Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
File: lakErGCT4eIpoHTFBQb_7NoBDM8.mft (raw, json)
Hash identifier: Bye+CQA6varTlf3Ru8dn7pymL/HDtN508e5cWk4+TGM=
Subject key identifier: 75:2A:7F:37:F4:7E:AE:44:63:71:23:AC:74:92:70:01:4E:CF:29:B0
Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
Certificate issuer: /CN=95a904ac6093e1e229a074c50506ffecda010ccf
Certificate serial: 01A13FA742A371360FD7ED8EB22285A81433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
Manifest number: 101D
Signing time: Thu 15 Oct 2026 13:01:28 +0000
Manifest this update: Thu 15 Oct 2026 13:01:28 +0000
Manifest next update: Fri 16 Oct 2026 13:01:28 +0000
Files and hashes: 1: iqe4oUfCnKK4WwKFvUUmojN64us.roa (hash: rTjPU6L7Ao4uZ3Fd4ZWTn1lMEk1o4F4HlPUSbtAtfMc=)
2: lakErGCT4eIpoHTFBQb_7NoBDM8.crl (hash: O7p4lvXO4p9sm5LnJF1w8fWoq6EsEGXOmMHBO8uWM0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:42:a3:71:36:0f:d7:ed:8e:b2:22:85:a8:14:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf
Validity
Not Before: Oct 15 13:01:28 2026 GMT
Not After : Oct 16 13:01:28 2026 GMT
Subject: CN=752a7f37f47eae44637123ac749270014ecf29b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9c:9c:cc:6d:4a:ed:cb:bb:6b:55:57:70:81:
9e:42:f6:7a:b7:ff:37:19:dd:c2:c8:5e:a1:df:09:
62:49:0e:a5:b5:11:e1:54:5f:02:df:8c:70:b7:70:
ef:f2:34:0e:1f:ce:98:0c:ed:55:84:d2:81:00:ed:
4b:87:8f:ed:f9:03:c5:b7:46:a1:01:77:72:e1:83:
bf:3d:f4:36:17:7d:62:3b:a2:5b:cc:9c:41:e9:b0:
37:ff:3e:8f:dd:8c:1c:af:81:39:5f:c9:07:a0:db:
30:fa:5d:85:8f:35:ae:60:3d:f2:cb:84:4b:7e:70:
cb:86:5a:5a:bd:73:87:81:4a:0c:fc:a4:2e:54:b3:
71:1b:35:29:1c:0d:19:8d:e2:d3:90:90:46:aa:02:
2e:d6:3b:0a:5f:2a:74:4d:9a:c1:a1:41:3b:1b:cd:
6a:5d:82:51:3e:0e:cb:aa:55:87:a8:bf:f3:46:84:
84:08:c8:7a:31:b1:2b:57:9c:83:4b:12:33:ad:bf:
88:af:d2:38:f1:93:ca:8e:3c:be:b9:ce:d7:6d:eb:
de:18:60:19:9b:28:e2:54:2f:ee:1e:1f:d2:0f:64:
0f:62:b4:96:91:7d:28:0d:4e:b5:dd:f0:63:95:89:
03:30:36:b2:1d:34:56:1c:bf:ea:86:ae:40:a7:30:
00:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2A:7F:37:F4:7E:AE:44:63:71:23:AC:74:92:70:01:4E:CF:29:B0
X509v3 Authority Key Identifier:
keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ff:4c:96:c5:97:ba:e9:55:8f:bf:16:4d:99:c8:40:b4:cd:
74:d8:5b:e3:63:54:78:5e:8e:5f:da:c8:33:aa:20:6b:42:40:
26:81:d9:1b:d9:c1:33:e6:9e:9d:6f:b5:1c:6d:09:0d:68:db:
72:f3:08:92:aa:5d:a3:ab:72:be:b7:22:19:68:ad:80:cb:b5:
16:c5:14:82:b3:c4:11:64:f5:86:3f:2c:e3:03:a5:13:4a:28:
58:f3:55:a2:ab:3c:fe:2c:28:72:1a:1a:c6:90:ec:f6:82:cc:
89:bc:c1:be:e0:c1:ac:76:e1:6b:9b:36:70:28:e4:83:96:e4:
2b:28:7b:b8:dd:fd:39:de:1a:1c:4d:d0:1a:dd:3e:73:c8:6e:
4f:84:ce:f3:f1:95:f5:a6:bc:66:ab:4b:2b:b0:b6:85:11:05:
3f:c5:12:81:1c:77:9e:57:d8:0d:f5:53:8b:3d:92:12:dd:db:
02:5c:9c:92:41:70:b4:9a:15:e0:3a:4d:3e:3c:52:6c:ec:f2:
c0:a9:5c:09:ef:78:43:6b:64:44:50:9e:01:90:92:50:62:e8:
d1:86:8e:ca:0f:af:52:10:76:90:9e:32:ec:f9:1c:07:cc:1b:
fc:7e:df:86:50:f4:d9:5a:1e:23:62:1a:d7:8b:67:85:15:31:
d4:4d:f0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 23:09:12 2026 by rpki-client