Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
File: lakErGCT4eIpoHTFBQb_7NoBDM8.mft (raw, json)
Hash identifier: XaWoeW3lXYyW6byJuxWVjX6v0CSHkTIMdCnHrmaTia8=
Subject key identifier: 65:1F:6A:05:C3:84:57:8A:71:A7:F8:6A:25:89:53:3E:5B:AC:26:06
Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
Certificate issuer: /CN=95a904ac6093e1e229a074c50506ffecda010ccf
Certificate serial: 01A1494F37041C32FEE95F527A324C6A2400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
Manifest number: 1022
Signing time: Sat 17 Oct 2026 10:01:30 +0000
Manifest this update: Sat 17 Oct 2026 10:01:30 +0000
Manifest next update: Sun 18 Oct 2026 10:01:30 +0000
Files and hashes: 1: iqe4oUfCnKK4WwKFvUUmojN64us.roa (hash: rTjPU6L7Ao4uZ3Fd4ZWTn1lMEk1o4F4HlPUSbtAtfMc=)
2: lakErGCT4eIpoHTFBQb_7NoBDM8.crl (hash: 8Cg2SWFH9p/MYS8DCXTsruwVtClX0o/5gB6YWWSbG4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:4f:37:04:1c:32:fe:e9:5f:52:7a:32:4c:6a:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf
Validity
Not Before: Oct 17 10:01:30 2026 GMT
Not After : Oct 18 10:01:30 2026 GMT
Subject: CN=651f6a05c384578a71a7f86a2589533e5bac2606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:97:3a:3e:74:d0:37:49:62:ca:28:9b:de:e9:
82:d0:40:72:91:9e:2c:f4:d0:49:02:82:a3:bf:ff:
1e:c7:2a:94:f7:70:e9:d8:a4:b2:8a:88:38:c5:76:
20:1b:f5:32:1d:a5:0f:82:db:81:48:2b:38:c6:ba:
0d:be:d6:e6:31:8a:48:d9:f8:86:03:8c:82:50:5b:
98:c7:5d:40:07:a7:e1:9f:b9:4e:71:53:64:d1:3b:
e5:c2:4d:a5:59:68:18:66:8a:ba:a3:36:22:e6:e6:
f4:8e:43:e4:74:ba:86:ad:37:5b:bd:c6:53:e2:a7:
31:d8:37:8d:e4:4e:b3:24:85:45:b3:5a:0b:59:ac:
f7:12:34:2b:b6:b9:4b:0f:39:f3:d7:cd:77:bf:a2:
72:f4:39:b1:d0:23:e4:bf:53:09:9a:a1:ad:d9:ed:
8b:b8:eb:ac:8c:39:b0:c2:bf:7a:4b:18:3a:5a:df:
f6:91:6f:da:8e:a6:c9:3e:7d:c1:02:54:9d:bb:05:
8d:4c:52:7c:30:8e:71:ec:c7:a0:ff:77:b5:99:45:
58:56:6e:16:72:d0:bb:c3:53:11:75:88:29:34:44:
ba:4f:8b:c4:f7:45:34:d7:27:2e:12:44:63:d3:70:
4b:26:b9:71:b5:a0:4d:aa:d9:d7:12:38:4a:eb:37:
3b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1F:6A:05:C3:84:57:8A:71:A7:F8:6A:25:89:53:3E:5B:AC:26:06
X509v3 Authority Key Identifier:
keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:06:64:b3:b7:94:7c:39:6c:1b:96:99:04:7a:97:f3:fc:4e:
9e:c1:25:08:29:10:01:7a:37:64:9e:f5:a6:ab:2f:b1:0c:73:
14:6f:e1:66:c1:00:15:80:0d:21:e8:8e:01:8d:8a:4e:25:07:
c4:ab:ee:c1:b8:b8:3e:1e:b8:bb:13:11:48:91:53:04:ba:9b:
07:24:22:0d:8e:15:d5:b8:16:12:61:63:fe:20:53:39:c0:f3:
5b:c3:ad:fd:29:a5:4c:6e:cb:02:b0:b7:65:31:a2:81:4d:6b:
5e:2e:b0:4a:b2:94:ad:f2:1e:5f:44:f3:41:b5:da:d9:bd:b5:
88:e3:06:15:dc:47:b1:3e:7f:ff:85:06:d9:83:84:60:52:c4:
10:ec:a0:9c:40:a4:13:d4:6d:f8:53:49:71:47:bb:50:a2:06:
e3:74:3b:e4:ef:b6:d5:fb:7c:33:08:7f:f1:af:43:4d:9d:b5:
33:2c:74:80:9b:dc:2f:fe:d5:ee:3b:53:ef:0c:eb:9b:79:8b:
92:ad:79:36:7f:6b:e3:78:41:cf:2e:7a:70:58:0e:74:02:ba:
45:79:ef:d9:5d:ad:d3:65:95:22:d0:d0:f5:69:15:1b:a1:b8:
3b:f8:dd:c6:69:c4:75:c3:f4:99:50:21:53:34:3e:47:50:94:
9c:fe:c3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 18:03:14 2026 by rpki-client