Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
File: LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft (raw, json)
Hash identifier: r6vZQvWGbNrVDAYG1CFL4Fh4ODwj3sxJD+RGk+clqnU=
Subject key identifier: 2F:96:B8:53:FD:08:AC:07:53:C4:92:83:05:7A:80:B3:8E:7B:B2:D5
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial: 019D3488862FCEB42F0E660B34B847DBAF32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
Manifest number: 093B
Signing time: Sat 28 Mar 2026 13:00:55 +0000
Manifest this update: Sat 28 Mar 2026 13:00:55 +0000
Manifest next update: Sun 29 Mar 2026 13:00:55 +0000
Files and hashes: 1: 4B896DriFtAolXOY-xdv5QVHnqc.roa (hash: wR37hBGCsDrwex8V1Zs7ZSZ8bVSJce10KqTd05gjF0c=)
2: C2FZwLx5J6LOD83i2EDZOR5RtUI.roa (hash: TfNzI2cSGpuwkVH14MS6urWLY0KlAYesDO88Jrb6EW8=)
3: LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl (hash: 58JhFkXpy8H44/eYKxtYJRy8Cu93wPlqS1of6ENFCFA=)
4: Y4jQJn9-X8hzytmQcxrO0HZU2f0.roa (hash: bSnQnShvbXI84/DgdDetWzox4Bh8KlqChBqyyJnAbOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:88:86:2f:ce:b4:2f:0e:66:0b:34:b8:47:db:af:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Validity
Not Before: Mar 28 13:00:55 2026 GMT
Not After : Mar 29 13:00:55 2026 GMT
Subject: CN=2f96b853fd08ac0753c49283057a80b38e7bb2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:98:e9:55:a3:08:45:45:0d:22:85:0b:0d:40:
ed:ca:dd:1f:0d:3c:8f:50:a1:68:1f:f2:5f:48:71:
da:f1:6c:8d:ca:68:b2:a4:9d:43:7f:38:30:8b:be:
db:b5:42:65:38:fb:af:27:ef:4b:59:45:5c:bb:b3:
a0:56:fa:8a:d6:96:46:7a:a1:58:46:4c:9b:7c:7d:
95:62:2d:a6:81:62:4e:cb:10:bb:ba:93:79:55:38:
67:1b:80:2c:1a:1c:1f:b3:7c:ec:ab:43:fb:59:54:
95:a2:de:3f:17:b0:c7:a0:09:d1:30:72:7d:cb:3f:
74:31:fa:96:83:85:2d:67:6c:e5:41:90:98:69:b5:
6a:9b:3a:20:d5:d9:64:26:5a:c4:bd:57:c2:9a:a5:
83:26:fa:28:eb:37:19:99:e0:f7:55:6a:53:52:17:
0b:e9:76:e9:31:35:fe:13:81:8d:74:de:98:d9:f4:
d7:27:31:ed:2c:6a:c2:3f:0e:e9:6c:ad:4c:93:e1:
75:ca:71:b6:e8:74:e6:e2:0a:25:85:74:06:a3:4d:
8d:39:f9:09:e0:d1:1f:d5:23:89:16:6b:a1:68:24:
ce:cc:00:3b:8b:a2:8b:6a:97:28:48:f4:0d:7a:7c:
6d:e2:c8:d3:60:a2:68:0d:5e:fc:3a:15:18:c0:b9:
28:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:96:B8:53:FD:08:AC:07:53:C4:92:83:05:7A:80:B3:8E:7B:B2:D5
X509v3 Authority Key Identifier:
keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:63:26:c2:56:44:bd:b6:e6:a1:b4:7b:32:da:ca:d9:cc:dc:
29:4a:03:62:f6:4d:f5:99:e6:b6:39:84:b6:85:f2:27:dc:d3:
82:4e:d8:fe:71:65:82:b7:e2:bd:da:65:d2:0a:a5:6f:c2:22:
ab:6e:3b:1c:97:c5:f9:34:bd:b7:54:11:53:b9:52:22:de:e1:
4c:fa:d1:10:63:97:91:f1:30:19:e7:34:1d:71:76:d2:46:70:
68:80:e8:50:e6:94:ec:97:6f:3f:8e:f9:32:b6:5d:4f:d7:38:
91:4e:65:78:54:12:14:75:85:b5:80:13:22:16:8a:8f:25:1a:
10:93:13:46:f1:fa:1d:51:73:0f:13:2e:dc:f5:94:1c:f0:57:
95:ad:c5:b2:50:9a:b6:79:d2:8a:50:0e:e6:9d:4e:cd:2a:2d:
4b:99:86:3d:59:8a:ce:88:cf:3a:f9:f2:77:d9:5a:b0:67:b1:
8c:e6:b9:31:b9:0e:85:58:e7:ed:63:fa:2b:d3:b0:38:6b:bf:
84:1c:dd:19:95:b4:9e:11:ef:29:94:61:75:00:7e:a9:35:0f:
bd:1e:03:18:e8:61:bb:bb:fa:83:2b:5c:ae:a3:25:1f:65:bd:
fa:2d:11:9a:4e:c1:a5:0d:6b:0d:b6:31:25:09:89:da:e4:ec:
93:ef:c2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 21:45:22 2026 by rpki-client