Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
File: LBGlP232MAtJEs4T9vqbEA_OJIg.mft (raw, json)
Hash identifier: qtBdVuCxkPdAVDR0M5nc5947WrP9xnI0JV6IN9DGy7k=
Subject key identifier: DA:E7:4D:36:CE:D3:F8:12:B8:FD:88:6C:85:C7:F0:DF:8A:0A:E2:66
Authority key identifier: 2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
Certificate issuer: /CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Certificate serial: 01A08A553BBFE9BB889225BF272230908211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
Manifest number: 1756
Signing time: Thu 10 Sep 2026 08:00:36 +0000
Manifest this update: Thu 10 Sep 2026 08:00:36 +0000
Manifest next update: Fri 11 Sep 2026 08:00:36 +0000
Files and hashes: 1: LBGlP232MAtJEs4T9vqbEA_OJIg.crl (hash: ruiqGSgYh19gNfohr1ckTwXbET2i7jaNm7af7ZdOT3M=)
2: g6y_C3GI08K-f3_sqQmbIIeCsaY.roa (hash: 8xFD9S8CkZPQNdyonHuQIqDDCHQLXi5Cn9ISvZJR0NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:3b:bf:e9:bb:88:92:25:bf:27:22:30:90:82:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Validity
Not Before: Sep 10 08:00:36 2026 GMT
Not After : Sep 11 08:00:36 2026 GMT
Subject: CN=dae74d36ced3f812b8fd886c85c7f0df8a0ae266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4b:74:4d:71:dd:31:6c:bf:9e:bc:bb:db:ca:
a1:8b:22:30:3a:2a:1c:71:5e:6a:74:00:a3:5e:a2:
6e:67:d5:d4:73:b8:a8:bd:39:79:79:e4:0c:49:49:
1c:e9:ce:5d:9c:40:d6:81:f9:b8:f9:fe:64:68:ad:
57:d7:f9:80:69:95:e5:d1:92:3b:37:ae:2a:d3:42:
1e:88:c4:86:7a:83:75:89:7e:8e:4a:e9:17:aa:4c:
b9:58:18:48:00:69:16:e8:51:db:f2:99:18:1f:a4:
12:45:aa:3a:48:e8:63:d4:7e:5a:b6:a8:50:d6:b8:
21:5f:6a:14:81:d0:31:5f:fe:11:fa:81:b8:6b:a1:
44:62:9f:39:20:a4:c5:50:88:c0:2d:bc:7c:b2:97:
2e:0b:d6:89:b4:ad:e1:a6:28:92:c3:f3:16:48:78:
a0:ae:f7:75:51:7a:27:8c:ac:46:ba:da:8e:94:e3:
cf:46:58:dc:b3:fc:cd:80:db:72:96:4e:1e:d3:3d:
18:73:87:24:da:0d:37:90:f4:a7:a1:f1:cf:4e:3e:
15:d0:d9:76:68:af:48:ee:be:d8:36:3e:d3:cd:af:
c5:5f:4d:4d:68:c7:6b:34:ed:32:1d:76:e0:9f:04:
2b:32:ee:36:53:00:bb:bb:d9:10:c6:dd:61:48:ee:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E7:4D:36:CE:D3:F8:12:B8:FD:88:6C:85:C7:F0:DF:8A:0A:E2:66
X509v3 Authority Key Identifier:
keyid:2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:97:ba:2e:fe:aa:b2:d5:d3:e3:60:88:2a:64:6c:02:8b:27:
d5:2f:61:f2:39:1d:81:17:9a:65:62:98:52:61:c4:15:07:58:
59:be:1d:08:56:96:b7:96:b7:50:7a:08:9b:0b:62:0c:c6:03:
d8:26:0a:df:94:9e:b8:29:51:36:9b:63:c2:c0:f4:2f:ed:53:
9c:fd:9b:de:78:cd:c5:9d:45:1a:c6:b3:12:bf:14:26:2d:36:
cd:27:5f:73:8c:9b:c7:94:d3:8f:b3:83:be:ab:e4:1a:a8:39:
a3:1f:59:71:42:d3:ec:c3:7a:51:25:78:b7:45:cd:29:c0:d0:
92:b6:15:49:35:7d:9f:64:3d:e3:6f:db:fa:91:ee:e1:89:db:
58:b5:6c:19:c6:aa:10:71:fb:39:38:68:87:da:a4:20:25:91:
9b:5a:0a:bb:54:a2:f2:fc:a5:50:38:16:50:13:21:3c:a8:c3:
3a:cc:51:47:9b:2c:9b:b5:21:3a:51:7e:b7:66:58:e7:8c:f2:
53:69:bd:47:48:c3:1f:3b:0e:7f:1d:24:60:5b:b0:24:b7:d1:
51:28:44:b5:17:59:ef:80:2c:d5:22:d9:96:b8:cd:72:bf:f4:
61:bb:7d:6e:dd:77:e4:aa:b9:c0:1c:f7:54:df:30:75:f0:56:
3e:c0:44:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:23:52 2026 by rpki-client