Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/LQ6xYWGbmZrS7TEVYHN02-X09Yk.mft
File: LQ6xYWGbmZrS7TEVYHN02-X09Yk.mft (raw, json)
Hash identifier: hIiIhSD3uMiXyxpmS6CIVRcyYBAarYehQf7uaF2waAQ=
Subject key identifier: 78:3B:2A:D4:44:CC:45:E6:B6:13:09:F0:98:BD:12:2D:66:E7:49:80
Authority key identifier: 2D:0E:B1:61:61:9B:99:9A:D2:ED:31:15:60:73:74:DB:E5:F4:F5:89
Certificate issuer: /CN=2d0eb161619b999ad2ed3115607374dbe5f4f589
Certificate serial: 019F954A4ED7DEF69577E1BEBF9447574C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ6xYWGbmZrS7TEVYHN02-X09Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/LQ6xYWGbmZrS7TEVYHN02-X09Yk.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:01:42 +0000
Manifest this update: Fri 24 Jul 2026 18:01:42 +0000
Manifest next update: Sat 25 Jul 2026 18:01:42 +0000
Files and hashes: 1: ELrx4Q17sWsITam7S8EZhlEpW6c.roa (hash: mfENEikBBj3SnmLqMx+zV5kIHlMvuGZwjX1HrALHXH0=)
2: LQ6xYWGbmZrS7TEVYHN02-X09Yk.crl (hash: cCPXBqkioUkFW+vj1XSEaZ8cZv0E7wzLFVJUfI7WOwo=)
3: mJqKOIkFyoOYp1GMyp0ruDBB97k.roa (hash: scvnlkEX/qiRygLnLE6KpQY7LUS1CDurNLQjTw5koJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/LQ6xYWGbmZrS7TEVYHN02-X09Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/LQ6xYWGbmZrS7TEVYHN02-X09Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ6xYWGbmZrS7TEVYHN02-X09Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:4e:d7:de:f6:95:77:e1:be:bf:94:47:57:4c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0eb161619b999ad2ed3115607374dbe5f4f589
Validity
Not Before: Jul 24 18:01:42 2026 GMT
Not After : Jul 25 18:01:42 2026 GMT
Subject: CN=783b2ad444cc45e6b61309f098bd122d66e74980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:4e:1e:5f:8b:7e:d1:1c:b8:f0:40:f2:38:
a9:d8:3d:53:51:56:da:8e:86:67:0e:ec:81:17:d2:
eb:55:76:b5:c1:c4:3f:20:e0:a7:86:ab:df:27:29:
ad:c8:36:8f:bb:d2:fd:39:ee:37:51:24:16:70:43:
d6:91:e6:f9:36:a1:53:63:0c:41:64:ae:dc:84:dd:
cb:9b:75:6c:91:82:aa:9d:c3:60:d2:9b:44:43:29:
66:df:76:06:28:8f:34:af:ab:2a:db:74:ed:cf:11:
88:a8:6e:dd:41:48:0d:e6:aa:de:11:11:c8:00:ce:
f3:d2:6a:d3:cb:1f:fe:61:d4:9d:04:21:df:93:3f:
30:cc:c6:14:8e:9c:5c:f1:d0:c7:21:b5:f0:fa:0a:
9b:c4:e9:ea:fe:d4:6a:e6:c8:21:15:88:be:b0:82:
bf:2a:4e:ae:d2:ae:08:42:84:f6:95:d6:d6:49:13:
6f:77:22:92:95:e9:b6:01:62:4f:81:e2:ba:43:09:
93:fa:3e:61:13:fa:82:f8:bb:d6:b2:02:32:b4:dd:
2a:c3:7a:89:a2:44:77:33:08:eb:8c:5f:0d:a5:a1:
95:c9:80:e6:e0:a0:5d:7c:55:6f:a0:d8:1d:8b:56:
4c:b3:43:4d:89:c1:b0:3c:c8:52:7a:16:07:c0:6d:
77:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3B:2A:D4:44:CC:45:E6:B6:13:09:F0:98:BD:12:2D:66:E7:49:80
X509v3 Authority Key Identifier:
keyid:2D:0E:B1:61:61:9B:99:9A:D2:ED:31:15:60:73:74:DB:E5:F4:F5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ6xYWGbmZrS7TEVYHN02-X09Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/LQ6xYWGbmZrS7TEVYHN02-X09Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/LQ6xYWGbmZrS7TEVYHN02-X09Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ea:3e:fd:8b:f3:d4:dc:12:7b:7d:e8:af:fa:8f:96:ec:f6:
af:2c:92:06:67:0b:71:8e:67:d1:ec:61:f5:32:fd:96:b7:cc:
6c:62:09:d2:90:f3:9d:1c:b8:9c:35:b6:f5:c5:25:0d:06:51:
19:32:36:8d:b8:be:cf:3b:cd:03:1d:d0:d6:77:ea:64:7e:76:
b6:64:1f:4d:c5:42:dd:4b:5a:1d:41:5f:4e:e4:c1:c1:72:6d:
af:87:ba:f7:69:08:26:77:dd:93:94:b4:bb:e0:84:07:3a:54:
40:b3:f0:78:56:73:21:24:62:2d:de:a0:ee:bb:da:59:ce:eb:
5b:6b:67:e9:5d:d7:8a:ab:63:d6:48:ae:20:07:e4:e7:60:6c:
29:fb:e4:bb:84:00:50:cc:e6:5c:32:ed:46:da:84:37:e1:fb:
2c:c1:c8:60:94:1e:3e:83:3e:72:48:e1:f7:5d:45:9c:39:c4:
10:4a:2b:32:7a:a9:ec:d2:f7:6f:5e:9e:cf:22:8a:7e:ea:1e:
f9:c3:dd:b1:37:ac:eb:5f:3e:c4:95:15:5c:c4:35:37:69:70:
3d:68:f0:54:ca:f1:eb:bd:b4:70:4b:be:c3:29:da:a1:84:8e:
3c:f8:21:cb:6d:05:93:17:82:9a:53:a9:bb:a8:6e:db:6e:93:
e8:84:7c:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VSk7X3vaVd+G+v5RHV0wxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMGViMTYxNjE5Yjk5OWFkMmVkMzExNTYwNzM3NGRiZTVm
NGY1ODkwHhcNMjYwNzI0MTgwMTQyWhcNMjYwNzI1MTgwMTQyWjAzMTEwLwYDVQQD
Eyg3ODNiMmFkNDQ0Y2M0NWU2YjYxMzA5ZjA5OGJkMTIyZDY2ZTc0OTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3lOHl+LftEcuPBA8jip2D1TUVba
joZnDuyBF9LrVXa1wcQ/IOCnhqvfJymtyDaPu9L9Oe43USQWcEPWkeb5NqFTYwxB
ZK7chN3Lm3VskYKqncNg0ptEQylm33YGKI80r6sq23TtzxGIqG7dQUgN5qreERHI
AM7z0mrTyx/+YdSdBCHfkz8wzMYUjpxc8dDHIbXw+gqbxOnq/tRq5sghFYi+sIK/
Kk6u0q4IQoT2ldbWSRNvdyKSlem2AWJPgeK6QwmT+j5hE/qC+LvWsgIytN0qw3qJ
okR3MwjrjF8NpaGVyYDm4KBdfFVvoNgdi1ZMs0NNicGwPMhSehYHwG13uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHg7KtREzEXmthMJ8Ji9Ei1m50mAMB8GA1UdIwQY
MBaAFC0OsWFhm5ma0u0xFWBzdNvl9PWJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFE2eFlXR2JtWnJTN1RFVllITjAyLVgwOVlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jMzM5ZGQtNDQzZi00YmE5LWE5NTkt
NjZkYjI1ZTE5OTBjLzEvTFE2eFlXR2JtWnJTN1RFVllITjAyLVgwOVlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9jMzM5ZGQtNDQzZi00YmE5LWE5NTktNjZkYjI1ZTE5OTBj
LzEvTFE2eFlXR2JtWnJTN1RFVllITjAyLVgwOVlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+o+/Yvz
1NwSe33or/qPluz2ryySBmcLcY5n0exh9TL9lrfMbGIJ0pDznRy4nDW29cUlDQZR
GTI2jbi+zzvNAx3Q1nfqZH52tmQfTcVC3UtaHUFfTuTBwXJtr4e692kIJnfdk5S0
u+CEBzpUQLPweFZzISRiLd6g7rvaWc7rW2tn6V3Xiqtj1kiuIAfk52BsKfvku4QA
UMzmXDLtRtqEN+H7LMHIYJQePoM+ckjh911FnDnEEEorMnqp7NL3b16ezyKKfuoe
+cPdsTes618+xJUVXMQ1N2lwPWjwVMrx6720cEu+wynaoYSOPPghy20FkxeCmlOp
u6hu226T6IR88Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:07:08 2026 by rpki-client