Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
File: LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft (raw, json)
Hash identifier: lJrYkaiDMR/Pk/Zu+073FDBs+wfgF143w5W9v1j2TMo=
Subject key identifier: E8:C2:5C:B6:60:C4:5E:23:AC:28:F5:FA:48:F7:69:32:1B:E2:5E:26
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial: 019E9D3C9718B4EB162CB0BF26FC8D323B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
Manifest number: 09F7
Signing time: Sat 06 Jun 2026 14:00:54 +0000
Manifest this update: Sat 06 Jun 2026 14:00:54 +0000
Manifest next update: Sun 07 Jun 2026 14:00:54 +0000
Files and hashes: 1: LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl (hash: i0jXD8VlW4Vpkt2YDW+XkZEAlQEzeC9eiXvLrXqa/Rc=)
2: UN8luFCv80D_HegX80Rq_1yKwcE.roa (hash: TDiFAEDBmlofvjYNrJv/M7/10Dwv1YxGQkuX5cWs9sA=)
3: Y4jQJn9-X8hzytmQcxrO0HZU2f0.roa (hash: bSnQnShvbXI84/DgdDetWzox4Bh8KlqChBqyyJnAbOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 12:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:3c:97:18:b4:eb:16:2c:b0:bf:26:fc:8d:32:3b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Validity
Not Before: Jun 6 14:00:54 2026 GMT
Not After : Jun 7 14:00:54 2026 GMT
Subject: CN=e8c25cb660c45e23ac28f5fa48f769321be25e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c2:6f:bd:a9:22:13:37:d8:fa:9e:fe:87:a6:
8d:e4:96:f9:06:fb:d4:03:a5:bb:00:c6:82:7b:17:
93:a2:ec:20:1b:1f:d2:35:b2:9c:27:a5:71:8e:26:
25:32:e8:d2:98:9a:6c:40:6a:95:5e:14:6e:15:fc:
08:9d:f6:20:3b:d8:9b:64:48:24:c1:0a:0c:0d:96:
ce:23:90:ce:9e:53:2b:4d:05:15:cd:c8:e6:f9:4f:
12:7f:7a:d5:2c:53:e4:35:6e:9d:c8:0c:c6:ab:bc:
c2:2b:0a:8f:f7:6c:e4:df:dc:dc:9b:c8:56:9f:a6:
5b:76:df:4d:34:f3:10:27:ee:69:c8:31:5b:7f:e0:
22:1a:dd:32:48:0b:cc:50:9b:37:cf:44:e1:55:4d:
1d:5c:08:fa:01:ab:bb:54:d5:49:a6:1f:3d:4d:52:
52:f3:1b:ff:a8:63:28:48:67:1b:63:4a:c3:e5:8d:
d6:97:76:16:b0:0d:cb:8d:f9:f6:a5:ec:72:bc:8b:
bf:e6:a7:8c:f0:6e:c0:df:7a:75:c9:40:55:e8:54:
7f:2d:7b:7c:3c:7c:00:74:67:b9:cf:4e:ab:79:cd:
47:ce:ea:ef:20:e1:8c:9e:bb:00:f3:16:e6:25:cf:
6b:34:ee:8c:44:5e:4f:bc:22:31:85:35:6f:f6:59:
5d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C2:5C:B6:60:C4:5E:23:AC:28:F5:FA:48:F7:69:32:1B:E2:5E:26
X509v3 Authority Key Identifier:
keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2f:1d:ae:cf:dc:6f:5a:a6:b3:3b:61:49:f4:48:35:ae:c4:
c7:45:92:d6:61:78:88:d1:40:35:8e:8e:c4:b1:f2:94:7c:32:
e0:c8:8b:cc:6e:a1:40:86:82:5d:68:9e:96:75:4d:35:c0:fd:
94:f6:9d:08:a9:f1:a7:d5:76:a5:2f:fe:cc:42:10:23:62:99:
18:b0:01:55:fb:cb:a4:82:32:36:6b:c0:34:d3:94:c8:20:b5:
39:2d:1a:59:51:93:31:6c:f6:b4:6f:1b:26:66:18:bd:95:ab:
29:2e:40:6e:07:74:77:5c:60:78:8e:15:42:f4:9f:1e:b4:ff:
73:37:bd:0c:50:49:5b:0f:5b:df:69:e9:de:6d:37:51:90:15:
92:eb:b9:02:51:c7:a6:1b:58:03:56:2d:34:f2:45:54:07:fc:
16:b0:e7:16:73:71:4e:8e:1e:9b:24:84:66:4d:3d:0f:7d:27:
9f:d4:8a:b8:71:e7:b6:8c:1b:99:b1:24:09:92:ac:84:71:34:
15:b4:26:20:a4:5b:cc:8c:2c:78:13:17:5e:98:0f:7d:07:99:
1d:a8:81:17:8e:e2:da:6e:ce:f9:2e:86:26:6b:ee:bd:13:f8:
e1:59:72:71:7b:42:11:f3:e3:60:c2:98:66:92:21:15:72:41:
bd:02:53:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:51:22 2026 by rpki-client