Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
File: lQLYuCacawf4FKzwx-1ymz9LWYQ.mft (raw, json)
Hash identifier: /cMnoCvz2FqJYtngt1I7CzszrSh5IEEfTpC0phsLNds=
Subject key identifier: 6A:0C:B4:8B:F8:F0:35:1E:EB:9C:9C:E8:E0:4F:B0:60:60:A0:97:2C
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 019F90C820956E7B649F8D3188C3BFC08789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
Manifest number: 0FAA
Signing time: Thu 23 Jul 2026 21:01:02 +0000
Manifest this update: Thu 23 Jul 2026 21:01:02 +0000
Manifest next update: Fri 24 Jul 2026 21:01:02 +0000
Files and hashes: 1: 9RuEfPDy7NcEevxrr3brvJp9UCU.roa (hash: 0j6TPncrYZJxKRy7qi/uID511rndKgFVeAqO5t+E9Ok=)
2: Jy63By-FZQfSxze4pLedxCdRCZ0.roa (hash: jlnfFTI0k7/ojNNgBH9AiRYF9L1A99AIRcADl9339mo=)
3: WCsF66PA9S1TOale2_gjPHZiFEg.roa (hash: f4T960+J6F/ksqSdQ9f1iQQLFAEXYjALIzG45UEUz10=)
4: WYd4FngiyPvwOCF4MHu9edNzBbE.roa (hash: 0XbYqroAqzM7rgiJX5PGGwG8zSGtxAutxNMT5mAMC74=)
5: XdlGzRcUNVDEpnO9YL0X7aJRffs.roa (hash: RnuPqv8dWz+ZenQXL5WqtuXV26S9E5sAUavYLyGE+b0=)
6: lQLYuCacawf4FKzwx-1ymz9LWYQ.crl (hash: wSKz5SnXiIzsx13uETOLuX/mUbMkm7D/d3aS1qp46fQ=)
7: lSgsM1Fln1OkfjXXb0nOQ5rH6yw.roa (hash: 8bA0ZtJ8C6uPRPwuJKR5tibqu47YSzRKxYwvJbXPPoo=)
8: rz6-rsbx5qAXWZK1lflQBq85gpA.roa (hash: xKQhmoOta01iFvpGrvDgJZEcGx54Mj2U+SALSwttG3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:20:95:6e:7b:64:9f:8d:31:88:c3:bf:c0:87:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Jul 23 21:01:02 2026 GMT
Not After : Jul 24 21:01:02 2026 GMT
Subject: CN=6a0cb48bf8f0351eeb9c9ce8e04fb06060a0972c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:15:e5:89:61:59:7e:0b:9b:e4:ca:23:6e:ab:
76:fe:f9:8a:b5:37:c2:cc:ae:b9:1f:b7:82:41:0d:
c8:58:ad:19:bf:7d:a2:99:94:f6:a9:12:68:de:31:
de:6a:da:a9:65:8b:16:3f:b5:f1:ed:81:b6:0d:1f:
84:e5:cb:d2:f7:13:02:85:ee:52:7c:9d:0b:7f:0d:
06:aa:9a:a2:58:90:93:3b:76:ca:e1:81:93:9c:f6:
16:94:b2:c7:e2:db:af:02:f5:10:b0:71:8b:2a:69:
51:ed:7f:9f:98:f6:63:6b:d9:d8:f9:4a:77:0a:e6:
9b:ca:ec:48:5d:a8:a9:12:6d:7e:42:93:c2:16:ff:
b8:a7:43:52:69:47:dd:0c:b5:08:9a:92:27:b4:a4:
7c:a4:a9:fd:d9:d0:fe:43:39:3e:f2:57:86:36:51:
62:ed:06:46:9c:91:4d:02:d6:77:8e:21:0a:c8:64:
79:aa:c2:7d:4b:f7:f5:a6:35:8d:bc:a0:1a:9c:be:
3b:78:01:20:20:6c:56:a1:13:4d:a1:58:3f:da:c7:
89:c2:79:dd:79:17:fc:38:5e:6f:e8:15:95:b7:b4:
c1:76:12:c9:9e:09:f5:43:63:70:b0:64:5a:03:c0:
a3:47:c9:18:b6:d6:80:d7:c9:8e:9c:f7:05:16:c4:
09:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0C:B4:8B:F8:F0:35:1E:EB:9C:9C:E8:E0:4F:B0:60:60:A0:97:2C
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:17:08:9d:44:e5:37:7f:56:e2:82:6d:db:69:4b:b8:c8:bb:
f8:5a:f9:64:35:a8:74:48:7b:2f:cb:54:4b:69:33:7a:f9:a4:
09:7e:d5:eb:77:ab:a2:3c:d1:55:19:14:6d:03:c1:44:e2:d4:
e3:53:1c:d4:0f:91:9c:7c:8a:1e:18:77:bb:cf:94:39:60:30:
06:03:5c:7d:e0:95:52:4b:e3:fa:8b:56:44:62:2f:9e:77:f5:
9c:ae:8c:fa:70:9b:25:b8:27:2f:00:fb:04:d4:fd:73:d8:42:
bc:e3:ce:5e:ce:e7:08:52:84:6f:6c:28:03:e6:2e:64:fb:d8:
db:32:f1:c3:f1:94:a9:62:02:b2:ab:a1:98:fc:c0:10:ca:b3:
6e:e0:22:2b:9f:21:92:9d:40:51:97:57:5a:69:9f:f7:d6:99:
5f:99:87:e9:ef:c1:3a:69:bf:10:02:73:19:53:3d:d3:0b:bb:
1a:b3:c1:6e:bc:9c:71:ab:32:e1:ac:c7:af:e0:14:f5:e4:d2:
e1:63:c9:62:a2:3b:dc:25:0b:02:78:6d:1f:61:7b:f1:03:e1:
9b:87:80:27:41:92:a5:b6:59:5f:0e:c7:22:bc:7c:d7:36:32:
75:4f:b6:4b:cd:5c:e8:43:60:c5:25:56:19:39:6a:87:ae:f8:
78:75:0c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:57 2026 by rpki-client