Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
File: lgYvXdsY-W14SSs1ONd0XMRxSiY.mft (raw, json)
Hash identifier: BMuRgM/JGB0wcRIkDjB/r0EbMw3dVHncmL5IuXcMzwc=
Subject key identifier: BB:32:C3:23:03:BA:90:4A:AD:CD:E1:17:D8:E5:F6:BD:B3:00:00:21
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 019D3941A6094AAD7C33B435EF22D835ECA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
Manifest number: 0B72
Signing time: Sun 29 Mar 2026 11:01:36 +0000
Manifest this update: Sun 29 Mar 2026 11:01:36 +0000
Manifest next update: Mon 30 Mar 2026 11:01:36 +0000
Files and hashes: 1: 1EZE1VFle3pJk-oWHPrHHxhMMXA.roa (hash: zAz64MVhsrxCuG6UwDUxcbTbEY8PQpGcwky1pjaIQ3o=)
2: lgYvXdsY-W14SSs1ONd0XMRxSiY.crl (hash: SFETRw7TzHen4z92vKmeIh5eJJLJwNhgKPLrBGUzt34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:a6:09:4a:ad:7c:33:b4:35:ef:22:d8:35:ec:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Mar 29 11:01:36 2026 GMT
Not After : Mar 30 11:01:36 2026 GMT
Subject: CN=bb32c32303ba904aadcde117d8e5f6bdb3000021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:ef:1d:45:73:ce:6c:49:de:56:5a:fc:bd:
46:0d:89:39:c0:e4:7d:75:7b:71:88:42:7b:fa:61:
fe:5a:2c:b3:6e:61:90:51:1e:4d:7c:a9:4e:72:b0:
be:ee:3d:20:50:4a:09:c6:7c:76:3f:48:06:8d:97:
49:ce:36:f7:63:f9:13:ce:83:3d:1e:71:6a:53:4d:
79:98:93:bf:ac:51:8a:f8:c6:6b:5e:12:82:c2:13:
57:af:60:dd:b4:70:34:12:07:d1:01:83:84:85:34:
77:92:48:1e:bf:66:7c:e5:c4:6a:e8:db:a4:d7:d3:
65:65:18:f2:54:6e:22:51:fa:00:31:2f:6d:a5:5e:
cc:11:76:69:59:9c:a3:1b:e8:84:93:7c:9b:ed:fb:
72:2b:41:0a:30:b6:0b:06:e0:fc:d4:9c:60:bc:92:
d8:3e:94:2d:73:2b:c3:3e:4c:55:c5:15:31:a8:ab:
91:4e:bb:5e:85:ea:6b:50:b0:b9:8b:7c:e4:92:17:
ab:da:d9:49:c0:8a:56:2c:db:d3:71:b8:19:9a:83:
09:82:c0:54:66:5b:36:15:cf:b5:01:8d:3e:a8:c9:
9b:7e:4c:3d:8f:cf:2a:1f:90:0a:93:89:33:69:6f:
be:f7:ae:32:66:f4:2f:5e:84:5e:c3:73:3b:f6:57:
31:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:32:C3:23:03:BA:90:4A:AD:CD:E1:17:D8:E5:F6:BD:B3:00:00:21
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d1:e6:c3:0a:f0:de:67:64:95:d5:3b:f9:fc:ca:57:0a:b5:
13:27:58:7e:5b:9f:e1:81:c2:58:b2:3a:cb:33:f3:66:da:fb:
f5:5b:ef:ad:43:8e:a2:c7:b0:df:36:64:7c:11:99:f6:90:c3:
c4:c0:0f:69:d1:24:69:12:fd:ae:d1:8b:c5:aa:bf:a0:77:bb:
21:ce:39:bf:07:be:bc:49:c9:aa:05:03:b6:da:d4:04:89:cf:
e5:d3:a5:a3:e2:16:4f:0b:3d:c9:4d:e0:5b:d4:88:ef:61:09:
6d:7a:72:e5:d1:4a:de:56:57:83:23:b1:10:a7:0b:dc:8d:a3:
6a:69:d8:47:a3:73:f8:53:1b:3a:bc:a0:f0:0c:95:6a:6f:fe:
05:61:4e:c1:08:95:72:da:b8:f7:9a:74:2a:b6:8a:89:3b:eb:
f2:3e:e0:bf:cf:42:9f:81:47:b9:af:3c:2d:95:21:b3:90:ff:
48:c5:74:8d:c2:d8:d8:06:d6:ec:77:1a:29:75:70:ca:60:b4:
a7:79:e4:38:f9:95:9b:e1:84:f5:9b:89:da:ab:e3:46:11:a4:
d3:35:f5:7d:8c:f1:3d:d2:0d:c9:10:2c:b9:da:7a:55:4d:d6:
28:c7:51:93:70:41:c1:d7:da:31:7b:71:40:98:02:cf:7e:9d:
4b:35:b7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:32 2026 by rpki-client