Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
File: lqKMzDCRW1xzEoCowcpn_mAJVO4.mft (raw, json)
Hash identifier: oXLPqqUjvUg6a68qaM0gUJQHyNcBBSAQP5j9LoHIZt4=
Subject key identifier: 91:23:61:22:FA:36:78:BC:E0:38:1C:CC:BD:06:00:7D:31:FC:A4:BA
Authority key identifier: 96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
Certificate issuer: /CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Certificate serial: 019D28F20B3C09E7ADC352957048A0B2D445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
Manifest number: 0903
Signing time: Thu 26 Mar 2026 07:00:44 +0000
Manifest this update: Thu 26 Mar 2026 07:00:44 +0000
Manifest next update: Fri 27 Mar 2026 07:00:44 +0000
Files and hashes: 1: lqKMzDCRW1xzEoCowcpn_mAJVO4.crl (hash: et5X1/X1N2GC981FDZOGL8i/znulAnFsRG65NmypXdY=)
2: tpEzmPn6Emv4oxeWEF0eNzB9vks.roa (hash: lobNcn+6RzeUxnDnoUeGrIRglUEmt1L2WBn8rml/ud0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:0b:3c:09:e7:ad:c3:52:95:70:48:a0:b2:d4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Validity
Not Before: Mar 26 07:00:44 2026 GMT
Not After : Mar 27 07:00:44 2026 GMT
Subject: CN=91236122fa3678bce0381cccbd06007d31fca4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:dc:da:37:71:67:92:b5:c6:ec:b8:35:a4:a0:
88:08:ac:e4:bf:8d:93:95:90:28:a1:e5:ac:66:cc:
11:eb:25:87:22:45:9e:89:00:81:87:46:e5:03:b6:
8a:16:9d:15:96:23:86:1c:b2:e1:d6:e6:63:cf:34:
4d:4d:e3:c2:e0:63:68:11:c5:b7:c4:1c:bf:44:69:
ae:05:b0:f7:51:cb:f2:04:b5:52:b6:2b:84:76:a5:
6b:20:83:ce:d2:f9:b9:46:e3:df:b5:f3:70:55:9a:
73:3e:28:8c:24:2c:52:1e:85:90:93:00:66:69:1c:
8b:26:aa:5d:b5:3c:2f:d8:9b:86:ed:8a:17:a7:c3:
5b:e3:ea:b3:35:6e:77:32:40:63:5a:90:d1:ba:4f:
31:fb:90:3a:09:d2:60:da:8c:76:c4:41:a9:a9:43:
3b:02:6d:97:82:51:df:85:e1:77:40:71:e4:c8:2d:
2a:2f:7b:70:75:cf:2b:e7:75:fb:23:c6:94:3e:3d:
1d:3c:c7:a6:70:99:37:16:4c:5b:ed:10:20:be:4b:
00:53:86:20:1e:d9:68:2a:da:e3:d6:cc:4b:3d:52:
20:05:92:dc:38:39:8f:7f:3c:7f:4f:47:b3:3c:31:
b0:f8:00:b3:a4:7e:73:af:76:14:4f:e6:f4:c2:2c:
fe:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:23:61:22:FA:36:78:BC:E0:38:1C:CC:BD:06:00:7D:31:FC:A4:BA
X509v3 Authority Key Identifier:
keyid:96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:f1:31:cf:a4:ca:39:c1:0c:72:28:5b:a1:62:d6:97:4a:f2:
16:34:0c:06:e9:dc:9c:95:09:30:d1:ca:aa:bd:71:2c:8c:de:
83:88:03:f6:d7:47:e1:76:39:4c:ba:48:5e:35:f8:15:d7:69:
35:1e:79:f7:ce:01:fd:d8:29:a7:9c:2c:75:a1:22:1d:00:ba:
29:84:92:d6:18:46:88:12:88:64:d3:cf:40:c8:71:28:21:70:
54:bb:f7:68:1a:1c:24:00:f3:d6:a6:0f:1c:d1:d1:38:1e:e4:
38:92:b8:57:8d:22:f0:93:28:65:e7:13:30:c7:47:ae:88:a8:
3f:ba:34:9f:64:ec:bd:fc:83:4c:40:79:d4:b5:17:9d:a8:a1:
57:1f:35:82:f1:56:c7:b8:fb:a3:92:1f:89:65:df:c5:6c:52:
c2:e7:07:8b:f1:d7:77:e6:77:43:14:dd:40:ba:9d:3c:91:ab:
60:91:95:e1:b3:1c:a9:82:68:cf:2b:bb:fe:e0:ab:e1:e2:53:
57:0f:ba:85:14:d1:22:23:e0:b0:ef:e4:69:03:fc:a2:95:cc:
f2:7d:11:ac:50:d9:30:69:69:9e:ab:83:37:81:14:8a:ff:ab:
9a:18:cd:de:d5:33:96:7f:54:bf:41:c0:63:65:01:04:8f:11:
d2:25:af:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:02:15 2026 by rpki-client