Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
File: LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json)
Hash identifier: 9r8HL/Z2gY26WXIqdxQOtBUGPa/t748rN5cT4jC+bnU=
Subject key identifier: 80:B1:9E:2F:07:B9:70:EF:86:7C:5A:C7:BA:8C:27:A8:1C:9C:5E:64
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 019D28BB86E3689FE1D64B2AACD87CFF710A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
Manifest number: 0879
Signing time: Thu 26 Mar 2026 06:01:11 +0000
Manifest this update: Thu 26 Mar 2026 06:01:11 +0000
Manifest next update: Fri 27 Mar 2026 06:01:11 +0000
Files and hashes: 1: G8YCS6i0g0ubDbA7T2_j3kguxlE.roa (hash: qHRsf2eTwCBKp1PGCkPmqwvIHubp6Ujq79DZ3/G/6VI=)
2: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: L1U14zNikxdbXTuIdC5yfW4EWM4HO0VGCYwC4iEVuR8=)
3: _Q66pLzef8HiB2dIFrB73IR2x2g.roa (hash: nOI8zIBVSnJqmIf0/LULlXY1T16i45MjeJq+7As4mVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:86:e3:68:9f:e1:d6:4b:2a:ac:d8:7c:ff:71:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: Mar 26 06:01:11 2026 GMT
Not After : Mar 27 06:01:11 2026 GMT
Subject: CN=80b19e2f07b970ef867c5ac7ba8c27a81c9c5e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:a2:c0:42:80:25:43:95:8e:93:94:5d:c6:fb:
6a:ac:00:c1:7b:23:db:1d:43:76:af:da:76:c8:b0:
b7:f4:1d:03:91:f4:37:57:fc:f2:33:8d:8f:08:ce:
04:f7:df:1c:ba:10:60:fb:c2:97:cf:97:3d:fb:a5:
71:53:4e:70:14:de:2b:03:d2:e7:1a:50:fc:44:b7:
d9:c4:25:ca:c7:7c:57:37:d2:0c:a4:de:33:0a:29:
92:a8:a3:70:68:bf:46:92:26:be:99:d8:9d:f6:47:
fc:e8:e1:ac:ef:74:8c:a1:20:71:ab:42:6d:fa:37:
f2:37:15:f1:e6:f6:33:37:2c:9a:2e:12:e9:30:7a:
0e:87:3b:06:6d:3d:a7:d7:67:58:35:41:07:59:b0:
e4:f7:bc:5d:f4:9d:51:4b:eb:38:ae:99:c4:c5:98:
8a:24:b6:4d:e9:93:9a:06:7a:a7:85:e9:87:1f:f1:
a2:bc:44:ec:cd:f6:8a:6b:69:3f:79:be:de:11:12:
e4:eb:f8:67:80:cc:5a:1f:f7:93:71:fa:27:4c:30:
b8:a5:19:de:e4:d7:ce:7c:02:ba:3f:ed:48:0b:e2:
1a:e3:c8:b0:19:78:a0:ed:3b:4e:60:76:ef:79:fa:
14:ac:47:ed:0c:68:e7:eb:1e:87:46:18:bf:ca:0b:
d1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B1:9E:2F:07:B9:70:EF:86:7C:5A:C7:BA:8C:27:A8:1C:9C:5E:64
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:92:f5:18:77:56:73:49:aa:23:f2:8d:05:c4:64:67:c4:66:
ab:65:5f:35:10:74:d1:9f:85:1c:14:89:db:a6:56:9f:b1:da:
e7:d4:a8:f6:c1:15:4e:be:1b:b2:6e:12:8d:04:19:3b:a7:b6:
82:bc:cd:02:d2:a5:13:ca:45:06:92:46:fc:69:ba:37:84:ee:
1b:11:28:3f:fe:d6:53:31:29:3c:aa:c9:5c:5e:5f:4c:db:ce:
42:28:c1:d2:1a:69:e7:15:6c:cb:be:c4:7a:fc:4e:bc:e1:a0:
4f:ca:42:c1:f3:04:ba:b8:30:29:ca:64:5d:9a:9c:16:4e:63:
73:ba:5b:c4:be:31:ef:aa:b1:6b:23:0e:82:0c:2d:c3:e5:64:
ab:3e:7d:e9:9c:98:02:17:dc:b4:b4:0f:47:f6:df:82:93:e1:
ee:65:87:a1:ae:6a:ec:94:86:32:f2:e0:7b:e2:a5:cd:4f:34:
89:16:d9:13:c8:64:8b:96:23:7f:b4:69:40:ee:cc:04:d2:bd:
f9:eb:0c:5a:c9:3a:d0:3e:af:03:97:a7:65:71:b6:32:fb:9d:
75:9f:9c:ed:68:3f:c5:50:ef:a5:42:d8:a2:6f:0c:ab:1e:ea:
6d:28:d0:db:32:70:4d:82:c8:9c:99:f5:31:bf:8b:ff:1c:95:
fe:31:ca:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:22 2026 by rpki-client