Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
File: LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json)
Hash identifier: y+5h34SZJiUPr+5UzBAXzwAM9HOwt5OP/qPKo2Jdd8c=
Subject key identifier: E0:8D:8F:27:C6:5E:83:21:B0:94:58:64:4D:F3:A9:44:F4:35:70:02
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 01A0DCF2C5FEA4C7682D513A2C06DC9D6CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
Manifest number: 0A64
Signing time: Sat 26 Sep 2026 09:01:32 +0000
Manifest this update: Sat 26 Sep 2026 09:01:32 +0000
Manifest next update: Sun 27 Sep 2026 09:01:32 +0000
Files and hashes: 1: G8YCS6i0g0ubDbA7T2_j3kguxlE.roa (hash: qHRsf2eTwCBKp1PGCkPmqwvIHubp6Ujq79DZ3/G/6VI=)
2: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: mvUvvT5B1lmGq6eGXkCJvotKKNKhb2IV/ndje/X0Xxc=)
3: _Q66pLzef8HiB2dIFrB73IR2x2g.roa (hash: nOI8zIBVSnJqmIf0/LULlXY1T16i45MjeJq+7As4mVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:c5:fe:a4:c7:68:2d:51:3a:2c:06:dc:9d:6c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: Sep 26 09:01:32 2026 GMT
Not After : Sep 27 09:01:32 2026 GMT
Subject: CN=e08d8f27c65e8321b09458644df3a944f4357002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bc:f3:a9:82:22:96:d7:45:56:0c:db:e3:a5:
cc:bc:fb:ab:51:54:40:86:39:cc:a8:7b:0a:3d:14:
42:a6:d2:2e:23:ee:fa:d8:53:4e:bf:aa:0c:c8:65:
92:cb:3e:5c:58:95:0e:41:f2:dd:67:5c:e5:1a:66:
ad:37:77:e0:49:14:75:86:3a:0e:69:3a:39:7e:88:
6b:10:b4:de:30:5a:50:86:11:b2:fd:3b:aa:37:1d:
f7:ef:d3:63:46:e2:be:3c:8d:40:0a:70:46:2d:36:
40:96:fd:16:2d:fc:85:c9:71:5c:0f:71:58:c5:16:
1e:36:42:5d:9b:a7:44:10:13:84:71:66:53:a8:94:
e0:52:23:6f:df:8c:9f:2d:0c:89:33:bc:c6:02:53:
dd:64:35:76:f9:29:94:2e:dc:a6:f1:d2:cc:4d:76:
ee:06:c5:45:05:70:0b:8f:f1:81:a5:90:6b:b6:db:
a8:10:2f:06:61:33:e0:ad:e5:8f:87:28:cb:84:b8:
5a:3d:df:17:ab:fd:72:bd:2d:0a:a6:e9:ff:00:24:
42:50:76:0e:33:28:5e:77:ef:b1:30:32:71:d2:b3:
ac:6d:95:b5:68:44:f2:88:aa:14:67:4a:d7:ad:e2:
11:eb:88:85:7d:e2:68:7b:a6:ef:1b:e7:5d:42:2e:
a4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8D:8F:27:C6:5E:83:21:B0:94:58:64:4D:F3:A9:44:F4:35:70:02
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cf:20:54:86:91:e6:94:65:f3:d7:8b:86:1c:69:63:06:70:
e9:ac:41:10:51:cf:3e:f8:37:b6:cf:4d:18:3a:83:f8:b1:35:
8e:0a:d0:fe:55:15:54:65:61:9b:42:52:b9:9c:8e:44:54:6f:
b5:9c:5b:6e:c6:c3:d0:35:9a:83:2a:13:b9:17:a2:bd:04:57:
d4:cc:83:39:8c:34:01:16:a0:c3:a2:ad:f9:86:cd:7f:67:35:
8d:0f:6f:24:9d:85:1f:9b:94:b1:a1:72:17:06:e9:11:ae:a4:
cd:a4:8d:e8:29:fb:15:74:85:f2:b6:11:bf:da:d7:83:1a:c9:
ff:e0:32:82:90:1c:1f:50:ae:54:47:40:3b:c3:ca:ab:08:51:
1f:e7:2d:6b:10:10:7d:da:46:95:09:f9:c4:df:f2:f3:aa:88:
cd:21:a4:38:e1:59:a5:3c:62:bd:3a:32:82:a8:e5:a1:86:51:
4d:8f:45:f0:35:1f:6d:54:a9:69:ea:cf:c5:1e:dc:99:35:a4:
20:1c:aa:3c:33:24:21:34:dd:6e:54:9f:7a:6d:77:48:17:06:
71:cc:70:e0:c6:1c:04:70:7f:7f:1e:65:10:cf:fb:21:79:4a:
f3:b0:7d:fa:b7:cf:54:29:e2:9c:09:01:9a:5a:f0:0e:20:dd:
fc:d6:de:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDc8sX+pMdoLVE6LAbcnWynMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMGQ2MjEyOWQwMjA2M2Q0MDllYmZiMDFjNjQ4ZDQ2ZjM0
ODg5ZTAwHhcNMjYwOTI2MDkwMTMyWhcNMjYwOTI3MDkwMTMyWjAzMTEwLwYDVQQD
EyhlMDhkOGYyN2M2NWU4MzIxYjA5NDU4NjQ0ZGYzYTk0NGY0MzU3MDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bzzqYIiltdFVgzb46XMvPurUVRA
hjnMqHsKPRRCptIuI+762FNOv6oMyGWSyz5cWJUOQfLdZ1zlGmatN3fgSRR1hjoO
aTo5fohrELTeMFpQhhGy/TuqNx3379NjRuK+PI1ACnBGLTZAlv0WLfyFyXFcD3FY
xRYeNkJdm6dEEBOEcWZTqJTgUiNv34yfLQyJM7zGAlPdZDV2+SmULtym8dLMTXbu
BsVFBXALj/GBpZBrttuoEC8GYTPgreWPhyjLhLhaPd8Xq/1yvS0Kpun/ACRCUHYO
Myhed++xMDJx0rOsbZW1aETyiKoUZ0rXreIR64iFfeJoe6bvG+ddQi6k4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCNjyfGXoMhsJRYZE3zqUT0NXACMB8GA1UdIwQY
MBaAFC0NYhKdAgY9QJ6/sBxkjUbzSIngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wNjBmN2UtOGNmMC00ZWMyLWFmN2Et
MWRhZWE0YmM5NGIzLzEvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wNjBmN2UtOGNmMC00ZWMyLWFmN2EtMWRhZWE0YmM5NGIz
LzEvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALc8gVIaR
5pRl89eLhhxpYwZw6axBEFHPPvg3ts9NGDqD+LE1jgrQ/lUVVGVhm0JSuZyORFRv
tZxbbsbD0DWagyoTuReivQRX1MyDOYw0ARagw6Kt+YbNf2c1jQ9vJJ2FH5uUsaFy
FwbpEa6kzaSN6Cn7FXSF8rYRv9rXgxrJ/+AygpAcH1CuVEdAO8PKqwhRH+ctaxAQ
fdpGlQn5xN/y86qIzSGkOOFZpTxivToygqjloYZRTY9F8DUfbVSpaerPxR7cmTWk
IByqPDMkITTdblSfem13SBcGccxw4MYcBHB/fx5lEM/7IXlK87B9+rfPVCninAkB
mlrwDiDd/Nbekg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:22:48 2026 by rpki-client