Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
File: LG88xdeFlC5gSAk8dDOXOusV_iI.mft (raw, json)
Hash identifier: 4KHb8fCNRVabZsKXhK9amdjL26fUD6AUHwDEnupwbpw=
Subject key identifier: D4:16:72:A3:79:13:21:83:19:81:F2:88:33:8B:D3:66:BC:D4:F7:11
Authority key identifier: 2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22
Certificate issuer: /CN=2c6f3cc5d785942e6048093c7433973aeb15fe22
Certificate serial: 019D3865E4AE865BBE6B23B9C0A8B8129E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 07:01:34 +0000
Manifest this update: Sun 29 Mar 2026 07:01:34 +0000
Manifest next update: Mon 30 Mar 2026 07:01:34 +0000
Files and hashes: 1: Dl93bq_-cgvRcw-PhtUvvM6vei0.roa (hash: c9+943kBN1nH/iz48xI8TW6h5ATYqwjyAVBz6mPrBUM=)
2: LG88xdeFlC5gSAk8dDOXOusV_iI.crl (hash: HEm0QP6zkpLtbRtJifnHRhVrnD3kEndBJYhdj+cD7Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e4:ae:86:5b:be:6b:23:b9:c0:a8:b8:12:9e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c6f3cc5d785942e6048093c7433973aeb15fe22
Validity
Not Before: Mar 29 07:01:34 2026 GMT
Not After : Mar 30 07:01:34 2026 GMT
Subject: CN=d41672a3791321831981f288338bd366bcd4f711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:53:2f:b4:f2:a0:88:1d:28:ac:94:db:d3:
1c:bd:bb:26:39:a8:a5:22:0b:2b:d3:72:25:79:31:
4a:f7:d5:ab:59:04:a6:38:0d:f1:0a:88:de:83:57:
d2:3d:7c:92:f7:e7:3e:a0:0b:c2:a7:cf:3b:b7:f7:
eb:46:8d:a2:5a:de:6d:0b:cf:ac:36:5a:86:0c:2d:
6e:30:3a:39:8d:4a:9d:be:52:84:d3:bd:16:15:16:
62:42:50:f2:26:b8:d9:f5:2a:2a:c4:51:5c:f1:54:
85:ac:df:01:bf:fa:06:7f:0f:bb:a0:5b:b4:f7:fe:
d1:a6:a9:fb:ce:02:8d:ef:5c:f1:5f:23:ed:cb:90:
fa:ff:d9:ea:1c:3c:95:d5:86:bf:4b:7e:4a:87:59:
3c:87:9b:ae:be:fe:c6:45:8f:88:81:65:b5:67:80:
13:7e:c1:13:5d:a2:9b:bb:a7:fa:11:d6:1c:3f:d8:
da:f9:ab:8d:7f:0c:14:a0:af:7e:4d:73:e9:ba:09:
86:31:a8:7a:5c:35:56:73:46:d2:78:3e:90:ee:c7:
73:50:d9:88:d1:84:83:e8:1e:97:44:50:c8:e0:78:
5b:3c:95:6c:f3:6a:c8:c6:5d:33:f6:11:54:c5:52:
31:ea:bd:cb:6c:6d:0d:d0:13:d0:41:bf:e1:d5:48:
d6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:16:72:A3:79:13:21:83:19:81:F2:88:33:8B:D3:66:BC:D4:F7:11
X509v3 Authority Key Identifier:
keyid:2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d7:31:71:54:84:a8:68:a7:b9:ec:b0:07:44:b0:52:47:29:
dd:82:ba:8a:d1:53:76:d4:be:f6:22:8f:31:58:b4:c8:d0:ae:
49:f9:a8:21:2f:be:32:6f:9f:a2:94:04:fa:fd:95:40:88:c9:
49:7f:4c:d3:aa:a9:7e:b5:c9:36:c8:3e:0c:ca:51:f6:82:fe:
03:2b:88:4c:60:d8:4a:43:b6:9c:53:4e:fd:f5:98:6d:6b:9c:
88:be:e0:c4:ae:9f:a3:1b:6c:a7:45:93:07:07:15:3f:dd:56:
a0:40:3f:49:73:97:89:78:80:79:af:02:f9:b3:a0:05:b4:54:
23:27:09:fd:af:34:d9:45:42:06:b6:cf:64:15:3f:fa:9b:40:
88:08:c5:c6:da:82:ff:86:a9:15:ba:c4:e3:4e:1e:b3:48:6b:
54:e5:42:12:b1:9e:b0:3f:d7:6c:e8:99:4b:ce:55:8a:56:1d:
2b:fb:5b:41:11:53:c5:e0:2d:84:09:d5:c6:fa:5a:42:2d:fe:
95:21:20:ed:16:8e:70:df:af:15:44:8b:d0:10:e7:52:80:2b:
4d:1b:4e:4f:73:39:bb:27:c5:30:a0:16:b4:0d:1e:db:07:e2:
cb:5f:22:98:99:e0:fa:6d:ff:7b:b5:68:6f:0f:97:2f:b4:ee:
4e:0b:9d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:38 2026 by rpki-client