Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
File: lQLYuCacawf4FKzwx-1ymz9LWYQ.mft (raw, json)
Hash identifier: M2aF+yMlx1JlRZlAi3Vso84DD/f7WaHynf8zHxtGRws=
Subject key identifier: F2:E9:64:57:26:B5:6B:53:F3:85:DE:80:C4:AE:48:9C:4B:A9:D7:31
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 019E1DFE06E167DC6652A23AE0DD1E752C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
Manifest number: 0EEA
Signing time: Tue 12 May 2026 21:00:47 +0000
Manifest this update: Tue 12 May 2026 21:00:47 +0000
Manifest next update: Wed 13 May 2026 21:00:47 +0000
Files and hashes: 1: 9RuEfPDy7NcEevxrr3brvJp9UCU.roa (hash: 0j6TPncrYZJxKRy7qi/uID511rndKgFVeAqO5t+E9Ok=)
2: Jy63By-FZQfSxze4pLedxCdRCZ0.roa (hash: jlnfFTI0k7/ojNNgBH9AiRYF9L1A99AIRcADl9339mo=)
3: WCsF66PA9S1TOale2_gjPHZiFEg.roa (hash: f4T960+J6F/ksqSdQ9f1iQQLFAEXYjALIzG45UEUz10=)
4: WYd4FngiyPvwOCF4MHu9edNzBbE.roa (hash: 0XbYqroAqzM7rgiJX5PGGwG8zSGtxAutxNMT5mAMC74=)
5: XdlGzRcUNVDEpnO9YL0X7aJRffs.roa (hash: RnuPqv8dWz+ZenQXL5WqtuXV26S9E5sAUavYLyGE+b0=)
6: lQLYuCacawf4FKzwx-1ymz9LWYQ.crl (hash: 9LQ16UFtRHdPxcksXYNEiLNuPF11x0rTCtGB4cW749E=)
7: lSgsM1Fln1OkfjXXb0nOQ5rH6yw.roa (hash: 8bA0ZtJ8C6uPRPwuJKR5tibqu47YSzRKxYwvJbXPPoo=)
8: rz6-rsbx5qAXWZK1lflQBq85gpA.roa (hash: xKQhmoOta01iFvpGrvDgJZEcGx54Mj2U+SALSwttG3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:06:e1:67:dc:66:52:a2:3a:e0:dd:1e:75:2c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: May 12 21:00:47 2026 GMT
Not After : May 13 21:00:47 2026 GMT
Subject: CN=f2e9645726b56b53f385de80c4ae489c4ba9d731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:35:43:da:7a:6c:d3:2f:3f:c3:5a:7f:33:ec:
b8:56:c9:8e:b2:55:96:a2:f1:06:73:fd:ae:84:4f:
a1:69:cb:ec:19:01:11:d7:4a:a6:c3:35:7a:57:73:
18:f4:6b:5e:10:58:e1:c4:b5:fd:2f:c9:22:d6:a4:
00:9c:5b:d9:68:a9:78:fd:0d:1f:5f:51:87:36:27:
4e:4f:3b:b7:db:ef:31:8c:10:e3:ef:a9:f9:9b:6b:
6e:e2:31:ba:6b:03:07:06:34:9c:bc:51:81:34:4d:
ff:e5:8d:f6:af:1d:cf:45:ea:dd:86:0f:0a:b4:b7:
51:97:73:14:9f:f4:16:9c:01:a2:ea:c2:12:a7:38:
22:87:d0:88:fc:bf:97:f1:f2:d9:cc:f8:31:41:e2:
4a:ed:f9:b5:4c:83:10:f9:8a:60:30:1b:ef:11:8f:
4d:54:14:e0:b0:49:23:b8:0b:da:9a:e3:0e:60:55:
ed:56:6d:93:2a:f9:25:d2:2d:95:86:ca:e5:e5:df:
56:ea:31:1c:ae:50:ec:a1:4b:c7:76:b3:a0:07:8b:
56:f6:fc:4b:bf:82:63:79:82:f2:68:12:c1:d5:c2:
20:a5:13:d0:ea:83:93:c1:8f:80:2f:94:d3:6c:ef:
2a:d9:8f:7c:32:87:aa:65:11:12:84:9c:2f:f3:b9:
ba:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E9:64:57:26:B5:6B:53:F3:85:DE:80:C4:AE:48:9C:4B:A9:D7:31
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c4:2b:4a:2e:63:ec:b5:79:96:5f:51:41:f6:b5:55:2e:46:
05:32:3c:6e:e6:9a:92:1d:c0:d6:3d:17:06:51:b0:23:32:e9:
77:3f:8b:14:61:23:af:90:92:a7:bc:59:a9:ba:53:28:0f:62:
2d:a3:af:07:96:61:b3:c6:aa:06:84:8d:c0:62:f5:b3:12:10:
c6:d4:fc:d8:d5:5c:c6:e6:7e:ab:16:f4:05:a2:72:14:4f:d1:
a4:19:50:2e:19:e0:bf:17:7c:54:fe:bd:25:05:f9:f9:50:4a:
61:3a:c0:8f:25:75:87:61:4e:05:55:8c:2b:08:0e:cc:83:9e:
e8:c4:b9:11:6f:d9:5f:4a:68:ec:eb:7f:46:3c:80:c8:e6:e0:
98:df:73:a1:54:e1:06:76:a3:5c:44:e9:ba:5a:94:88:a6:b6:
e3:8e:f4:2c:a2:1e:72:5e:2e:5b:08:63:05:37:f3:30:3b:43:
4d:e4:be:31:45:c6:0a:b5:48:b7:28:09:9f:92:9a:f1:01:31:
9e:b5:d5:74:3a:bc:fc:5e:f8:62:e9:7f:42:d3:13:be:47:dc:
86:81:db:2f:d2:a0:5f:37:7c:90:1f:d6:8e:24:5c:a7:aa:08:
b6:90:6a:28:65:4e:fb:77:15:56:da:c7:cc:3c:2e:0a:b1:e3:
3c:d6:81:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/gbhZ9xmUqI64N0edSxGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MDJkOGI4MjY5YzZiMDdmODE0YWNmMGM3ZWQ3MjliM2Y0
YjU5ODQwHhcNMjYwNTEyMjEwMDQ3WhcNMjYwNTEzMjEwMDQ3WjAzMTEwLwYDVQQD
EyhmMmU5NjQ1NzI2YjU2YjUzZjM4NWRlODBjNGFlNDg5YzRiYTlkNzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DVD2nps0y8/w1p/M+y4VsmOslWW
ovEGc/2uhE+hacvsGQER10qmwzV6V3MY9GteEFjhxLX9L8ki1qQAnFvZaKl4/Q0f
X1GHNidOTzu32+8xjBDj76n5m2tu4jG6awMHBjScvFGBNE3/5Y32rx3PRerdhg8K
tLdRl3MUn/QWnAGi6sISpzgih9CI/L+X8fLZzPgxQeJK7fm1TIMQ+YpgMBvvEY9N
VBTgsEkjuAvamuMOYFXtVm2TKvkl0i2Vhsrl5d9W6jEcrlDsoUvHdrOgB4tW9vxL
v4JjeYLyaBLB1cIgpRPQ6oOTwY+AL5TTbO8q2Y98MoeqZREShJwv87m6EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLpZFcmtWtT84XegMSuSJxLqdcxMB8GA1UdIwQY
MBaAFJUC2LgmnGsH+BSs8Mftcps/S1mEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZGVjYWYtNDdlYi00MzQ5LTllODYt
MDFiOGJiNmFkOTBhLzEvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85ZGVjYWYtNDdlYi00MzQ5LTllODYtMDFiOGJiNmFkOTBh
LzEvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvcQrSi5j
7LV5ll9RQfa1VS5GBTI8buaakh3A1j0XBlGwIzLpdz+LFGEjr5CSp7xZqbpTKA9i
LaOvB5Zhs8aqBoSNwGL1sxIQxtT82NVcxuZ+qxb0BaJyFE/RpBlQLhngvxd8VP69
JQX5+VBKYTrAjyV1h2FOBVWMKwgOzIOe6MS5EW/ZX0po7Ot/RjyAyObgmN9zoVTh
BnajXETpulqUiKa24470LKIecl4uWwhjBTfzMDtDTeS+MUXGCrVItygJn5Ka8QEx
nrXVdDq8/F74Yul/QtMTvkfchoHbL9KgXzd8kB/WjiRcp6oItpBqKGVO+3cVVtrH
zDwuCrHjPNaBCA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:04:44 2026 by rpki-client