Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
File: lakErGCT4eIpoHTFBQb_7NoBDM8.mft (raw, json)
Hash identifier: cC+K1XmBnD2EbnqXcZ/VZyABNhnt2R1cg228TR/Q0aQ=
Subject key identifier: A7:F1:25:76:86:4B:52:AA:9A:76:43:51:C1:1A:E1:72:C0:12:29:DA
Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
Certificate issuer: /CN=95a904ac6093e1e229a074c50506ffecda010ccf
Certificate serial: 019D98F4D2CE2E12745AD7F76DC8D8BCF3B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
Manifest number: 0E39
Signing time: Fri 17 Apr 2026 01:01:14 +0000
Manifest this update: Fri 17 Apr 2026 01:01:14 +0000
Manifest next update: Sat 18 Apr 2026 01:01:14 +0000
Files and hashes: 1: iqe4oUfCnKK4WwKFvUUmojN64us.roa (hash: rTjPU6L7Ao4uZ3Fd4ZWTn1lMEk1o4F4HlPUSbtAtfMc=)
2: lakErGCT4eIpoHTFBQb_7NoBDM8.crl (hash: m69iMplp1qNfETmIVOue+oW3i7fcqclZVlmmOjHSn/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:d2:ce:2e:12:74:5a:d7:f7:6d:c8:d8:bc:f3:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf
Validity
Not Before: Apr 17 01:01:14 2026 GMT
Not After : Apr 18 01:01:14 2026 GMT
Subject: CN=a7f12576864b52aa9a764351c11ae172c01229da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:7a:b1:50:8c:5d:94:e6:51:97:6f:10:3f:
0a:e9:c4:20:d5:aa:87:11:87:75:d1:e2:dc:71:22:
02:e8:50:7a:23:a0:0a:33:77:77:d2:39:cb:83:49:
c5:59:81:05:22:49:37:4f:98:1b:79:93:15:2c:20:
64:0b:e3:94:fc:88:72:4d:ff:fe:b0:1d:c9:00:38:
2f:04:0e:c4:6e:b5:cf:2e:b8:6b:bd:f5:9a:8f:11:
8f:79:97:20:44:71:97:dd:2a:5b:4c:d0:4c:3c:3e:
35:76:3a:f0:d5:0c:45:dd:36:90:af:0f:4e:cd:68:
b5:e6:ed:27:e2:a4:c1:4b:99:15:c4:ba:68:c4:0b:
11:fd:40:1c:67:ed:00:fe:15:5f:b7:af:24:e0:0a:
06:b1:f7:8f:e9:67:51:3e:60:e8:d9:62:64:e6:14:
da:3e:88:56:94:31:5d:d9:0a:96:f2:bc:d0:bb:5e:
ec:64:72:df:4f:10:77:1e:da:fe:63:12:41:bc:2b:
81:49:e1:cb:93:e8:b7:45:92:b5:c0:4e:43:94:d8:
34:a3:75:f8:ff:c1:59:e2:c4:54:b5:1a:56:e3:13:
c6:6e:6e:d2:16:c7:13:64:88:17:52:57:88:1a:ca:
73:0b:c0:b2:d7:95:67:2c:04:f2:64:8d:9c:50:9d:
47:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F1:25:76:86:4B:52:AA:9A:76:43:51:C1:1A:E1:72:C0:12:29:DA
X509v3 Authority Key Identifier:
keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:20:d1:ab:66:6a:5f:fd:db:21:48:b8:db:e2:53:ec:48:de:
06:d7:a5:cc:24:bb:98:93:f8:0a:4a:ac:a8:ae:81:e1:68:06:
b4:7e:5b:0f:f7:25:46:41:ef:16:df:71:8e:cc:77:86:5e:8e:
d8:0c:3f:f9:cb:92:c8:00:60:49:ad:80:3a:ca:08:9c:68:70:
74:fd:1d:de:c9:e6:6b:d9:1d:1a:77:58:5d:fc:6c:52:88:bd:
c7:1a:88:0e:3a:a0:9a:a6:ed:6b:3d:ac:95:1d:c2:73:b8:67:
27:70:36:32:5d:71:b9:ff:52:66:3d:4f:a4:c4:79:3b:d2:18:
32:85:85:65:04:6a:f1:44:7f:a0:42:e8:0e:ea:24:e8:4c:66:
91:9e:57:96:23:44:b5:96:68:63:7d:a3:6d:94:5a:d0:af:35:
4d:18:d2:b0:36:2a:6a:a5:5b:5c:36:c0:0f:9c:ac:a3:2d:6e:
95:42:60:4b:a5:ca:69:2b:ce:44:ad:3c:e3:99:fb:77:10:6a:
20:54:1a:78:e7:8e:79:15:97:6a:f6:cc:42:bc:32:3f:6c:50:
13:6f:ec:29:3f:29:ff:19:05:41:52:0b:e3:ce:83:bb:25:aa:
b5:86:55:3d:dc:99:d2:ab:05:f0:da:c3:c2:95:98:fe:df:f1:
a3:9a:85:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:18 2026 by rpki-client