Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
File: LGEmRGexp_7xxRhnd55a1ha2Gc8.mft (raw, json)
Hash identifier: xcXSeaMw3joRtvpsnCTLRNxMkUFOA+WXAI6P4SKW6AU=
Subject key identifier: 31:7A:E1:18:6F:4A:6F:74:3B:2A:67:64:9B:1E:44:E5:16:73:FE:86
Authority key identifier: 2C:61:26:44:67:B1:A7:FE:F1:C5:18:67:77:9E:5A:D6:16:B6:19:CF
Certificate issuer: /CN=2c61264467b1a7fef1c51867779e5ad616b619cf
Certificate serial: 019D38664723076CCACF9E0FBE0FFCF174F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
Manifest number: 11FC
Signing time: Sun 29 Mar 2026 07:02:00 +0000
Manifest this update: Sun 29 Mar 2026 07:02:00 +0000
Manifest next update: Mon 30 Mar 2026 07:02:00 +0000
Files and hashes: 1: LGEmRGexp_7xxRhnd55a1ha2Gc8.crl (hash: OQxNfX7n1mSObt+AOcLwPLPsXh4dGHv+rChYdeciNPc=)
2: hdFvkjtKs9CqOAP8HlCjhA-rfX8.roa (hash: /9qat8m93Fb2TGLTVIMfphjY74FEi4sF9t0aEqwTOUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:47:23:07:6c:ca:cf:9e:0f:be:0f:fc:f1:74:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c61264467b1a7fef1c51867779e5ad616b619cf
Validity
Not Before: Mar 29 07:02:00 2026 GMT
Not After : Mar 30 07:02:00 2026 GMT
Subject: CN=317ae1186f4a6f743b2a67649b1e44e51673fe86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c5:6a:6d:33:21:7f:ae:47:63:03:a7:d3:e1:
ae:b9:cc:88:f4:d7:08:2b:21:a7:b3:9a:0f:49:02:
6d:5e:92:65:de:66:db:13:ae:c6:72:2b:d4:01:4d:
72:60:01:be:50:89:00:69:12:d8:01:99:61:cf:ec:
ca:2d:12:54:a0:5a:b0:b2:f1:00:89:5a:71:91:ea:
97:20:f5:da:36:10:ba:39:95:59:53:b2:9a:6e:04:
27:b1:d1:48:c2:b1:63:1b:79:9d:c3:78:fb:4d:f5:
89:62:f5:9d:41:25:74:23:8e:f7:33:e2:bf:ef:58:
57:6a:8f:92:05:1d:7e:b6:83:02:a8:a8:7b:62:3d:
ab:84:1a:fd:12:d5:e7:3d:98:0e:c4:23:b3:9a:58:
80:4c:49:a5:4a:8e:ff:12:80:ff:29:0f:26:6b:f6:
f1:c6:6d:8e:98:0f:5d:fc:39:5b:3f:6e:1b:77:4d:
7a:ca:f3:7e:23:96:d0:0e:a2:b0:4d:74:6a:3d:0a:
14:4d:03:d9:23:f0:d4:45:fd:90:ac:ea:76:01:53:
bb:da:2f:82:f2:27:76:41:96:fd:e5:16:8e:ce:f6:
91:b8:45:75:80:d8:11:27:21:31:4e:1f:ce:30:c3:
56:b7:34:09:3b:04:00:56:0b:2d:84:ef:cb:8d:d8:
1c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7A:E1:18:6F:4A:6F:74:3B:2A:67:64:9B:1E:44:E5:16:73:FE:86
X509v3 Authority Key Identifier:
keyid:2C:61:26:44:67:B1:A7:FE:F1:C5:18:67:77:9E:5A:D6:16:B6:19:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:10:76:8c:e0:1b:5d:d3:45:2e:c8:fe:ad:22:61:57:37:e2:
ce:55:d5:f0:28:6a:de:d9:3b:84:fe:c3:61:98:76:4b:a0:57:
fa:95:6d:e5:4e:f6:c4:4d:69:6f:ba:f9:0b:e0:28:a2:43:be:
53:f6:bb:d2:4c:cb:3b:73:3a:cf:13:16:60:08:be:b5:dc:1a:
65:9b:8f:87:a5:8b:cf:0e:16:f7:61:94:52:53:92:f5:8b:65:
75:53:9b:23:71:b9:f1:ce:0f:ca:32:e8:25:15:8a:cf:2c:57:
8e:2c:f8:d9:5d:66:81:81:9a:fe:36:44:05:b6:b1:a2:e5:4f:
bf:e8:45:22:74:fd:e6:19:8d:9b:c3:20:f8:5c:5c:f7:d8:f8:
cb:06:aa:85:07:6d:ad:33:93:7b:52:76:ae:41:ea:90:e0:c4:
93:e1:8c:ed:fb:fb:a7:45:c5:38:44:fa:d7:97:6a:67:5b:04:
13:37:b1:8f:f9:71:9d:35:dd:cc:9a:9b:b6:8d:40:b9:41:c9:
fb:21:94:fd:05:7c:2f:68:bc:f3:c3:4f:f1:f9:2f:a2:c9:f2:
34:9a:8c:78:81:b2:bb:d3:32:ff:23:33:45:c7:1b:7f:69:e1:
c6:a8:d6:14:35:7e:47:49:2e:d2:7c:66:b7:a4:20:bf:df:8a:
7f:c2:5f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:10 2026 by rpki-client