
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
File: LgojFvTptYqlLe7lx9H0uER27IY.mft (raw, json)
Hash identifier: wXNJ2c2ZQ5CgpjbpG//Ti0RRy1/uspeuAsrNoWt5dyU=
Subject key identifier: 4A:1B:3B:25:AB:BD:12:02:E1:1D:00:BD:5B:2F:EB:50:5E:A2:CF:A8
Authority key identifier: 2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86
Certificate issuer: /CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
Certificate serial: 019D9B50BE99A9AEA454E8461A080DD372EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
Manifest number: 07A5
Signing time: Fri 17 Apr 2026 12:00:53 +0000
Manifest this update: Fri 17 Apr 2026 12:00:53 +0000
Manifest next update: Sat 18 Apr 2026 12:00:53 +0000
Files and hashes: 1: LG48CU30hLk1-D_XATLf7bX_3Rg.roa (hash: NhPTPuk8Ihcqm9NrmrwypD1GGOXWhTlQ/Ic9+eI1nzU=)
2: LgojFvTptYqlLe7lx9H0uER27IY.crl (hash: aM9O+DdDj5KoNQLU8PKovmnetW0T6F34LPT8JMsr7VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:be:99:a9:ae:a4:54:e8:46:1a:08:0d:d3:72:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
Validity
Not Before: Apr 17 12:00:53 2026 GMT
Not After : Apr 18 12:00:53 2026 GMT
Subject: CN=4a1b3b25abbd1202e11d00bd5b2feb505ea2cfa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5f:61:58:93:c0:a8:e3:7c:a1:b6:5f:2a:af:
73:40:9f:b5:6e:81:c6:6c:59:3e:13:1d:04:d6:3d:
20:c7:d8:a8:de:67:c8:e3:ca:ae:f5:21:4f:42:ff:
e2:00:f7:86:2e:4c:38:d1:a5:bb:67:2d:29:68:7f:
10:79:30:67:16:86:1f:48:dc:00:d9:bf:e7:67:65:
1a:5f:a4:20:d5:24:91:d9:6b:cf:b3:71:8d:ca:42:
34:8a:e3:a1:3c:1d:50:95:9e:28:0e:86:18:24:57:
75:48:a4:41:fc:21:bc:cf:96:11:bd:52:41:8c:d6:
99:1b:89:72:26:02:e7:9e:12:cd:b8:0d:86:63:bd:
bf:c3:eb:ea:10:4e:4a:05:a3:52:94:41:4d:c6:a2:
94:80:03:b1:21:c2:6b:30:32:05:7f:c5:7b:7c:10:
1f:c8:da:60:38:cb:65:55:d8:63:23:84:43:fb:7a:
55:ca:9c:9b:55:cd:b3:f0:59:59:32:14:73:a5:0d:
9f:e5:af:29:71:be:37:af:1a:05:e0:8d:6b:23:c8:
51:69:01:74:b8:a9:3d:e1:ac:36:7e:7f:5e:10:2e:
98:7a:f1:da:cd:30:b7:93:46:2f:b9:e3:fd:90:0a:
a5:08:ef:79:47:d0:42:ab:69:e1:f4:5e:23:1a:e3:
c1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1B:3B:25:AB:BD:12:02:E1:1D:00:BD:5B:2F:EB:50:5E:A2:CF:A8
X509v3 Authority Key Identifier:
keyid:2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:15:78:35:6e:cd:a0:66:d7:2c:c2:e3:41:8c:18:80:e4:74:
f7:6c:c2:d5:b6:72:66:f4:af:3e:61:86:42:c9:b8:81:fc:fa:
78:d7:8a:ac:cf:04:15:ae:90:8d:2b:59:6f:67:9d:c2:72:7a:
e0:53:3c:ff:ad:b6:22:0a:6b:92:83:f6:fa:4c:d8:74:a0:86:
88:c0:91:4e:ff:2f:b0:92:9f:20:62:ac:25:fa:ad:85:89:51:
0f:ad:26:8a:bd:f7:5c:38:ca:6b:6c:af:9d:7b:a6:65:ee:eb:
58:15:35:6f:97:13:91:fe:ab:ce:f7:7e:7d:9b:e3:01:fd:58:
e2:ca:64:b9:f9:b6:dc:81:94:8f:71:ab:a2:25:29:6e:6a:b4:
f3:cd:47:d9:4a:04:2c:08:ed:e4:e8:05:28:4e:49:aa:15:e7:
5d:4c:34:88:f6:27:3d:1b:a2:36:ec:fc:e1:d1:47:16:54:7d:
e5:e1:71:32:e5:2b:75:40:88:4b:85:d5:ae:5f:54:5c:9c:87:
7b:3f:06:fe:70:d1:6d:7a:4a:1a:21:2b:6f:79:f3:0d:ce:1a:
31:4d:09:1a:32:35:2e:1e:4d:00:e2:eb:ab:af:18:45:e2:58:
a0:fa:c4:ad:7e:96:5b:b4:34:6e:c7:47:1d:15:6b:ba:15:b9:
ab:20:bf:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:33:15 2026 by rpki-client