Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
File: lakErGCT4eIpoHTFBQb_7NoBDM8.mft (raw, json)
Hash identifier: KRibLkXt0ftgow7fMPaa1TKxXHeAA+ekYy4zkJA7yPk=
Subject key identifier: 80:E7:37:C3:5F:BD:42:25:49:8E:6F:8E:58:2A:FF:22:9D:CA:F8:44
Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
Certificate issuer: /CN=95a904ac6093e1e229a074c50506ffecda010ccf
Certificate serial: 019E3373FDE9B50213C765357470AE3895C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
Manifest number: 0E89
Signing time: Sun 17 May 2026 01:01:39 +0000
Manifest this update: Sun 17 May 2026 01:01:39 +0000
Manifest next update: Mon 18 May 2026 01:01:39 +0000
Files and hashes: 1: iqe4oUfCnKK4WwKFvUUmojN64us.roa (hash: rTjPU6L7Ao4uZ3Fd4ZWTn1lMEk1o4F4HlPUSbtAtfMc=)
2: lakErGCT4eIpoHTFBQb_7NoBDM8.crl (hash: 6oUXrPIchMRAEhm6b8UqJ5FE4CpVxwsgmz8vGbf6pyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:33:73:fd:e9:b5:02:13:c7:65:35:74:70:ae:38:95:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf
Validity
Not Before: May 17 01:01:39 2026 GMT
Not After : May 18 01:01:39 2026 GMT
Subject: CN=80e737c35fbd4225498e6f8e582aff229dcaf844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bc:71:a7:d8:94:70:38:7a:de:ee:e6:ad:0c:
f3:01:b4:a0:d7:29:89:e6:bc:87:d6:c4:9f:06:17:
ba:12:a0:29:73:57:6b:26:d2:4f:79:cd:cc:30:38:
65:93:ab:5b:80:2b:52:68:96:60:ff:bb:d9:af:04:
23:73:e7:c5:2d:88:01:68:eb:0d:a4:df:09:d9:a9:
fc:eb:d6:55:a2:b7:77:d9:fd:5b:71:1a:b0:e3:49:
53:66:4f:ea:9a:68:8b:6b:92:6c:ef:f2:63:b5:ab:
cc:10:52:1c:52:4d:22:1e:a8:fb:31:df:c8:87:20:
4a:ab:5b:15:5d:bf:6d:bd:17:ab:3e:9b:fb:48:6f:
08:e9:3c:0b:08:84:c9:df:88:97:7a:ef:78:80:d3:
64:15:a5:cf:00:ec:f2:64:39:02:d6:4c:01:60:51:
c8:c5:a7:a0:d7:c4:79:19:e5:75:69:1a:97:de:b1:
6f:cc:76:e0:87:40:a9:14:70:13:83:1c:fa:26:46:
24:7d:e9:fa:b3:bd:aa:4f:b4:90:32:8a:6f:c9:b2:
3f:23:4d:ea:3f:df:4e:c1:76:c0:12:2a:40:7a:2f:
e1:13:a6:9a:5f:d5:d9:3f:02:61:87:61:57:c8:49:
c3:2f:fb:84:39:23:97:73:1c:da:26:6b:07:71:d9:
d6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E7:37:C3:5F:BD:42:25:49:8E:6F:8E:58:2A:FF:22:9D:CA:F8:44
X509v3 Authority Key Identifier:
keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:49:40:04:0b:ec:f9:79:f0:dd:90:02:a1:61:f9:72:2a:68:
51:89:a4:dd:17:b4:75:7b:b5:a8:4f:c2:33:ba:c0:dc:49:37:
e9:43:5b:dc:a7:42:03:6e:a4:fe:46:7f:c5:f6:b9:0c:f1:e9:
5b:86:db:20:56:de:2f:6f:fe:4e:51:dd:27:ed:1c:c9:3d:8f:
24:32:94:b3:ce:15:d8:91:a1:1e:6d:24:a8:ef:e0:95:d8:6c:
27:bc:bd:cb:52:35:2a:d0:fe:ca:b4:6c:41:b0:eb:bd:15:c4:
27:c5:80:04:3a:49:c1:ce:56:7b:ff:c2:fe:58:9c:a9:db:61:
74:56:5d:a0:28:58:13:6d:4e:61:70:a4:05:3f:35:72:91:16:
38:b4:7f:46:17:da:b3:65:a5:4f:a4:9a:7d:9e:48:22:92:54:
47:bf:51:52:c5:3e:b6:2d:87:05:85:aa:43:6a:bf:c8:5d:b6:
95:21:0e:b6:fc:2b:a4:3b:fd:d2:08:f1:3f:71:10:9e:6d:61:
58:f5:c7:66:5b:ff:12:ff:40:ca:8c:d3:71:ca:17:b0:b9:8e:
4e:17:71:41:b3:0a:3f:34:d0:82:e0:d5:31:24:7c:83:fb:cc:
04:8b:9e:1c:80:43:2f:97:7a:5b:0d:c4:40:b5:94:31:10:99:
58:9e:17:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:44:32 2026 by rpki-client