Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
File: Lg1AUXqHO33CrrKNDtai-ZOj100.mft (raw, json)
Hash identifier: E+64aNr+O1EQaHQiREJ5EY8kWji3wfgf7hb0YFfu3BE=
Subject key identifier: CB:16:D3:45:C7:94:16:89:62:C5:81:B7:32:84:AB:EA:4F:8B:1D:D3
Authority key identifier: 2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
Certificate issuer: /CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Certificate serial: 019CADFE27F1F80A458FCDA86632F4BE5FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
Manifest number: 152E
Signing time: Mon 02 Mar 2026 10:00:40 +0000
Manifest this update: Mon 02 Mar 2026 10:00:40 +0000
Manifest next update: Tue 03 Mar 2026 10:00:40 +0000
Files and hashes: 1: Lg1AUXqHO33CrrKNDtai-ZOj100.crl (hash: ZeFW9w9zerLsJA9n2GQ9MBdQtthBpjqMSoUbicmW7ss=)
2: mgEpeI12MEc1I9Yl4CGTBmBk2bE.roa (hash: +I2yVa8SpbahJZG3cLdGFLaq+xiLLvaqsYXX2ZnSZ5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:27:f1:f8:0a:45:8f:cd:a8:66:32:f4:be:5f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Validity
Not Before: Mar 2 10:00:40 2026 GMT
Not After : Mar 3 10:00:40 2026 GMT
Subject: CN=cb16d345c794168962c581b73284abea4f8b1dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:0c:b9:9e:bb:76:4e:6d:73:74:5e:92:7f:
58:33:87:ad:c8:da:e8:cc:18:88:0c:0d:e1:c8:00:
a5:d2:3c:44:be:a6:51:2a:a6:c1:7c:ad:c7:47:00:
f3:6f:11:84:8e:ef:28:fc:67:cd:8d:ee:49:d2:17:
42:6c:ac:c8:be:69:93:cb:45:2e:8b:54:ed:04:f7:
75:6c:d9:28:98:9d:fc:b2:b0:57:47:3c:1a:59:ee:
f7:4b:fe:0f:bb:75:33:bd:89:7f:15:74:4e:d0:98:
c2:37:fb:c7:f3:4d:e7:09:ea:70:3e:5c:19:4e:ab:
2f:4f:ec:2a:36:b1:42:69:31:8b:82:13:6c:8a:6d:
c5:43:fe:b0:9d:ab:1a:21:c3:e4:c4:ba:7e:4a:34:
3c:ee:05:c0:59:36:e4:dc:95:e6:e6:1a:7c:0a:00:
ff:a3:09:63:13:78:1c:49:af:8e:ee:22:ce:f3:3f:
3b:ff:69:43:0e:d8:3f:bc:a2:0c:85:f7:5d:52:c2:
ea:5a:a2:2b:24:2a:4c:4f:76:f0:36:3d:9a:13:2c:
5d:d7:ff:b7:1b:87:b5:d5:42:ef:2b:90:16:53:ad:
01:2a:fe:e1:f3:ed:99:d6:c0:f1:3f:57:47:e9:72:
aa:45:5c:8a:c9:70:d8:26:51:71:b3:7d:59:17:ff:
85:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:16:D3:45:C7:94:16:89:62:C5:81:B7:32:84:AB:EA:4F:8B:1D:D3
X509v3 Authority Key Identifier:
keyid:2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e2:d5:83:fe:a2:06:60:bb:58:8c:91:86:36:0c:2d:08:47:
16:a8:95:44:7b:85:6a:03:2f:34:ae:cf:ee:10:1f:02:1e:73:
b5:99:1a:58:29:ef:4b:11:ff:12:bd:46:a6:79:8d:2d:3a:cf:
3f:08:a3:78:14:b0:a9:7b:3a:62:25:11:4a:0a:7a:80:52:d6:
4e:07:b3:31:75:6a:b5:80:0f:57:b5:45:8b:cc:d1:0f:17:29:
32:83:95:03:9a:da:9c:d1:d7:ae:7e:9c:05:0b:82:6b:b1:b3:
2b:09:42:cd:7d:5e:5c:d3:22:fc:c5:01:57:e9:75:2a:6c:77:
77:8f:1b:1d:e2:ea:39:b5:35:b6:9c:24:93:14:d7:ef:64:5f:
f8:31:0c:d1:20:26:d6:a2:ef:64:34:0b:1a:3f:ff:a1:92:0d:
d6:c2:42:da:94:5f:bf:46:da:c5:cb:8a:bf:07:2b:87:b4:26:
91:99:2e:d3:4a:d7:f3:24:3e:47:47:40:de:31:4f:58:04:59:
49:6c:e2:11:28:18:eb:2f:60:fb:5c:ed:cb:60:16:e6:f2:07:
94:61:93:97:53:d1:a7:1e:a6:e2:c8:d1:4b:10:c5:d8:f5:ab:
51:71:50:15:0b:95:f8:c7:12:9e:35:d1:d7:9f:a3:58:42:de:
48:a8:0b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:57:19 2026 by rpki-client