Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
File: lQLYuCacawf4FKzwx-1ymz9LWYQ.mft (raw, json)
Hash identifier: jKkQ1iYbt8Wpxba25wR3F1zEUDY8mlVAMq2ip5J+zZw=
Subject key identifier: 35:E9:89:BA:12:6A:4D:D7:14:10:94:67:F0:2F:80:35:C8:D3:28:A4
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 019D2C982BC79A3F4A699E0A0780BE771511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
Manifest number: 0E6B
Signing time: Fri 27 Mar 2026 00:01:03 +0000
Manifest this update: Fri 27 Mar 2026 00:01:03 +0000
Manifest next update: Sat 28 Mar 2026 00:01:03 +0000
Files and hashes: 1: 5Vi1KDg5hZyzoaBI77sNLh4qRf8.roa (hash: /5vW/n+ymrmcyaI56/lGSU6fFwFpxrqqlswOQDyntMo=)
2: Jy63By-FZQfSxze4pLedxCdRCZ0.roa (hash: jlnfFTI0k7/ojNNgBH9AiRYF9L1A99AIRcADl9339mo=)
3: WYd4FngiyPvwOCF4MHu9edNzBbE.roa (hash: 0XbYqroAqzM7rgiJX5PGGwG8zSGtxAutxNMT5mAMC74=)
4: X52pcbjfgYr8nnx8E3zf_eGkSeE.roa (hash: Cy4T2p4Uga3qbKI6fJaussEwqR0yDxM0A5j2mhQrkLc=)
5: XdlGzRcUNVDEpnO9YL0X7aJRffs.roa (hash: RnuPqv8dWz+ZenQXL5WqtuXV26S9E5sAUavYLyGE+b0=)
6: lQLYuCacawf4FKzwx-1ymz9LWYQ.crl (hash: u+6ZadjtIPtxoGgeu3b0PMFh9O7DUa6JPgYeGPXumDY=)
7: lSgsM1Fln1OkfjXXb0nOQ5rH6yw.roa (hash: 8bA0ZtJ8C6uPRPwuJKR5tibqu47YSzRKxYwvJbXPPoo=)
8: qeVRI_NFLaWOD-2zt4kPj6kYAG8.roa (hash: ovysVj+biiubkNbxSo534XXtcaYbBsQvjQyeh0Tod6Q=)
9: rz6-rsbx5qAXWZK1lflQBq85gpA.roa (hash: xKQhmoOta01iFvpGrvDgJZEcGx54Mj2U+SALSwttG3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:98:2b:c7:9a:3f:4a:69:9e:0a:07:80:be:77:15:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Mar 27 00:01:03 2026 GMT
Not After : Mar 28 00:01:03 2026 GMT
Subject: CN=35e989ba126a4dd714109467f02f8035c8d328a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:14:d6:f8:a7:ca:8a:65:3d:0f:31:3a:87:
04:3c:d8:96:4c:e4:36:8b:4f:b3:13:c9:6f:f8:60:
bf:eb:22:37:3d:39:fb:35:2e:1f:29:db:ec:e8:36:
f7:11:d4:57:f6:8a:98:07:64:cc:7d:eb:29:32:9d:
05:d4:01:35:6e:73:9e:1a:61:e3:be:ed:a3:5f:7b:
58:70:4a:66:fa:c6:3b:fe:81:8d:97:ec:99:2d:64:
3c:9c:f9:4e:73:4f:50:15:80:a0:ea:86:49:b5:ff:
84:e2:1c:19:0b:81:f4:4b:d0:85:0b:bd:43:09:54:
23:06:2e:6d:2d:06:fe:11:20:42:ce:99:dd:0e:54:
c8:01:1e:2e:1c:f1:63:1b:b0:63:2a:63:fc:74:1b:
9e:2c:6d:58:59:4f:5d:83:d4:b7:fe:42:95:05:ad:
ed:94:d9:f7:42:c9:78:23:9e:e4:ea:50:87:14:a4:
2d:19:fd:7f:36:8e:37:2d:8e:c0:77:f1:a9:2a:f7:
9b:e4:e4:98:f6:d3:8f:67:1c:10:0a:7d:44:76:52:
2a:0d:1a:04:bd:87:57:cc:4b:f9:2b:14:21:b2:28:
e7:d3:dd:34:56:12:fa:67:75:7e:d3:36:46:a3:33:
02:86:40:25:78:f1:9d:de:7e:a1:77:de:f5:4e:13:
40:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E9:89:BA:12:6A:4D:D7:14:10:94:67:F0:2F:80:35:C8:D3:28:A4
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:56:9b:47:15:30:44:3a:d7:7a:3a:41:a9:00:cf:34:b9:4b:
87:00:86:4f:a3:87:9c:18:50:32:63:85:57:31:0c:59:ad:ff:
ee:ec:fc:63:50:23:58:fe:a0:2d:42:e1:7e:45:53:b8:41:99:
72:26:96:f3:19:ab:d8:00:6f:98:a3:7c:31:52:a0:dd:5f:bb:
25:56:18:f3:ba:c8:64:52:f1:29:f5:9f:a5:40:7f:24:a1:92:
11:15:11:6e:9a:7b:a5:67:24:c6:96:69:d2:6b:73:e5:d0:cb:
c2:2b:8c:2b:a8:6e:77:b5:de:bd:57:48:d8:2b:a3:5a:8b:dd:
6e:e5:44:25:fb:d0:74:d2:23:0f:73:ea:51:78:fb:40:0f:12:
a6:3b:cf:60:91:59:d8:34:ac:1c:1e:f9:b5:5b:0a:5c:54:1a:
b1:b2:06:37:bc:b1:55:79:3f:8e:7c:38:7e:53:84:88:c5:77:
f2:90:44:2b:e3:3c:bd:46:71:dd:16:ff:22:f8:45:4e:56:ce:
13:95:68:2f:63:fe:dc:7a:d3:e5:4c:3c:2f:4a:9f:ad:e6:a1:
01:63:01:22:4f:fd:a9:42:3e:ce:68:f5:19:89:3e:82:01:26:
b5:97:e4:20:00:17:89:ad:cb:44:9b:f9:5a:a5:0d:31:f7:46:
61:47:6e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:16:19 2026 by rpki-client