Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
File: LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json)
Hash identifier: YRFpsxetJBn7+bUtYCMBZBhkAJxw1qHLmWtJq8bYFnY=
Subject key identifier: 42:52:24:28:9B:24:22:C7:17:D2:83:5D:6C:61:A1:7D:84:D8:CD:95
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 019E1DFE2E7CDDA19FFDD749112DEED47B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
Manifest number: 08F8
Signing time: Tue 12 May 2026 21:00:57 +0000
Manifest this update: Tue 12 May 2026 21:00:57 +0000
Manifest next update: Wed 13 May 2026 21:00:57 +0000
Files and hashes: 1: G8YCS6i0g0ubDbA7T2_j3kguxlE.roa (hash: qHRsf2eTwCBKp1PGCkPmqwvIHubp6Ujq79DZ3/G/6VI=)
2: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: RKL6yyq6jy/LR4aTHsbGeRtr6amBkflVkoZuRdXuC48=)
3: _Q66pLzef8HiB2dIFrB73IR2x2g.roa (hash: nOI8zIBVSnJqmIf0/LULlXY1T16i45MjeJq+7As4mVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:2e:7c:dd:a1:9f:fd:d7:49:11:2d:ee:d4:7b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: May 12 21:00:57 2026 GMT
Not After : May 13 21:00:57 2026 GMT
Subject: CN=425224289b2422c717d2835d6c61a17d84d8cd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:96:4d:9a:ad:e9:03:65:af:16:51:8e:e8:
8b:de:c9:59:78:d6:cd:8c:7a:57:7e:1f:15:65:83:
cb:85:31:cc:2f:1a:76:08:29:99:7e:df:ce:4e:b6:
2e:68:56:07:ea:14:71:24:c4:31:e1:65:b5:32:da:
9b:04:dd:6c:2f:24:b4:e8:bc:dd:78:86:c5:7c:af:
f8:03:42:69:30:ae:79:de:ed:cf:62:18:3c:1e:aa:
db:fe:54:3d:90:de:e3:5a:a3:e9:f0:e9:6b:13:37:
e3:85:92:fb:e0:05:f8:af:7a:ab:f5:47:03:86:d6:
00:62:a3:ae:75:72:d3:bd:76:19:9f:50:d6:c9:cd:
62:cb:d7:48:2c:e6:c5:51:9a:c9:0c:23:e4:4f:c3:
4a:5c:49:b0:4d:8b:3c:db:59:b6:12:6b:34:c8:00:
76:e4:67:26:28:a6:7e:b9:3b:d0:e2:ce:85:69:81:
d4:a3:f4:35:d1:6c:9f:0c:eb:8e:73:ee:7e:b0:57:
01:b7:b2:e1:02:5d:e7:3d:f1:36:30:41:bb:30:44:
3b:b0:31:66:4e:b6:d9:5b:ba:79:c8:4a:54:e5:06:
4b:08:33:14:1b:93:9b:ea:48:d8:9b:1a:c2:0d:7c:
06:49:56:2e:89:17:67:e8:55:d7:99:f8:37:88:c9:
f5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:52:24:28:9B:24:22:C7:17:D2:83:5D:6C:61:A1:7D:84:D8:CD:95
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:58:99:ec:79:69:c0:5c:5c:d4:e4:8e:6b:e5:80:08:38:64:
ce:65:8e:2d:fe:13:63:27:ce:4e:57:a4:68:1e:67:a7:72:31:
b1:5d:72:5f:1d:f9:bf:90:86:7f:02:f4:78:17:52:18:c7:17:
a0:39:c3:40:fb:f2:e4:a0:00:48:75:7d:d3:fb:ba:70:f7:d9:
a1:04:b8:c0:4b:b6:08:1c:9e:39:d8:96:cb:d6:75:d1:77:be:
40:a6:90:75:36:cc:32:94:2f:54:ca:48:3e:82:ad:55:06:b1:
7d:cb:70:52:c9:96:80:09:3c:6f:ba:3c:6a:3b:ba:41:7d:06:
5a:c5:c6:a7:f9:c4:00:bb:43:e5:43:fe:25:b0:b6:f6:3a:0c:
fa:4b:48:c1:18:9e:73:3e:38:45:47:84:21:f9:2b:0d:a9:ee:
d9:08:7d:81:34:a9:01:d9:bb:1e:7f:b1:b7:38:60:1f:18:14:
4e:36:71:33:c6:20:12:44:7f:2e:12:fb:01:76:f8:10:16:87:
4c:c2:95:eb:fb:09:fb:d0:f7:62:a2:96:3d:59:16:24:05:4f:
43:79:e8:80:ea:2b:24:d2:35:75:1b:b7:92:b5:01:18:5c:32:
a8:c4:fd:3f:73:62:7f:04:3d:5e:7b:0c:f8:20:e3:24:c5:06:
41:8b:d5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:52:49 2026 by rpki-client