Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
File: Lg1AUXqHO33CrrKNDtai-ZOj100.mft (raw, json)
Hash identifier: tBW4fyBnqABqYYz4PoGviY0qd4UBr9t52l/xMzyEB5Q=
Subject key identifier: 8C:03:60:9A:AA:FE:7D:CF:2D:90:55:DB:1E:BF:A0:6D:D4:8E:2F:6A
Authority key identifier: 2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
Certificate issuer: /CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Certificate serial: 01A0FEA2AF1936CF5A930ECCA366CA141F14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
Manifest number: 176A
Signing time: Fri 02 Oct 2026 22:01:09 +0000
Manifest this update: Fri 02 Oct 2026 22:01:09 +0000
Manifest next update: Sat 03 Oct 2026 22:01:09 +0000
Files and hashes: 1: Lg1AUXqHO33CrrKNDtai-ZOj100.crl (hash: X4Va39IT6GQ7C2AHwsjHe0tPufzZv+jEXSs70y3Stcg=)
2: mgEpeI12MEc1I9Yl4CGTBmBk2bE.roa (hash: +I2yVa8SpbahJZG3cLdGFLaq+xiLLvaqsYXX2ZnSZ5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fe:a2:af:19:36:cf:5a:93:0e:cc:a3:66:ca:14:1f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Validity
Not Before: Oct 2 22:01:09 2026 GMT
Not After : Oct 3 22:01:09 2026 GMT
Subject: CN=8c03609aaafe7dcf2d9055db1ebfa06dd48e2f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:eb:1a:ab:e8:02:68:78:41:36:0e:69:fd:95:
38:58:47:06:ee:a3:19:1a:d8:b2:34:37:1d:f5:50:
62:c3:00:6b:30:cb:9f:5e:c1:55:b1:58:73:26:ee:
de:d9:07:53:e6:98:2b:08:3f:8d:32:80:22:ca:5d:
50:f0:33:c3:2e:61:80:0c:8b:33:9d:7e:3a:0f:5b:
3d:47:72:06:f5:a6:49:65:b0:89:56:af:31:a6:31:
34:87:29:a3:e7:be:ae:36:8d:2c:66:01:0c:37:c4:
47:e7:49:ae:e4:40:e0:15:c9:95:eb:c5:73:83:37:
db:28:30:22:27:3a:3d:81:9a:a2:ba:90:89:c2:91:
c8:08:a2:de:f3:60:cc:62:14:b9:e7:f3:9c:ba:9c:
e3:39:88:6e:10:49:80:11:dd:a3:e2:98:ab:ee:22:
40:b4:d9:35:cb:06:e7:30:7e:2c:b6:07:19:f6:47:
4e:4e:69:9c:d2:af:63:13:44:f5:3b:78:25:80:9f:
79:90:8a:5b:bb:d7:3f:51:d7:c9:7e:32:ad:31:97:
54:ea:ce:05:9c:da:b7:9f:8a:c0:a6:11:49:31:4e:
02:cd:87:a4:76:0f:82:5a:35:cb:87:85:6f:5c:c2:
de:9e:44:6b:96:df:3e:95:74:9b:fe:69:1d:b3:17:
88:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:03:60:9A:AA:FE:7D:CF:2D:90:55:DB:1E:BF:A0:6D:D4:8E:2F:6A
X509v3 Authority Key Identifier:
keyid:2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f3:07:af:89:27:e6:e7:e9:d0:d3:e6:3a:bd:ed:5d:04:68:
ae:34:13:c0:32:53:25:52:ec:d3:8b:b2:34:13:65:49:a1:dc:
2b:14:0b:6a:d6:1f:59:ca:8f:78:dd:a5:1b:80:d8:ce:e5:73:
da:7e:68:89:71:6a:d4:48:1c:a9:c5:fe:2c:db:21:0a:da:35:
89:76:1c:78:b4:bb:e1:4d:ac:4b:30:e0:c7:19:06:c4:69:b9:
03:d8:01:a9:2e:68:ec:54:4e:22:fc:bf:aa:25:f0:68:d9:8d:
9b:79:d3:62:2a:f1:4f:1e:80:0d:03:57:64:37:37:2c:e9:a5:
11:af:17:12:ad:8c:5e:92:9b:ab:5c:e9:30:c1:0a:f0:53:6b:
b2:4f:34:b4:08:e2:7f:e5:a7:b4:92:96:68:43:d4:03:31:43:
b5:00:12:4a:88:97:07:82:79:7f:e5:6a:62:86:2e:da:d2:38:
83:77:4f:e8:22:2a:74:0f:84:ff:54:40:20:16:22:4e:5b:47:
9c:01:86:b1:12:2e:53:ed:f6:ed:90:23:6b:58:03:50:39:02:
db:8c:ea:a7:46:01:02:4a:16:26:54:21:a8:71:ea:4f:54:91:
0b:6e:fb:da:cd:16:d1:85:7b:8e:7a:45:5b:7a:98:f8:bf:ee:
c0:f3:10:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:35:13 2026 by rpki-client