Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
File: Lg1AUXqHO33CrrKNDtai-ZOj100.mft (raw, json)
Hash identifier: otyIi2Uyn+olehE32HdM8sI+xqmvV82cv/+5YqBDjzo=
Subject key identifier: 62:2E:D6:80:E7:AC:5C:4D:81:4C:C9:4A:12:1C:D1:A9:17:B2:AA:5C
Authority key identifier: 2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
Certificate issuer: /CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Certificate serial: 01A1291F4C866184D6C62C816D36B8A9DC3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
Manifest number: 1780
Signing time: Sun 11 Oct 2026 04:01:19 +0000
Manifest this update: Sun 11 Oct 2026 04:01:19 +0000
Manifest next update: Mon 12 Oct 2026 04:01:19 +0000
Files and hashes: 1: Lg1AUXqHO33CrrKNDtai-ZOj100.crl (hash: qs5/etoWlb1ePflqtol0BCCk3Bjrz7iWVDPZIZQwd6k=)
2: mgEpeI12MEc1I9Yl4CGTBmBk2bE.roa (hash: +I2yVa8SpbahJZG3cLdGFLaq+xiLLvaqsYXX2ZnSZ5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:1f:4c:86:61:84:d6:c6:2c:81:6d:36:b8:a9:dc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Validity
Not Before: Oct 11 04:01:19 2026 GMT
Not After : Oct 12 04:01:19 2026 GMT
Subject: CN=622ed680e7ac5c4d814cc94a121cd1a917b2aa5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:9d:79:e3:8f:a3:dd:a2:ee:60:5a:7b:47:
b6:63:e5:f8:2c:f6:bd:af:93:52:da:46:35:db:fe:
6f:e4:56:e0:bd:13:d0:aa:73:ae:b6:03:61:dd:84:
50:5a:f8:8c:f4:9d:37:3d:aa:36:51:9e:8a:a0:22:
65:5a:19:05:eb:79:b5:d9:d3:0b:2d:25:bf:22:da:
d9:4c:2b:e4:ec:14:af:a5:97:76:80:c8:d5:76:80:
86:cc:8a:71:e4:23:e9:02:33:9a:57:71:fe:97:5b:
ef:6d:1d:b9:e4:f0:fe:da:c0:58:92:bb:e7:8c:4e:
57:2b:db:c2:85:c9:ae:7d:00:6b:93:dc:49:d1:d1:
a8:06:76:17:75:08:4c:f4:d9:3d:f9:35:b9:6e:07:
56:e1:eb:f2:77:f8:71:89:ae:0b:6b:d8:cc:d6:5d:
fc:59:ee:35:63:7e:c0:c9:73:86:96:d1:4b:a6:3b:
be:fd:06:a7:0d:2c:c3:f7:8e:3a:e3:fc:3c:64:b2:
23:c1:45:ed:0e:cd:c1:0e:88:b1:85:22:1d:88:b4:
af:51:e8:e0:2f:6f:ae:e6:c2:13:54:5f:c4:bb:14:
a5:27:30:2d:81:16:c6:09:6f:61:1a:14:ca:0e:0b:
07:d3:f9:6c:4b:82:30:f0:30:30:10:9d:88:41:7f:
d6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2E:D6:80:E7:AC:5C:4D:81:4C:C9:4A:12:1C:D1:A9:17:B2:AA:5C
X509v3 Authority Key Identifier:
keyid:2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:0a:32:8e:a7:d0:54:83:b2:eb:97:d1:d5:17:cb:28:1d:92:
da:fc:9d:9c:06:c2:6d:99:9e:c3:20:8f:35:f6:3e:3e:b5:30:
29:b4:ba:81:1b:da:78:4f:42:c2:96:0e:32:00:9c:b8:da:94:
c4:91:8d:79:d2:3f:2d:82:56:ab:71:78:bc:75:c6:f1:da:1e:
ff:34:5b:99:91:4a:ba:50:f8:51:92:b8:f2:da:4d:8b:1d:25:
1d:69:da:70:b2:29:3f:51:e5:f1:54:aa:7e:69:74:64:5c:0f:
17:8d:2f:34:ed:11:70:1a:c0:85:90:e3:2b:a5:1e:ae:b5:2c:
e3:46:e4:96:1a:08:54:47:8c:2f:3a:63:b2:1a:62:3d:c2:19:
d5:7b:56:06:a2:ea:d8:d8:81:77:4f:5f:48:61:f5:b0:26:f0:
0e:e7:15:b2:b7:0f:68:a6:5e:e5:44:b4:6d:93:4c:60:37:16:
91:65:5a:a9:78:53:a2:68:d8:61:a0:b9:7e:31:c3:5c:87:58:
ca:fb:fa:35:5c:3a:5f:25:0c:53:66:f6:e2:b9:d1:b5:c0:09:
63:98:0b:ae:8b:a7:ea:2a:9c:1e:7b:27:ad:73:d3:57:b7:2e:
48:14:d4:0a:d6:ae:10:0c:8a:63:dc:52:a4:ab:c3:c7:c8:20:
e2:76:80:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:54:13 2026 by rpki-client