21:21:89:d0:88:f3:8e:26:6f:
a0:b3:75:70:72:e8:1b:61:93:7d:1a:bc:03:68:f8:d1:41:b9:
97:20:d7:6f:c1:41:d6:f0:7e:63:73:66:d9:05:b7:ad:58:b9:
c0:14:f6:97:80:bd:b5:3c:b7:ed:04:21:ac:5d:e4:e8:1c:6c:
1d:fa:f1:cc:0c:c0:a1:4c:84:bf:31:91:ba:d9:d5:29:d3:77:
ba:19:78:42:4b:e4:eb:55:61:f5:5c:4c:ff:4f:2b:9a:f6:ad:
7b:bb:d7:74:01:ae:19:5f:ed:d0:76:d8:cb:82:64:44:a0:53:
4e:4e:b9:53:5f:e7:0c:95:ef:75:ca:d7:e1:e1:f7:26:75:66:
a0:fb:39:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:15:26 2026 by rpki-client