Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
File: lakErGCT4eIpoHTFBQb_7NoBDM8.mft (raw, json)
Hash identifier: kYB6u6HZJt/iJRc2kEi3MmFUbb2UGfrkSfHyKFSFnMY=
Subject key identifier: DF:1E:A3:88:30:C2:9D:9D:F1:3F:EC:EF:EE:41:46:F1:7C:46:B1:9F
Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
Certificate issuer: /CN=95a904ac6093e1e229a074c50506ffecda010ccf
Certificate serial: 019EC44A0334F5B16450431DA14A6524D23E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
Manifest number: 0ED4
Signing time: Sun 14 Jun 2026 04:00:45 +0000
Manifest this update: Sun 14 Jun 2026 04:00:45 +0000
Manifest next update: Mon 15 Jun 2026 04:00:45 +0000
Files and hashes: 1: iqe4oUfCnKK4WwKFvUUmojN64us.roa (hash: rTjPU6L7Ao4uZ3Fd4ZWTn1lMEk1o4F4HlPUSbtAtfMc=)
2: lakErGCT4eIpoHTFBQb_7NoBDM8.crl (hash: y0No8umv60BotwGHSd1XGTmrnTcG8wolGkNoKVn0zbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:4a:03:34:f5:b1:64:50:43:1d:a1:4a:65:24:d2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf
Validity
Not Before: Jun 14 04:00:45 2026 GMT
Not After : Jun 15 04:00:45 2026 GMT
Subject: CN=df1ea38830c29d9df13fecefee4146f17c46b19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:51:87:e3:3e:e2:ce:92:69:42:40:f7:11:
3e:e0:0e:d8:7f:07:5f:c5:ba:b3:78:9c:c7:b6:2a:
37:b6:59:7b:ae:a0:14:b9:89:68:f6:4e:a4:14:55:
3b:22:9d:11:52:8a:f9:d7:59:aa:ae:58:1d:fe:44:
a4:1e:45:4b:cc:1c:c8:f2:c3:2c:23:bc:fc:2d:77:
60:45:2b:3e:98:30:f0:ab:44:62:97:29:79:77:a6:
ed:41:50:9f:c1:04:f7:53:a0:51:58:f1:1d:4a:d2:
b8:1e:61:32:b2:1d:98:05:65:c6:ff:9d:10:23:f5:
8c:ee:9c:30:84:6a:03:17:05:87:f0:fa:46:9d:95:
a2:ad:af:cc:62:72:62:9b:79:4e:0c:40:3c:98:7b:
2e:55:2d:b6:61:1d:f6:29:07:37:62:87:d7:aa:35:
a3:40:03:82:99:c9:69:58:09:46:c0:d9:13:7c:0c:
54:b9:84:72:ec:75:84:f5:f0:da:ae:bb:82:4d:ad:
45:3b:3d:08:fb:55:be:98:c0:6c:a3:2d:70:9f:5d:
7c:07:59:5b:93:da:17:b1:95:fa:83:26:ca:a7:1b:
19:10:40:e8:58:f5:3e:7f:f4:2c:00:ef:80:2f:5f:
94:74:b8:21:e6:7a:c2:f5:c0:5c:e9:dc:82:ad:b3:
de:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1E:A3:88:30:C2:9D:9D:F1:3F:EC:EF:EE:41:46:F1:7C:46:B1:9F
X509v3 Authority Key Identifier:
keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d9:8a:7b:ff:38:d1:aa:cc:b1:40:50:79:3b:f3:6f:89:a2:
92:26:1b:42:96:8d:59:3a:f5:1f:6c:41:0c:37:b4:c8:d7:1c:
48:60:de:41:cb:bc:ac:81:60:dc:9a:4a:a2:04:8c:83:a0:f0:
01:23:f5:2e:1d:eb:b7:5a:16:92:68:2f:e9:73:b5:71:70:e6:
e4:d2:f0:7b:03:c2:8d:0a:93:a7:ea:38:6b:49:ca:33:d6:f0:
e4:fc:e2:98:26:ad:af:2a:ce:ac:32:2d:f6:bd:6f:c7:4c:04:
26:43:03:71:ed:ac:b3:e3:84:c0:cb:b9:8a:11:77:3b:21:68:
88:e6:07:de:87:b2:07:83:60:ee:e1:67:4c:f2:e5:2f:b7:d9:
62:ef:52:5e:00:69:cb:b5:bf:3d:6f:ae:8c:0c:6c:4d:12:1c:
23:4b:f3:da:78:c2:ec:e5:a0:ed:e0:17:ae:10:76:38:13:ea:
95:51:1f:b8:af:30:34:0a:6f:12:22:09:67:d0:91:ff:88:51:
86:6e:8d:46:7f:0e:87:af:d9:38:88:f7:e4:e5:10:ed:3d:ee:
78:5d:16:1d:10:a2:6d:ef:31:db:6c:ab:16:49:ad:ec:bb:4d:
a2:db:6f:b0:49:c1:96:8a:91:11:ab:42:a0:d8:cf:16:6f:d8:
29:7d:17:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:46:46 2026 by rpki-client