
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/LQ6xYWGbmZrS7TEVYHN02-X09Yk.mft
File: LQ6xYWGbmZrS7TEVYHN02-X09Yk.mft (raw, json)
Hash identifier: tK+mjH9Wxvr/2/8sA5g7mKW/xGbBnena/2Mu2/RL+wc=
Subject key identifier: 51:27:5F:9F:A8:0A:52:A3:07:68:26:C6:D4:59:A8:C4:1C:30:E7:AD
Authority key identifier: 2D:0E:B1:61:61:9B:99:9A:D2:ED:31:15:60:73:74:DB:E5:F4:F5:89
Certificate issuer: /CN=2d0eb161619b999ad2ed3115607374dbe5f4f589
Certificate serial: 01A111BB70103C6581EDB6C41091DC0E1577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ6xYWGbmZrS7TEVYHN02-X09Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/LQ6xYWGbmZrS7TEVYHN02-X09Yk.mft
Manifest number: 0107
Signing time: Tue 06 Oct 2026 15:00:58 +0000
Manifest this update: Tue 06 Oct 2026 15:00:58 +0000
Manifest next update: Wed 07 Oct 2026 15:00:58 +0000
Files and hashes: 1: ELrx4Q17sWsITam7S8EZhlEpW6c.roa (hash: mfENEikBBj3SnmLqMx+zV5kIHlMvuGZwjX1HrALHXH0=)
2: LQ6xYWGbmZrS7TEVYHN02-X09Yk.crl (hash: EuGJkIHWe+cxePdvaYBEN0aaQYf1uc0ukCwvxFj6go4=)
3: mJqKOIkFyoOYp1GMyp0ruDBB97k.roa (hash: scvnlkEX/qiRygLnLE6KpQY7LUS1CDurNLQjTw5koJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/LQ6xYWGbmZrS7TEVYHN02-X09Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/LQ6xYWGbmZrS7TEVYHN02-X09Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ6xYWGbmZrS7TEVYHN02-X09Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:bb:70:10:3c:65:81:ed:b6:c4:10:91:dc:0e:15:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0eb161619b999ad2ed3115607374dbe5f4f589
Validity
Not Before: Oct 6 15:00:58 2026 GMT
Not After : Oct 7 15:00:58 2026 GMT
Subject: CN=51275f9fa80a52a3076826c6d459a8c41c30e7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:e2:2a:d4:87:21:63:9a:4c:0b:80:6c:ac:
c7:c3:71:eb:78:01:10:de:37:fd:29:05:e5:b4:df:
d1:f3:6f:f2:04:93:04:4c:1a:a3:99:68:17:3d:a0:
2a:49:25:19:71:7c:fe:d5:18:e4:3f:0a:e3:44:37:
73:0a:e5:b8:f5:0e:fa:34:ef:a9:f5:66:ae:60:48:
d1:c2:a8:32:41:59:45:eb:40:ed:91:73:c9:64:17:
86:9e:4f:a6:49:f4:70:5f:46:2d:f9:23:5b:30:67:
48:b0:0d:37:4b:37:4a:bd:fa:ac:88:f8:76:29:1a:
04:24:2f:df:c7:85:88:a2:e5:a2:3c:5a:41:35:bc:
5f:6d:28:1c:0c:26:b8:ea:fc:4c:0c:c5:ff:53:de:
9f:d2:c2:18:0f:50:8a:0c:16:bd:6f:b4:d7:b7:e6:
53:76:e0:63:d7:d4:fa:57:67:49:46:b5:f1:48:24:
84:f6:da:63:d3:a6:59:b4:fe:9c:ee:88:ad:99:7f:
e0:b4:da:42:c9:47:2c:3d:0b:17:b4:d8:c7:ae:4f:
c7:67:32:db:6c:55:85:21:9a:89:37:d7:98:3c:20:
23:3a:e9:c7:8a:0c:12:c4:c2:59:a8:5c:cb:9a:c9:
91:4d:d5:dd:c6:ea:a0:cf:ca:4b:95:8b:af:59:67:
ff:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:27:5F:9F:A8:0A:52:A3:07:68:26:C6:D4:59:A8:C4:1C:30:E7:AD
X509v3 Authority Key Identifier:
keyid:2D:0E:B1:61:61:9B:99:9A:D2:ED:31:15:60:73:74:DB:E5:F4:F5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ6xYWGbmZrS7TEVYHN02-X09Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/LQ6xYWGbmZrS7TEVYHN02-X09Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/LQ6xYWGbmZrS7TEVYHN02-X09Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:19:da:b6:87:6f:80:1b:bb:ae:58:93:07:46:bc:27:53:98:
df:36:5e:c0:90:29:9c:64:f3:8a:f7:df:16:04:5b:9d:09:e0:
fc:dc:3b:a9:08:1c:c8:9e:41:55:f5:de:98:af:cc:bf:ed:e7:
a5:f4:a6:60:79:b5:3b:5d:ae:ed:aa:d8:6b:ce:0f:00:1d:0b:
14:90:0d:4f:dc:2b:2c:4f:18:66:d3:f2:fd:6e:a2:4a:37:b2:
be:10:d4:71:d4:ec:b7:83:0f:4c:a5:da:ec:fb:fd:49:fd:2d:
72:86:3a:5e:df:3c:fc:bc:7a:6b:29:50:50:32:d3:c5:7c:df:
d9:74:8b:38:ca:76:d1:4f:34:65:9c:65:ad:6b:ca:7b:a8:ed:
c0:00:bc:f4:a2:4d:50:86:bc:91:fc:e2:a0:10:4c:73:ae:81:
56:31:8a:d7:41:49:fa:31:d7:88:9d:9f:3e:04:34:a1:ee:8a:
a2:76:25:07:68:8d:7c:2c:cb:dd:99:a8:97:97:78:c9:fa:f3:
ac:cd:a0:9c:de:e0:12:72:a2:15:e8:98:38:24:d3:f0:71:85:
02:2d:f8:3b:6a:0b:98:e1:5e:d8:80:64:87:21:bd:ab:84:cb:
23:15:0c:1d:fa:63:7d:90:bd:38:34:3a:9e:d2:05:0b:98:05:
5b:d0:82:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:27:14 2026 by rpki-client