Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
File: Lg1AUXqHO33CrrKNDtai-ZOj100.mft (raw, json)
Hash identifier: pdG9+5s7QsK084tfQVB9dvwdcUGYCyKCLJJaCbZGmyY=
Subject key identifier: FE:8E:D0:24:75:D3:BD:9A:9F:1B:67:80:C6:D5:DA:60:0C:66:C8:B5
Authority key identifier: 2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
Certificate issuer: /CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Certificate serial: 019D9B87863BD7783ECED1076C1BA125971E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
Manifest number: 15A9
Signing time: Fri 17 Apr 2026 13:00:43 +0000
Manifest this update: Fri 17 Apr 2026 13:00:43 +0000
Manifest next update: Sat 18 Apr 2026 13:00:43 +0000
Files and hashes: 1: Lg1AUXqHO33CrrKNDtai-ZOj100.crl (hash: p63MmLmTnRN5VsBlQ+wQKv3V8D3OZvljvzkAz2nFSz8=)
2: mgEpeI12MEc1I9Yl4CGTBmBk2bE.roa (hash: +I2yVa8SpbahJZG3cLdGFLaq+xiLLvaqsYXX2ZnSZ5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:86:3b:d7:78:3e:ce:d1:07:6c:1b:a1:25:97:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Validity
Not Before: Apr 17 13:00:43 2026 GMT
Not After : Apr 18 13:00:43 2026 GMT
Subject: CN=fe8ed02475d3bd9a9f1b6780c6d5da600c66c8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9a:f4:3f:10:5d:17:3e:44:00:e8:1d:1d:4b:
80:8e:20:95:e0:cc:22:7d:48:3f:6b:01:3c:e4:60:
76:70:51:c9:a6:d6:b0:67:02:bc:d3:77:eb:c9:22:
7e:b7:b8:5e:df:fb:6a:ac:40:12:3d:b4:1f:9c:f5:
39:99:ab:b6:42:bc:4e:38:b7:fc:9a:85:2c:da:8a:
5f:8b:d3:20:f3:fb:a4:da:2b:62:98:12:0f:2d:ac:
59:74:28:a0:54:5f:26:d9:53:84:cb:93:1e:db:ad:
1a:17:be:72:35:33:89:6c:e9:f7:f1:64:e9:8b:6b:
88:d6:e9:cf:3f:20:4a:70:11:d6:e1:9c:57:2b:c1:
d9:84:2d:41:d1:c1:3a:ec:7f:f3:18:d7:af:a2:f2:
f8:3c:ad:4c:50:a9:c2:ec:91:ac:45:04:78:ce:8b:
be:8e:4a:fd:d5:fd:ed:b2:d2:1a:19:a8:71:c5:e9:
c4:8f:97:94:a4:f1:fa:cd:aa:e7:76:af:63:4e:e4:
ff:e2:a7:56:dd:e9:f7:ec:50:c8:e4:b9:a3:8a:ba:
d4:f4:04:98:da:22:fb:bf:39:23:6f:c2:8d:31:55:
97:84:8a:1f:f0:dc:96:e5:bd:3a:5b:ae:57:b8:37:
8c:66:d3:0c:17:91:8a:5d:0d:b3:df:e4:87:54:4a:
de:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8E:D0:24:75:D3:BD:9A:9F:1B:67:80:C6:D5:DA:60:0C:66:C8:B5
X509v3 Authority Key Identifier:
keyid:2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:93:d9:bb:ba:1b:4f:be:44:19:39:9e:e6:c2:3c:b4:69:91:
c6:d3:8b:06:f6:1a:43:51:cd:3f:ca:72:45:c4:45:96:b9:77:
19:3c:bc:c7:b3:35:64:d8:66:57:26:9d:13:67:c6:80:40:80:
9a:01:b3:f6:9b:d0:7d:74:19:c8:d0:c7:3f:f7:4f:c9:b5:78:
d6:3e:88:65:dc:4a:1a:37:18:6e:63:f9:31:59:2f:a1:9c:37:
47:ec:58:f2:1b:fb:63:0b:f7:9a:7f:8c:46:23:ae:da:9b:64:
c3:29:c7:24:97:23:24:25:95:f4:3e:88:d4:6d:3d:ac:45:4e:
fa:71:d6:b1:5c:8f:45:28:32:bb:09:fc:2d:d1:7c:f6:cb:59:
2f:db:c7:37:71:02:47:76:da:70:da:cc:e2:0f:ff:e6:8a:97:
72:5f:30:be:b2:d4:31:bb:33:57:fb:7a:1e:08:72:50:2d:ac:
ea:70:dd:af:97:e5:62:c5:e6:62:72:0c:03:14:14:08:83:17:
fa:6f:7e:a7:94:7a:08:48:4c:f7:6a:fc:b5:0b:83:1b:87:8b:
62:c0:9a:f0:af:68:93:c4:8d:7b:8d:2c:4b:64:78:e4:8f:49:
bc:b1:30:ce:b7:3f:c7:ff:e2:a9:52:e8:8c:c9:ae:df:7d:e8:
cf:66:94:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh4Y713g+ztEHbBuhJZceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMGQ0MDUxN2E4NzNiN2RjMmFlYjI4ZDBlZDZhMmY5OTNh
M2Q3NGQwHhcNMjYwNDE3MTMwMDQzWhcNMjYwNDE4MTMwMDQzWjAzMTEwLwYDVQQD
EyhmZThlZDAyNDc1ZDNiZDlhOWYxYjY3ODBjNmQ1ZGE2MDBjNjZjOGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pr0PxBdFz5EAOgdHUuAjiCV4Mwi
fUg/awE85GB2cFHJptawZwK803frySJ+t7he3/tqrEASPbQfnPU5mau2QrxOOLf8
moUs2opfi9Mg8/uk2itimBIPLaxZdCigVF8m2VOEy5Me260aF75yNTOJbOn38WTp
i2uI1unPPyBKcBHW4ZxXK8HZhC1B0cE67H/zGNevovL4PK1MUKnC7JGsRQR4zou+
jkr91f3tstIaGahxxenEj5eUpPH6zarndq9jTuT/4qdW3en37FDI5LmjirrU9ASY
2iL7vzkjb8KNMVWXhIof8NyW5b06W65XuDeMZtMMF5GKXQ2z3+SHVEreLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6O0CR1072anxtngMbV2mAMZsi1MB8GA1UdIwQY
MBaAFC4NQFF6hzt9wq6yjQ7WovmTo9dNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGcxQVVYcUhPMzNDcnJLTkR0YWktWk9qMTAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8xNGU5MjAtMTRhNy00MWNmLWJkZDct
NTc3ODY5NTFiNzhmLzEvTGcxQVVYcUhPMzNDcnJLTkR0YWktWk9qMTAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8xNGU5MjAtMTRhNy00MWNmLWJkZDctNTc3ODY5NTFiNzhm
LzEvTGcxQVVYcUhPMzNDcnJLTkR0YWktWk9qMTAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJPZu7ob
T75EGTme5sI8tGmRxtOLBvYaQ1HNP8pyRcRFlrl3GTy8x7M1ZNhmVyadE2fGgECA
mgGz9pvQfXQZyNDHP/dPybV41j6IZdxKGjcYbmP5MVkvoZw3R+xY8hv7Ywv3mn+M
RiOu2ptkwynHJJcjJCWV9D6I1G09rEVO+nHWsVyPRSgyuwn8LdF89stZL9vHN3EC
R3bacNrM4g//5oqXcl8wvrLUMbszV/t6HghyUC2s6nDdr5flYsXmYnIMAxQUCIMX
+m9+p5R6CEhM92r8tQuDG4eLYsCa8K9ok8SNe40sS2R45I9JvLEwzrc/x//iqVLo
jMmu333oz2aUDg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:45:40 2026 by rpki-client