Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
File: Lg1AUXqHO33CrrKNDtai-ZOj100.mft (raw, json)
Hash identifier: rAjAq7WiMU5752QSQkBNmKs60vDRVkBVFNkqb0rj3GI=
Subject key identifier: 07:D3:12:10:CD:98:6A:43:70:C9:5F:85:C2:2B:7E:F1:02:C1:3E:E8
Authority key identifier: 2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
Certificate issuer: /CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Certificate serial: 019FF421A604E027F268F8CDA42910943681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
Manifest number: 16E0
Signing time: Wed 12 Aug 2026 04:01:13 +0000
Manifest this update: Wed 12 Aug 2026 04:01:13 +0000
Manifest next update: Thu 13 Aug 2026 04:01:13 +0000
Files and hashes: 1: Lg1AUXqHO33CrrKNDtai-ZOj100.crl (hash: vNkTA3vr8soBn1EgiEK4pZ/UZZnSS+2zdTcTlxDIQNE=)
2: mgEpeI12MEc1I9Yl4CGTBmBk2bE.roa (hash: +I2yVa8SpbahJZG3cLdGFLaq+xiLLvaqsYXX2ZnSZ5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:21:a6:04:e0:27:f2:68:f8:cd:a4:29:10:94:36:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Validity
Not Before: Aug 12 04:01:13 2026 GMT
Not After : Aug 13 04:01:13 2026 GMT
Subject: CN=07d31210cd986a4370c95f85c22b7ef102c13ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:67:0f:c2:36:c6:8f:12:bc:3a:83:8a:eb:8f:
e5:38:a5:56:76:30:5a:b6:2c:68:d2:1c:f5:59:d0:
8c:ae:1b:e0:21:d5:e0:3f:d5:14:70:88:76:70:b3:
09:6d:4c:e6:c8:0b:05:90:b3:90:cc:6f:73:96:29:
01:8e:2c:6d:d0:2a:e1:92:9c:9a:e3:e8:ef:d4:68:
bf:f6:7b:2d:d7:a4:e1:44:4b:33:08:0b:0c:29:fc:
25:21:f1:9c:ce:d9:09:6f:af:71:30:12:95:c0:e8:
aa:cb:84:ab:98:b3:ef:62:2b:e2:cc:fd:87:5d:ec:
36:de:26:d3:fa:9a:ff:46:b8:31:41:ae:8e:2d:68:
8b:83:a7:48:7f:5c:78:df:66:cd:b0:a2:b6:38:31:
c7:1a:ec:4b:b1:6d:22:ec:d2:d1:f2:ff:29:df:d2:
c9:ac:45:5a:56:92:8b:df:1d:0e:8f:4d:bb:b4:0e:
19:17:00:70:3d:05:3c:12:54:30:ac:8c:dd:cb:61:
7c:80:5c:cc:dd:ce:b6:86:f3:04:31:b8:bc:c7:d9:
a5:f6:b7:6c:e4:cf:a2:d2:f0:37:64:fd:c9:dd:9d:
37:77:e2:84:a0:14:21:12:d3:88:ee:b8:bf:8d:0e:
88:a4:9d:dc:2c:72:1f:a5:06:94:38:da:5e:68:39:
83:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D3:12:10:CD:98:6A:43:70:C9:5F:85:C2:2B:7E:F1:02:C1:3E:E8
X509v3 Authority Key Identifier:
keyid:2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:22:79:8d:0c:52:63:32:32:0e:a2:5f:20:7a:a4:47:e4:40:
bc:c4:17:b3:e4:e0:49:93:e2:29:cc:56:7e:27:59:db:2c:20:
ca:1b:28:d9:e9:30:67:df:ea:b2:c2:1a:e4:ff:13:31:22:50:
9b:54:d1:23:85:41:c2:01:17:77:22:68:73:9d:46:f8:dc:82:
a7:e1:e6:07:2c:07:8f:97:7f:05:59:00:25:0f:cf:08:7f:96:
cf:2a:87:2d:d5:ef:7f:29:a0:71:2c:29:e5:d9:2d:cc:f6:c6:
db:db:e8:4a:c5:c5:91:70:8d:98:46:16:be:76:9f:79:0b:14:
5e:dc:77:00:7b:7b:1a:ff:0b:b9:46:75:a5:57:9a:b2:37:82:
8b:bf:dc:7b:61:4b:8c:c7:2a:13:fc:14:ff:a0:72:bd:c3:68:
3b:39:d9:67:f6:82:30:e3:91:b1:ef:47:78:6c:f9:f2:a0:d1:
c3:31:8b:a8:2a:58:ee:81:df:12:56:69:ea:35:0a:cf:fe:82:
72:b6:3c:72:2f:a0:3b:6d:d6:97:04:b7:6d:0e:94:29:99:18:
1b:b3:3e:b8:c6:35:21:91:d1:f0:89:9f:55:6d:6a:b1:99:26:
e3:34:0d:18:42:dd:53:83:7a:80:f2:18:5d:41:c2:45:85:d1:
f8:1e:1c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 11:12:48 2026 by rpki-client