Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
File: Lg1AUXqHO33CrrKNDtai-ZOj100.mft (raw, json)
Hash identifier: VY7phFuLcB5iop/5uaBt1UCqK+GEN8jOZrAOddBu+uM=
Subject key identifier: 16:37:B3:8E:3A:6C:E2:D1:A9:CF:BB:3A:F4:92:26:21:C6:B5:D9:57
Authority key identifier: 2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
Certificate issuer: /CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Certificate serial: 019FACACD0772140ECDC517007061866C4BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
Manifest number: 16BB
Signing time: Wed 29 Jul 2026 07:00:34 +0000
Manifest this update: Wed 29 Jul 2026 07:00:34 +0000
Manifest next update: Thu 30 Jul 2026 07:00:34 +0000
Files and hashes: 1: Lg1AUXqHO33CrrKNDtai-ZOj100.crl (hash: Sy88GgME6LZ1LnfMvILbQuMQr+orLM79vnphth3Pqlc=)
2: mgEpeI12MEc1I9Yl4CGTBmBk2bE.roa (hash: +I2yVa8SpbahJZG3cLdGFLaq+xiLLvaqsYXX2ZnSZ5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:d0:77:21:40:ec:dc:51:70:07:06:18:66:c4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Validity
Not Before: Jul 29 07:00:34 2026 GMT
Not After : Jul 30 07:00:34 2026 GMT
Subject: CN=1637b38e3a6ce2d1a9cfbb3af4922621c6b5d957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:1c:06:d7:cb:d6:f5:56:2e:8b:a5:c8:1c:
5c:f6:f4:0c:40:dd:a7:7d:ee:53:0c:e8:c6:2b:08:
05:26:b2:90:e9:45:27:f6:57:b9:09:b2:5e:4e:05:
48:af:12:35:94:dd:16:ca:d7:a0:0c:f1:54:b4:58:
9e:7c:c5:59:79:4d:dc:31:9e:23:18:a2:bb:4b:7e:
ea:1b:51:32:54:13:6b:99:60:cc:00:16:d3:e7:68:
8c:49:29:63:c1:ea:63:bb:bd:98:a3:e7:7d:3e:e6:
15:cd:82:35:5b:73:db:65:20:ba:be:82:1e:21:48:
de:54:59:32:cf:ec:5e:f4:1f:13:41:cf:df:88:97:
5a:f7:95:1b:f8:00:d4:66:75:19:6a:42:25:27:25:
67:2f:50:7f:44:69:1f:56:65:ba:b5:6a:54:3b:68:
3f:e7:f9:e7:b0:3f:96:28:3f:3b:33:d4:40:7f:04:
2f:af:38:91:19:6e:c7:5e:14:a4:f1:f8:82:b4:80:
27:ce:bf:6f:b6:91:82:b5:99:c9:71:3f:16:f4:6d:
ea:47:59:79:e0:3c:57:7b:57:2b:a8:a0:9a:12:95:
91:65:3e:1b:54:4c:25:5e:3c:b8:d3:2e:ad:bb:02:
05:9c:46:18:78:87:ba:dd:3f:2f:06:a6:e9:df:d8:
68:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:37:B3:8E:3A:6C:E2:D1:A9:CF:BB:3A:F4:92:26:21:C6:B5:D9:57
X509v3 Authority Key Identifier:
keyid:2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:06:23:32:14:03:0d:91:8b:0c:2d:dc:9e:5d:68:63:5a:48:
81:8f:96:df:f6:f8:10:6f:7e:05:b5:5b:3c:e3:1a:56:d5:d4:
ad:52:78:96:a9:6a:78:73:4b:0d:6b:8c:a7:96:f7:39:e2:37:
88:7b:e6:db:19:bf:0d:c7:70:56:09:08:60:0f:11:5a:a9:9e:
89:9d:90:e0:50:4f:9f:c6:d9:b1:c5:31:5a:c0:27:01:20:bc:
da:4c:f2:6f:8e:23:e6:20:55:6c:48:a7:8e:40:08:85:b5:38:
cc:73:01:7a:3b:39:65:da:80:79:6e:e9:08:85:5b:36:0b:4a:
e7:98:aa:d1:63:ac:16:82:69:88:b6:d1:63:17:4a:06:4a:1b:
dd:49:2b:e6:c7:67:16:d1:54:27:0e:fd:7c:5b:67:3c:09:26:
24:82:08:ae:30:8b:d8:9c:9a:25:cf:69:d1:40:75:3c:9f:6e:
42:0e:32:c3:4a:0d:17:16:ec:73:36:f9:26:4b:f0:96:89:f8:
a1:4a:1e:91:9f:45:93:ca:f9:24:8a:12:e3:8f:ef:b3:c4:d1:
e8:da:59:02:be:88:ed:81:f3:af:2e:5c:35:2e:d2:38:5b:4f:
a3:d3:1d:4c:d5:55:5d:87:44:62:f9:75:94:16:ba:d3:88:3a:
3b:7f:cc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:17:24 2026 by rpki-client