Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
File: LgO_8-c1I3MjiWRkff2JOyajs0k.mft (raw, json)
Hash identifier: SAxvY94JyuRjGPKGuFDIM4F2bFQiD+2onilZV3T8pfI=
Subject key identifier: 2C:0A:CB:FD:D6:C2:6E:7B:F5:8B:1B:F1:13:0A:A2:5E:0C:B7:D5:16
Authority key identifier: 2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
Certificate issuer: /CN=2e03bff3e7352373238964647dfd893b26a3b349
Certificate serial: 019F9FCD4D2E1EC90428566FA0A7624AA7B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
Manifest number: 19CD
Signing time: Sun 26 Jul 2026 19:00:59 +0000
Manifest this update: Sun 26 Jul 2026 19:00:59 +0000
Manifest next update: Mon 27 Jul 2026 19:00:59 +0000
Files and hashes: 1: 9ScuOR40JPEdevNO4cbm0kljTAE.roa (hash: z5jkUUVkRMGDyRvntls/c34nppviE90iTNDVa2nDpsg=)
2: LgO_8-c1I3MjiWRkff2JOyajs0k.crl (hash: XmOevnCRKgYKH3xqtOpZyfBi6cFfMAmFC4Yty0/H6EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cd:4d:2e:1e:c9:04:28:56:6f:a0:a7:62:4a:a7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e03bff3e7352373238964647dfd893b26a3b349
Validity
Not Before: Jul 26 19:00:59 2026 GMT
Not After : Jul 27 19:00:59 2026 GMT
Subject: CN=2c0acbfdd6c26e7bf58b1bf1130aa25e0cb7d516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:f9:09:50:85:39:b8:1d:14:55:cc:59:7e:
ae:3a:76:52:58:e8:93:fc:5e:b3:77:c5:ee:eb:c4:
b6:27:6a:ca:86:ab:fe:8d:19:12:13:ad:b3:e4:b1:
48:8b:8f:9e:89:51:15:6a:e0:66:4b:06:9e:ad:6a:
92:66:14:de:b1:57:40:be:fc:35:20:8d:de:63:d2:
8f:5b:62:7f:01:b8:dd:a6:da:41:3f:4d:62:cf:6f:
0e:43:a3:2a:8f:f7:91:d4:20:84:8c:c4:95:54:9d:
31:30:c2:99:5f:a0:81:06:b6:76:be:1a:00:76:4d:
c7:d9:f7:8d:fd:98:84:1a:a2:ba:d3:6c:48:9a:36:
2a:9e:7c:07:99:f0:e7:b6:9e:d3:ae:3d:18:b5:32:
a9:f6:5a:4d:ba:8a:80:f1:79:1b:26:6c:80:bf:a3:
ef:e4:c4:0b:2f:13:a0:69:c0:43:c0:25:ad:bc:ab:
32:6a:29:a4:d6:78:01:df:71:aa:45:a6:6e:77:9a:
4a:fe:8f:2d:d3:47:2b:26:ef:42:cd:22:56:ff:4a:
52:60:57:87:cb:60:02:f9:4d:96:d7:4e:1a:23:13:
0f:ee:52:bd:ff:e6:d1:7e:c4:a5:05:6f:0b:e0:e3:
15:f9:e1:05:d2:9a:81:1a:85:40:e6:c9:35:a9:8a:
79:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0A:CB:FD:D6:C2:6E:7B:F5:8B:1B:F1:13:0A:A2:5E:0C:B7:D5:16
X509v3 Authority Key Identifier:
keyid:2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:37:8b:9d:e9:fb:ff:9f:4e:31:ae:41:b5:45:c1:54:7d:4e:
48:42:53:82:95:1c:4c:51:f6:f7:e2:c5:dd:a6:b8:4d:47:6c:
36:28:2b:d5:6d:c0:3d:5a:95:da:c8:98:8f:a4:c1:6e:12:87:
56:7b:dc:d3:8f:87:7a:44:bb:36:0a:3e:e5:f0:20:12:a9:c3:
42:c1:c4:a6:a2:8a:27:5a:04:5c:16:16:76:ab:ac:6a:f3:82:
a5:d7:f6:0e:b4:a0:e9:68:fc:37:71:50:d9:05:c2:19:1c:70:
5e:47:d8:77:b6:39:57:ba:5f:e1:ae:f8:34:8a:60:67:2c:6d:
0f:9e:4b:1b:2f:50:10:96:fb:a4:f1:9a:3c:3e:de:5f:35:e9:
39:e4:d1:3c:9d:72:d4:57:f1:d6:cd:08:09:74:56:96:6a:28:
28:6f:a8:11:25:3c:38:12:0c:52:46:80:25:17:d4:ef:28:95:
f1:33:b2:6f:e5:8d:38:eb:01:7b:87:04:e8:65:9f:68:85:5c:
96:a9:ea:41:c5:2d:c7:d6:c3:e7:0d:15:f7:94:a5:ba:e8:22:
ce:71:68:d6:a1:67:95:1d:e8:6e:30:6b:c3:a8:01:4c:c5:ab:
cf:00:b1:25:b4:44:24:ab:6c:7b:3b:22:69:d3:d1:df:ad:38:
45:7c:9e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:26:12 2026 by rpki-client