Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
File: lgYvXdsY-W14SSs1ONd0XMRxSiY.mft (raw, json)
Hash identifier: 8aK6ZZ8bkSMyJxo1vITJ39EJK2oRzQrxlVVVZ0etrvU=
Subject key identifier: 27:1E:9F:C5:3C:FA:3B:B2:7A:05:1C:70:96:EA:DC:58:90:01:0B:62
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 019CAC470BA8BEE7D02887054028346A7EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
Manifest number: 0B29
Signing time: Mon 02 Mar 2026 02:01:02 +0000
Manifest this update: Mon 02 Mar 2026 02:01:02 +0000
Manifest next update: Tue 03 Mar 2026 02:01:02 +0000
Files and hashes: 1: 1EZE1VFle3pJk-oWHPrHHxhMMXA.roa (hash: zAz64MVhsrxCuG6UwDUxcbTbEY8PQpGcwky1pjaIQ3o=)
2: lgYvXdsY-W14SSs1ONd0XMRxSiY.crl (hash: eSzmMvUA/h7/EUUrmt6uLcMrJm5As/7ieC+EBzA13Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:0b:a8:be:e7:d0:28:87:05:40:28:34:6a:7e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Mar 2 02:01:02 2026 GMT
Not After : Mar 3 02:01:02 2026 GMT
Subject: CN=271e9fc53cfa3bb27a051c7096eadc5890010b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:45:0a:90:a3:f7:84:a3:70:52:01:49:52:
d2:b4:99:ad:dd:44:ff:d2:51:7e:15:d9:56:bd:42:
28:87:b7:67:28:47:e0:db:9e:a1:fe:b2:35:c6:cd:
31:67:5f:44:c7:ff:b4:21:ab:2d:00:24:a6:93:a2:
ac:ec:bd:05:37:20:ba:96:4d:28:77:ef:db:5d:01:
2d:f3:9e:7a:8d:54:ff:8f:66:90:b2:62:c4:f0:f1:
7c:b0:1c:b5:66:ed:45:a4:b9:44:64:98:8c:b4:72:
c9:02:8e:f5:8e:f3:ad:ca:b8:b2:7d:cb:dd:ed:73:
e9:77:a0:bd:ff:19:6f:7a:5d:39:26:04:68:3e:f3:
75:bb:46:ba:67:b4:d6:32:62:32:ac:a2:d4:53:00:
e0:3b:4f:db:ca:31:e7:bf:73:bf:28:d6:c3:1c:55:
75:46:e0:c6:24:29:48:01:5c:fb:f2:de:1e:e3:fd:
f7:b9:74:47:54:df:aa:01:c7:e0:41:2a:ca:e9:a1:
a7:76:b7:d7:23:af:e9:f4:34:50:2f:3b:ee:74:5b:
9c:80:56:eb:db:72:9e:7c:9c:2e:2e:12:f5:1b:5e:
6f:c2:66:41:fc:5d:25:e4:95:6f:85:10:0a:0d:43:
67:c7:36:00:13:04:11:63:e6:8d:1f:3a:d5:68:2c:
34:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1E:9F:C5:3C:FA:3B:B2:7A:05:1C:70:96:EA:DC:58:90:01:0B:62
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:02:58:41:1b:d7:47:6c:7b:5e:c0:8b:8d:1e:cf:c3:fd:38:
eb:69:86:45:b3:6f:36:83:99:6b:a1:43:a3:3c:63:5b:a1:00:
af:06:c1:0c:a9:07:df:63:9b:d3:12:86:e7:d5:43:68:69:b8:
2b:05:10:ce:52:5a:b1:de:6b:ca:a0:7a:af:de:87:5f:48:05:
41:51:af:16:fe:5f:68:f0:9a:35:cb:9a:bd:56:97:1d:55:e4:
c3:6d:b0:48:0b:16:e7:8c:6a:af:bc:b3:41:24:36:7b:c3:4f:
39:b9:da:74:6e:ea:11:b5:f6:3e:81:2d:bd:f4:31:a3:f8:95:
d6:39:bb:7e:ca:9d:54:6d:a3:44:19:95:d3:9e:42:4d:bb:46:
43:bc:67:55:1a:39:26:23:84:c1:76:9c:88:48:e2:cb:d2:71:
95:1f:30:2b:f0:f2:fc:21:01:54:1e:d6:70:62:0d:16:38:a4:
79:3f:95:e1:8a:db:1d:00:ba:19:a7:e5:9c:42:a0:74:6d:ee:
7c:90:02:55:a8:b6:8a:0e:6b:bb:e2:b4:12:32:f7:29:e5:61:
9c:38:5a:70:ed:6d:0b:ba:8b:ed:db:48:5f:b0:9d:38:8c:ca:
1b:43:26:1f:4b:5c:be:02:e6:c0:ef:72:d2:56:39:fa:79:83:
a4:47:84:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:50 2026 by rpki-client