Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
File: lQLYuCacawf4FKzwx-1ymz9LWYQ.mft (raw, json)
Hash identifier: /azLd9nDlGBmv/rvl+TkAvi+hznqOa+O0/n4uukfANY=
Subject key identifier: 79:02:81:B8:D9:04:FB:84:D0:33:22:CA:85:42:BD:83:8C:DC:C9:89
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 019D28BB8458B794DBB87B1B4BF41CFABCE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
Manifest number: 0E69
Signing time: Thu 26 Mar 2026 06:01:10 +0000
Manifest this update: Thu 26 Mar 2026 06:01:10 +0000
Manifest next update: Fri 27 Mar 2026 06:01:10 +0000
Files and hashes: 1: 5Vi1KDg5hZyzoaBI77sNLh4qRf8.roa (hash: /5vW/n+ymrmcyaI56/lGSU6fFwFpxrqqlswOQDyntMo=)
2: Jy63By-FZQfSxze4pLedxCdRCZ0.roa (hash: jlnfFTI0k7/ojNNgBH9AiRYF9L1A99AIRcADl9339mo=)
3: WYd4FngiyPvwOCF4MHu9edNzBbE.roa (hash: 0XbYqroAqzM7rgiJX5PGGwG8zSGtxAutxNMT5mAMC74=)
4: X52pcbjfgYr8nnx8E3zf_eGkSeE.roa (hash: Cy4T2p4Uga3qbKI6fJaussEwqR0yDxM0A5j2mhQrkLc=)
5: XdlGzRcUNVDEpnO9YL0X7aJRffs.roa (hash: RnuPqv8dWz+ZenQXL5WqtuXV26S9E5sAUavYLyGE+b0=)
6: lQLYuCacawf4FKzwx-1ymz9LWYQ.crl (hash: Yh0pURY9bXIvN8gUhZhCf1EdO8kLiFKClNz7PbvILIA=)
7: lSgsM1Fln1OkfjXXb0nOQ5rH6yw.roa (hash: 8bA0ZtJ8C6uPRPwuJKR5tibqu47YSzRKxYwvJbXPPoo=)
8: qeVRI_NFLaWOD-2zt4kPj6kYAG8.roa (hash: ovysVj+biiubkNbxSo534XXtcaYbBsQvjQyeh0Tod6Q=)
9: rz6-rsbx5qAXWZK1lflQBq85gpA.roa (hash: xKQhmoOta01iFvpGrvDgJZEcGx54Mj2U+SALSwttG3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:84:58:b7:94:db:b8:7b:1b:4b:f4:1c:fa:bc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Mar 26 06:01:10 2026 GMT
Not After : Mar 27 06:01:10 2026 GMT
Subject: CN=790281b8d904fb84d03322ca8542bd838cdcc989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:de:59:68:48:3d:86:a9:40:b8:00:b3:c5:
82:8e:02:a0:81:6d:bd:37:85:d2:25:30:68:36:38:
83:8a:d9:5d:a0:6d:8e:2d:ac:84:ca:f0:bc:7f:f5:
71:c3:87:4e:b2:48:fa:de:03:a7:9c:05:aa:6e:bf:
14:7a:26:af:6b:cd:26:8a:f4:9d:29:4d:cb:71:82:
7b:e9:cc:4a:40:8c:b8:14:36:33:f8:8a:6e:bd:8e:
39:26:c8:06:ca:a3:9f:50:ef:bc:55:6d:b3:da:9c:
8c:b4:fa:84:31:72:91:c5:c3:6a:73:2d:0d:aa:64:
db:0c:6c:3e:f6:7b:9b:82:ad:62:39:26:c5:16:1b:
8d:23:f7:61:27:b0:8d:ba:c5:4b:26:86:2a:b4:de:
70:03:36:ee:a8:c6:d1:17:0c:6d:bc:2c:07:5f:49:
8f:e3:bc:ef:4b:47:25:5d:97:f0:68:4e:0e:78:ba:
94:2f:57:93:20:36:7d:ad:e4:89:dc:ce:d5:77:a6:
1b:1f:e2:fa:a3:09:b0:3a:c5:37:fc:9d:e5:1a:63:
29:15:af:e8:50:a3:9d:4b:e9:eb:12:6a:29:b0:a3:
5b:b3:b5:80:10:ca:8c:56:d3:2a:fb:72:1b:1a:67:
12:cc:37:ca:83:08:8d:fc:cd:e0:9f:c4:a1:f4:b8:
8d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:02:81:B8:D9:04:FB:84:D0:33:22:CA:85:42:BD:83:8C:DC:C9:89
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8d:4d:5b:91:bf:d5:eb:3b:13:6a:29:d0:1e:0f:5e:a2:5f:
6c:84:c8:a0:d9:80:48:68:1a:c3:a1:c1:2b:19:47:e4:b6:72:
61:52:07:3a:b4:d7:38:46:af:16:16:3d:67:4a:39:bf:1d:ec:
fe:73:b8:a4:29:53:57:90:03:96:cb:63:f6:ac:99:05:dc:8e:
fe:8d:a9:41:ef:47:0d:50:79:1b:f4:bd:f9:1f:ce:f4:a8:db:
e4:6f:2a:12:17:c6:50:5c:43:9d:48:53:2d:59:e5:0c:6b:bc:
c7:b9:de:df:f0:73:67:8d:eb:92:5a:08:e8:4c:fe:d5:e3:f4:
31:72:48:d9:9c:0a:95:9f:7a:0a:31:45:a6:8d:ec:85:17:a2:
64:ae:5f:ed:56:62:58:00:34:e1:82:23:97:7f:b7:80:7b:57:
c2:4d:5d:1b:50:80:da:cb:43:9d:8d:0f:41:ce:dd:fa:da:fc:
0a:71:d4:70:b0:83:41:53:65:ae:8b:13:7d:57:45:b7:de:00:
47:56:3d:a1:f6:c8:86:b0:03:4a:f6:60:4a:54:84:5e:20:29:
03:7c:28:fc:60:1b:04:8f:a6:2b:68:f4:a5:04:df:b7:15:0d:
4b:1d:3d:f8:30:33:97:34:9b:69:96:ca:61:79:72:ca:12:f5:
12:b0:ca:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:39:13 2026 by rpki-client