Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
File: LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json)
Hash identifier: TmaSr7mYxrrMv1S+jHGYDvktUWo+IvmUwxaLWEb1zNk=
Subject key identifier: 16:A9:D6:DD:3F:D3:CC:E1:AF:5F:23:7B:AE:5A:EB:C7:A0:AB:EB:82
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 01A1DDCC3A6E8DA801EBAECA756690F42606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
Manifest number: 0AE9
Signing time: Sun 15 Nov 2026 06:01:51 +0000
Manifest this update: Sun 15 Nov 2026 06:01:51 +0000
Manifest next update: Mon 16 Nov 2026 06:01:51 +0000
Files and hashes: 1: G8YCS6i0g0ubDbA7T2_j3kguxlE.roa (hash: qHRsf2eTwCBKp1PGCkPmqwvIHubp6Ujq79DZ3/G/6VI=)
2: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: tLWIjPvIUYOJuGvI+H+rsUpN6AueUhkeBt5uMAGwbEA=)
3: _Q66pLzef8HiB2dIFrB73IR2x2g.roa (hash: nOI8zIBVSnJqmIf0/LULlXY1T16i45MjeJq+7As4mVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:3a:6e:8d:a8:01:eb:ae:ca:75:66:90:f4:26:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: Nov 15 06:01:51 2026 GMT
Not After : Nov 16 06:01:51 2026 GMT
Subject: CN=16a9d6dd3fd3cce1af5f237bae5aebc7a0abeb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:59:9a:97:0b:8c:0e:46:72:7c:f0:11:f4:75:
b9:37:f5:bb:3b:93:e9:aa:81:f9:5d:c3:fb:1c:da:
01:fe:74:12:f1:64:59:bd:2d:b8:51:18:22:fc:81:
29:2d:7a:bd:b9:3b:c6:cc:d7:e0:f3:08:88:87:42:
ce:14:fb:8c:8a:08:cc:12:af:76:73:05:ed:18:9d:
71:97:75:18:db:28:56:03:fa:a9:5e:61:a2:59:cf:
4c:a7:fb:17:f7:cb:41:7a:be:83:01:39:8c:db:06:
aa:2c:2c:eb:d9:8c:5e:9a:69:9e:98:ec:e4:f7:2a:
37:97:7c:f3:e9:73:90:a3:42:17:c8:38:0d:15:38:
b5:b9:1d:29:b5:3a:38:4b:55:f4:ec:72:cd:e3:1c:
96:2b:a3:df:e3:19:db:01:7d:1b:dc:51:3a:ae:a3:
14:c0:f3:88:6e:83:4b:7a:8a:96:81:5e:8c:e1:dc:
ae:eb:76:d8:5f:45:d2:83:09:e5:72:49:94:d8:3a:
13:43:65:07:81:59:58:48:a2:f7:0d:76:1a:0b:74:
e6:87:4a:46:c8:64:96:ef:53:c7:df:a3:88:1a:7a:
f3:f0:72:cf:7f:97:40:48:5e:89:c9:02:58:8e:95:
45:c2:33:5c:2b:6b:29:48:da:94:0e:e3:4e:db:21:
1e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A9:D6:DD:3F:D3:CC:E1:AF:5F:23:7B:AE:5A:EB:C7:A0:AB:EB:82
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f7:1c:7d:0b:e9:1d:9e:06:75:fc:57:62:11:1a:7a:42:37:
4b:28:07:4a:d8:90:62:05:13:86:9c:37:91:a3:7f:13:21:0a:
29:aa:c7:87:7c:ef:1e:6b:dd:d7:d3:f7:34:ff:ce:8a:13:d0:
9e:7d:43:15:04:89:6a:f0:6e:2a:d0:85:30:57:70:6c:a2:bb:
ae:a1:01:b6:f1:40:38:d0:5e:5f:c0:48:3e:1c:2c:e9:13:6b:
ac:2d:a2:03:16:7c:98:31:4b:df:f0:ae:b5:22:6c:71:04:a1:
0d:91:a9:83:4f:98:a6:43:dc:ac:65:75:35:31:50:3a:88:08:
d7:c1:42:8c:fa:b9:83:a3:f1:53:06:31:e5:e9:23:d9:6f:cb:
2a:79:3d:97:a2:6f:da:61:8d:38:46:20:10:d6:3c:91:15:de:
d6:d8:6c:d3:35:1d:2d:c7:cb:2e:26:11:8d:fb:30:f8:01:d5:
04:b4:41:34:ba:a4:eb:67:e3:bb:f9:32:a0:14:52:ae:ee:80:
76:7f:26:72:a7:c3:fc:7d:f6:57:e9:07:50:ac:79:85:93:99:
7b:7a:83:8d:60:96:1a:41:06:5f:16:e2:1e:5e:a4:19:1e:72:
d5:69:6c:6e:58:d6:34:fa:e8:92:bd:28:10:7e:b3:cc:aa:a5:
ee:b9:6d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:35:17 2026 by rpki-client