Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
File: lakErGCT4eIpoHTFBQb_7NoBDM8.mft (raw, json)
Hash identifier: J8j+u5rfeIDR8IoGKDz2EYLvAkRw2WzqC+I5yr/xajU=
Subject key identifier: 74:CE:13:A9:40:57:05:59:D1:5A:C3:8C:6F:04:30:7F:F7:49:B0:5A
Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
Certificate issuer: /CN=95a904ac6093e1e229a074c50506ffecda010ccf
Certificate serial: 01A139DB709F262AAC28BFD18B33E90038C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
Manifest number: 101A
Signing time: Wed 14 Oct 2026 10:00:44 +0000
Manifest this update: Wed 14 Oct 2026 10:00:44 +0000
Manifest next update: Thu 15 Oct 2026 10:00:44 +0000
Files and hashes: 1: iqe4oUfCnKK4WwKFvUUmojN64us.roa (hash: rTjPU6L7Ao4uZ3Fd4ZWTn1lMEk1o4F4HlPUSbtAtfMc=)
2: lakErGCT4eIpoHTFBQb_7NoBDM8.crl (hash: 6qfHH0GnSv8BhaBEqFXKxBLgRzYiTLgZXZA5LJlvvf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:db:70:9f:26:2a:ac:28:bf:d1:8b:33:e9:00:38:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf
Validity
Not Before: Oct 14 10:00:44 2026 GMT
Not After : Oct 15 10:00:44 2026 GMT
Subject: CN=74ce13a940570559d15ac38c6f04307ff749b05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:b4:fd:3d:06:ec:0d:2f:c3:5e:13:65:6a:
7e:77:81:7f:1e:14:c4:ba:61:e3:0f:94:17:62:5a:
1a:4a:b3:de:a9:da:7b:e8:3f:bd:6d:51:09:4f:31:
73:ab:05:6e:be:e7:e0:2f:d6:63:61:c7:dc:57:51:
f3:cf:5b:74:fc:df:77:2c:f9:96:48:54:b2:77:14:
fe:0f:63:d0:23:e5:a7:8f:4c:92:85:76:48:ad:eb:
ae:c3:65:8a:a2:02:bb:f8:54:9f:b2:9c:dc:ad:04:
a7:6b:22:b7:0a:21:28:7d:cb:f8:a2:0c:9e:44:a0:
39:3b:74:63:ac:65:33:e8:92:e7:31:de:b9:51:25:
71:66:ee:6f:4d:39:aa:33:d4:fe:b1:8c:5e:a7:df:
1b:a6:a1:74:46:25:94:29:db:1f:a5:a7:9c:5c:aa:
d2:71:7a:c1:bf:bc:b6:4b:20:cb:5e:45:d9:49:c7:
67:1d:a4:49:ca:13:bb:fd:3b:47:35:81:27:ae:1c:
24:a9:0f:8f:63:3d:b9:5e:f0:87:6d:c4:a3:71:49:
65:33:f1:3e:5a:a0:0b:f1:c9:9d:8e:7a:03:44:2b:
98:7a:8a:6e:e1:44:0d:99:ce:e9:02:26:ec:38:af:
c8:75:f8:de:21:4b:60:ca:0d:89:3c:98:14:8f:e9:
ae:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CE:13:A9:40:57:05:59:D1:5A:C3:8C:6F:04:30:7F:F7:49:B0:5A
X509v3 Authority Key Identifier:
keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:28:de:68:77:d2:f5:56:8a:46:88:2c:64:f0:df:3b:9d:5d:
51:07:ed:14:29:bf:c7:9c:66:e5:a0:fb:f1:e4:e0:52:41:cd:
76:36:e1:c7:f7:39:c4:4f:90:1b:52:f4:8b:8f:91:92:10:90:
ea:b7:b2:d5:8c:39:d7:b4:87:ba:27:9f:94:f6:03:ad:15:ae:
e9:47:b0:52:ed:35:2e:f2:71:57:a9:6f:0f:c7:5d:72:bf:a4:
62:a4:65:41:ac:0a:89:2a:39:75:d1:69:57:0d:78:be:c0:c1:
a1:9a:f6:ca:d3:9d:77:43:a5:32:36:21:66:d4:79:08:65:12:
31:78:6e:dc:b6:40:98:6d:29:97:da:18:96:e5:bb:60:22:96:
a1:64:a3:e0:ea:5c:0c:e5:a3:e1:84:b1:6d:48:db:01:99:84:
36:1e:f5:a3:09:c5:b4:99:f0:86:12:02:da:c6:8e:64:ab:a8:
97:d3:3c:a7:f6:3b:a5:b2:27:32:82:a3:9e:e7:b9:08:75:7b:
00:23:ad:fc:ca:d5:89:63:d3:a4:82:b5:45:cc:92:cb:4d:c2:
4f:9e:6e:20:87:eb:96:2e:96:d3:78:c8:d7:4a:57:f6:8c:5f:
09:c7:5e:e2:29:07:87:55:1d:ce:09:9f:eb:30:17:87:26:83:
20:5c:1e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:24:48 2026 by rpki-client