Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
File: lakErGCT4eIpoHTFBQb_7NoBDM8.mft (raw, json)
Hash identifier: x++2e/5ZjdNk3xjq0FQcejR0+B0UM3ZV95ZgzbxZt7A=
Subject key identifier: BB:0C:2D:FA:37:47:11:06:E0:7B:2D:A7:E9:0D:8A:95:E3:69:22:C2
Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
Certificate issuer: /CN=95a904ac6093e1e229a074c50506ffecda010ccf
Certificate serial: 019CAB6B5B9FA651A5BE60B526BE2D2BE42E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
Manifest number: 0DBE
Signing time: Sun 01 Mar 2026 22:01:05 +0000
Manifest this update: Sun 01 Mar 2026 22:01:05 +0000
Manifest next update: Mon 02 Mar 2026 22:01:05 +0000
Files and hashes: 1: iqe4oUfCnKK4WwKFvUUmojN64us.roa (hash: rTjPU6L7Ao4uZ3Fd4ZWTn1lMEk1o4F4HlPUSbtAtfMc=)
2: lakErGCT4eIpoHTFBQb_7NoBDM8.crl (hash: 0IhCaZb7jODrBUySUJ4W1GFvUXC5fEyoZHPJLB9QcaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:5b:9f:a6:51:a5:be:60:b5:26:be:2d:2b:e4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf
Validity
Not Before: Mar 1 22:01:05 2026 GMT
Not After : Mar 2 22:01:05 2026 GMT
Subject: CN=bb0c2dfa37471106e07b2da7e90d8a95e36922c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:4b:4b:0f:03:bf:5c:aa:15:64:3d:51:99:
52:97:17:15:d0:ef:e0:b6:1e:96:76:0d:ee:89:c0:
f0:9a:a0:62:3a:54:ad:0b:19:61:1a:ae:a6:e5:74:
34:e9:d3:a9:cf:b8:79:66:2a:1b:28:eb:82:76:72:
7a:b0:7e:3c:e5:cb:21:ce:3d:31:25:5b:8d:ab:8e:
8e:7c:cf:38:30:43:a1:f0:89:a0:b5:26:04:b5:d8:
69:15:98:cc:73:40:a9:fb:bb:c6:ef:e4:38:fd:31:
71:d7:ed:a5:b4:32:a5:d4:06:06:e5:32:a2:2f:21:
31:89:cd:ad:08:ea:fc:2e:12:72:44:6c:63:ea:e3:
82:98:e0:ad:ed:b8:8f:db:6f:b3:aa:1f:75:7d:c8:
d0:90:cd:84:f0:38:70:e9:37:cc:f4:f9:9f:b4:11:
29:90:69:0f:9b:97:27:6c:e4:a5:0b:e7:4b:28:76:
2b:fd:9d:6d:dc:5b:fd:0c:a0:29:10:fd:ab:85:75:
cf:91:b2:2e:6a:72:40:81:65:39:e3:68:90:9a:3a:
38:84:92:97:f0:fb:a3:5e:02:f8:cb:30:c9:9a:93:
be:99:10:66:40:74:8e:dd:00:80:f1:1f:de:1c:e2:
f7:e4:10:2a:d5:62:9e:ad:72:53:64:79:a9:f2:7e:
55:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0C:2D:FA:37:47:11:06:E0:7B:2D:A7:E9:0D:8A:95:E3:69:22:C2
X509v3 Authority Key Identifier:
keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9b:34:58:24:c1:22:1b:76:82:e3:ee:88:59:f9:21:0c:ca:
13:4e:d2:d7:d4:6a:11:47:4c:91:aa:45:bd:8d:20:75:f7:89:
3d:48:89:43:18:a4:ed:84:e5:4f:c5:0c:e8:dd:18:46:ca:07:
63:b4:97:c9:ee:fe:66:6f:d4:ec:a8:e4:4d:1b:30:0b:19:9d:
b0:09:04:1d:38:f1:d0:6b:60:22:f3:7d:c3:d0:f7:3d:9a:79:
6b:d7:32:0e:36:c8:ac:27:f7:e8:86:08:62:a0:16:f4:71:81:
d7:0a:30:4a:d3:9f:de:6e:60:f3:4b:e6:11:db:12:18:9e:30:
76:b8:37:21:01:c0:22:51:bb:61:3a:25:39:01:8e:b0:8a:0f:
c8:2d:6d:63:ec:39:98:1b:ba:85:2c:1f:ac:eb:ee:69:bb:5e:
11:60:85:10:ae:00:bb:3d:14:e9:d7:e5:56:22:0f:2c:2a:ee:
77:30:54:2a:77:dd:9d:da:c6:83:d6:2c:19:4b:19:48:f1:ca:
c9:5d:bc:ec:69:ee:a4:f4:32:f5:72:41:aa:ae:b3:da:a6:59:
59:99:0e:44:15:e9:a4:24:06:d6:f6:11:33:8f:f7:ca:6f:ad:
fb:f7:33:fc:d0:10:ed:b4:3e:df:5c:84:8d:45:7b:67:6d:34:
a4:01:ae:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:48 2026 by rpki-client