Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
File: lakErGCT4eIpoHTFBQb_7NoBDM8.mft (raw, json)
Hash identifier: 7nX7dQwYinOFCxsU1xDQkujpEvWM5A8Ab9ymoZYai9M=
Subject key identifier: 93:7E:02:20:25:FF:BC:49:3C:C1:29:2A:50:E2:AC:A5:AD:51:3D:81
Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
Certificate issuer: /CN=95a904ac6093e1e229a074c50506ffecda010ccf
Certificate serial: 019D3865EB1A0E9E24F0951B71C83D72F4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
Manifest number: 0E07
Signing time: Sun 29 Mar 2026 07:01:36 +0000
Manifest this update: Sun 29 Mar 2026 07:01:36 +0000
Manifest next update: Mon 30 Mar 2026 07:01:36 +0000
Files and hashes: 1: iqe4oUfCnKK4WwKFvUUmojN64us.roa (hash: rTjPU6L7Ao4uZ3Fd4ZWTn1lMEk1o4F4HlPUSbtAtfMc=)
2: lakErGCT4eIpoHTFBQb_7NoBDM8.crl (hash: Qj5CS/T+M846ajBS7qseH/ICBZuas9EteOUO/dtzP9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:eb:1a:0e:9e:24:f0:95:1b:71:c8:3d:72:f4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf
Validity
Not Before: Mar 29 07:01:36 2026 GMT
Not After : Mar 30 07:01:36 2026 GMT
Subject: CN=937e022025ffbc493cc1292a50e2aca5ad513d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:d5:17:50:c4:bd:b7:55:08:3c:44:28:fd:
f4:7e:01:4f:e2:b3:84:6a:6f:b9:0c:1f:e9:e6:72:
87:8e:07:e8:f4:a1:b7:0b:be:9a:1b:8c:96:3d:56:
70:be:e3:20:e2:9f:5f:5f:cd:26:a0:d3:4f:e1:15:
9c:d9:b5:11:d6:03:a0:da:af:25:cf:9a:33:28:9e:
15:22:6d:34:b8:de:be:fa:47:c0:4c:74:67:c2:e5:
0d:8f:5e:52:0f:b2:34:2e:fa:da:33:10:93:9d:db:
48:c0:61:0e:d6:0b:9b:2f:a0:22:81:48:09:cd:1f:
33:69:7c:80:e3:41:44:ab:43:0b:14:f4:d9:48:24:
93:c0:01:f2:48:f2:f2:9c:0a:47:30:d0:ae:56:1b:
e3:38:12:3b:02:ce:f6:cb:8a:ec:91:41:72:85:c3:
74:ab:38:ed:7a:bc:6a:f8:b2:ec:2b:aa:4c:31:3e:
ed:b1:5b:15:79:8d:1c:55:14:52:09:69:3c:04:eb:
66:2d:89:0f:cd:ca:df:c2:9a:65:5b:88:41:56:fd:
13:4e:d6:b8:ef:d2:6d:b5:66:3e:23:6d:d9:f9:2a:
21:57:81:f0:25:b3:b4:9c:ca:6e:9a:df:57:eb:d2:
92:74:be:6b:ef:b9:20:77:b6:d1:19:d6:c0:6c:74:
9e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7E:02:20:25:FF:BC:49:3C:C1:29:2A:50:E2:AC:A5:AD:51:3D:81
X509v3 Authority Key Identifier:
keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e9:3a:a5:88:11:01:90:01:82:b7:6a:ce:8f:63:62:b5:5e:
45:a3:b4:74:1b:48:dc:37:5d:ba:20:5e:bb:f8:b6:4d:31:48:
96:0a:98:0a:bd:22:75:91:a1:08:b9:34:ee:b4:bc:dc:22:f4:
d6:77:4b:53:59:87:4c:2c:be:75:0d:12:32:54:39:0f:62:4e:
8b:db:e5:50:ae:5e:33:6c:b0:b4:dd:ed:d1:f0:93:8c:32:12:
b1:62:16:34:f3:ed:dd:26:e8:7b:c1:41:75:84:d6:d7:64:81:
31:90:9f:aa:26:fb:e0:5b:5d:f6:f8:c9:9a:7f:65:ac:32:93:
f6:7e:51:39:7f:61:0d:db:75:dc:a6:02:3e:84:3c:20:78:d6:
c6:8b:98:b2:b1:71:2f:f3:39:5e:81:68:2a:b4:f7:c0:7e:ba:
18:d8:59:db:e8:52:5e:85:b4:f5:d6:69:9c:13:b1:2f:09:c1:
bb:be:88:54:2e:1a:e3:6c:ae:b9:ad:f2:35:6e:f9:2d:8b:0e:
65:2d:9f:6d:94:5f:41:3e:bc:e4:a9:0c:ac:6c:d7:d1:4e:29:
d5:fd:b5:48:9f:fa:0b:9b:d3:1c:b7:0b:e3:e3:0b:cf:fd:3b:
5e:a3:e1:be:95:68:af:83:b6:99:4e:04:bf:4b:c7:fb:1e:ec:
e1:be:98:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:36 2026 by rpki-client