
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
File: Lg1AUXqHO33CrrKNDtai-ZOj100.mft (raw, json)
Hash identifier: UP4dhx/F5E/DVspYUWQ1EZ64jMQiuxYwKqwRrMFx0JU=
Subject key identifier: CC:7B:09:2C:CF:5B:D1:1B:76:00:EB:8D:5A:FB:3E:79:55:5B:0C:3E
Authority key identifier: 2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
Certificate issuer: /CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Certificate serial: 019EC30011C3B83C74B8B0C27C498204D5DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
Manifest number: 1642
Signing time: Sat 13 Jun 2026 22:00:21 +0000
Manifest this update: Sat 13 Jun 2026 22:00:21 +0000
Manifest next update: Sun 14 Jun 2026 22:00:21 +0000
Files and hashes: 1: Lg1AUXqHO33CrrKNDtai-ZOj100.crl (hash: t2UssFA01e9oxt8Tex1nZb8bu6N9JafC8wWamkApBZE=)
2: mgEpeI12MEc1I9Yl4CGTBmBk2bE.roa (hash: +I2yVa8SpbahJZG3cLdGFLaq+xiLLvaqsYXX2ZnSZ5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:11:c3:b8:3c:74:b8:b0:c2:7c:49:82:04:d5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Validity
Not Before: Jun 13 22:00:21 2026 GMT
Not After : Jun 14 22:00:21 2026 GMT
Subject: CN=cc7b092ccf5bd11b7600eb8d5afb3e79555b0c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:c3:41:4d:e1:36:44:3a:ad:30:9f:32:18:
bb:7b:c3:3a:2b:00:91:f9:ae:2b:bd:10:4e:cd:59:
93:67:45:cb:41:62:e6:fb:fd:8c:0f:06:9c:dd:9d:
10:34:bb:40:ce:5a:79:6c:a2:3e:29:cb:ce:39:9c:
6f:69:7e:fb:dc:9f:81:10:8f:74:bd:25:ad:54:7b:
bd:f7:00:ff:04:c6:a0:ec:f4:23:0a:02:b8:80:a1:
a3:d2:79:6a:3b:87:4a:68:6c:85:f9:26:39:f4:5b:
69:b9:4a:b9:e7:ca:7d:ff:8a:26:69:f2:f4:80:84:
26:40:20:0d:6d:23:b8:c8:de:f9:9f:72:88:9c:d7:
85:de:02:ae:56:39:89:12:8c:6c:8d:f8:dc:aa:d1:
77:c9:d7:29:2b:63:d2:da:56:01:33:d7:56:54:50:
8a:f3:43:22:29:7c:c4:db:31:4c:4e:7c:6c:48:4d:
f4:6c:28:cc:db:78:ab:be:48:ea:a3:30:04:e5:3a:
94:45:3c:cc:34:03:9f:e2:71:88:4f:1b:2b:33:06:
69:d7:1d:fd:ea:92:3d:73:4a:79:a0:c9:83:6a:fb:
ec:e5:9c:b0:c1:5b:51:4b:28:58:6f:7b:2d:36:59:
de:e0:d3:ce:61:e4:60:25:47:b5:88:f5:88:07:19:
fe:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7B:09:2C:CF:5B:D1:1B:76:00:EB:8D:5A:FB:3E:79:55:5B:0C:3E
X509v3 Authority Key Identifier:
keyid:2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2b:14:61:35:3a:94:b3:e7:14:b7:27:db:cd:65:64:b8:45:
af:95:37:1d:f7:c7:91:08:27:1e:cf:43:39:2e:55:98:36:77:
25:c6:2f:65:3b:a4:c0:72:ae:1b:84:f3:d9:3e:62:f4:89:6e:
da:77:f4:4a:24:3b:3c:51:7e:fe:11:8e:54:a0:4d:63:47:0b:
dd:c0:5c:66:59:dc:e3:28:d4:44:a5:93:85:1b:88:18:34:7e:
b5:6d:9f:b9:4c:5d:d2:12:83:1c:ac:00:12:67:12:a0:12:06:
cf:89:d9:a1:8b:e8:f0:fe:6d:d3:cf:70:b3:5b:a4:0a:e6:6e:
f5:ab:de:8f:eb:46:08:49:96:eb:56:d9:c9:18:f5:2b:03:a2:
d3:d0:20:59:10:5f:e4:13:d1:5d:92:4e:fc:96:ba:ac:00:4b:
46:bb:3b:e1:98:c4:0f:b5:ff:9b:cb:bb:c3:17:7d:1c:0b:80:
aa:90:fb:ba:ea:21:88:49:7d:bd:30:9f:a1:34:84:4c:30:fc:
24:a9:a8:b6:b0:67:d3:6c:b3:1b:59:19:03:1d:7e:d5:2c:04:
91:f4:b1:7d:52:53:a7:1e:d0:75:b7:03:fe:db:f5:34:59:2e:
84:f4:6e:4c:9d:8b:eb:b5:fe:bb:4c:b2:2c:95:25:de:81:d0:
00:3b:6e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:42:58 2026 by rpki-client