Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
File: LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json)
Hash identifier: xHJY/Tdx0/w+wUWHyOuIFtHJAVaF4aaPH3rAfy5ChbM=
Subject key identifier: 18:70:C3:94:3E:C2:7D:99:51:FA:9A:4E:A1:C8:A9:DA:78:82:61:8B
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 019F94A4639285713DAFF64B532B0CE164A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
Manifest number: 09BA
Signing time: Fri 24 Jul 2026 15:00:29 +0000
Manifest this update: Fri 24 Jul 2026 15:00:29 +0000
Manifest next update: Sat 25 Jul 2026 15:00:29 +0000
Files and hashes: 1: G8YCS6i0g0ubDbA7T2_j3kguxlE.roa (hash: qHRsf2eTwCBKp1PGCkPmqwvIHubp6Ujq79DZ3/G/6VI=)
2: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: Ou6/TDSPaD1CWrPfTV52R4CUrxgqJ3dsYmc70aEsJrg=)
3: _Q66pLzef8HiB2dIFrB73IR2x2g.roa (hash: nOI8zIBVSnJqmIf0/LULlXY1T16i45MjeJq+7As4mVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:63:92:85:71:3d:af:f6:4b:53:2b:0c:e1:64:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: Jul 24 15:00:29 2026 GMT
Not After : Jul 25 15:00:29 2026 GMT
Subject: CN=1870c3943ec27d9951fa9a4ea1c8a9da7882618b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:55:de:14:38:79:cc:3f:93:4b:1c:f9:5b:ed:
e9:13:71:3f:ad:68:82:73:a3:6e:ac:32:43:55:da:
82:25:72:69:35:b2:92:b8:46:cf:ef:3c:69:e0:c6:
eb:91:10:4d:26:69:84:78:eb:71:b8:b1:c5:ba:fd:
d9:77:6a:14:8c:51:53:d8:04:bf:5a:0c:c2:42:68:
50:b3:39:43:f0:16:5c:95:4b:ae:c5:62:1e:38:47:
c6:ea:6f:bf:98:fe:80:bc:9f:04:95:3e:c8:5b:d2:
d9:31:be:4a:1e:fe:1d:da:cf:cf:d2:1a:56:cd:3f:
02:0c:96:f6:5f:72:05:d9:39:7b:fe:5c:e0:00:8f:
24:a4:7c:47:79:62:c6:eb:96:c3:eb:c8:27:5f:05:
a7:06:ad:3f:ce:64:2a:e1:f9:a4:00:da:3f:12:60:
20:70:05:31:54:11:18:1d:43:d7:d8:17:ba:67:e5:
a0:b9:8e:b8:df:d3:4c:42:88:0c:6b:53:4d:4e:6b:
e4:de:ba:20:c3:a3:cd:6e:c5:85:1f:4d:1e:eb:ed:
66:08:e1:13:36:df:52:7b:72:c5:e8:18:31:82:20:
6d:9d:f3:a1:d4:a3:a2:3e:ad:56:8e:b9:46:14:51:
b0:fe:e2:32:84:89:09:5a:98:be:67:93:ed:2b:d8:
cd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:70:C3:94:3E:C2:7D:99:51:FA:9A:4E:A1:C8:A9:DA:78:82:61:8B
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:23:77:43:f5:14:52:bf:42:b4:f6:25:f1:9c:60:02:04:a7:
a9:0e:d7:ec:5a:3b:cc:c2:87:6e:d5:69:07:0b:33:a9:9f:7f:
c7:d8:50:89:29:c1:a2:c9:1a:7e:f9:dd:22:87:af:19:12:b5:
99:23:5f:de:c3:62:79:3e:26:d7:48:09:16:6c:e1:f3:eb:97:
59:14:2f:4b:ba:94:d5:0e:73:17:ef:19:28:17:40:f2:de:29:
3b:4c:15:21:fc:d3:d2:ed:cf:72:1a:5b:e1:27:51:64:3c:25:
0b:77:3b:f3:90:23:12:6b:d5:b4:68:da:70:ee:a9:75:4e:ea:
55:27:86:ff:75:22:55:39:f5:d5:50:e3:57:08:73:ee:f6:ec:
f9:b0:9b:cf:a0:4e:31:93:12:3b:fe:de:3d:cf:05:40:6f:aa:
e0:89:da:23:f6:d6:5f:de:41:65:c6:8b:ba:59:58:86:3a:41:
c2:f6:67:90:b7:95:ff:77:fc:d7:3f:38:7f:1f:74:90:4f:ca:
d6:a6:89:61:02:2e:b1:00:cc:a6:35:40:12:2a:72:fd:68:06:
10:5c:34:f2:46:4e:c5:85:1a:20:37:aa:2f:c5:3d:81:c8:29:
ec:9e:91:c4:dd:61:93:33:da:65:0c:f7:34:f7:d6:75:44:e2:
a2:93:c7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:16 2026 by rpki-client