Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
File: lQLYuCacawf4FKzwx-1ymz9LWYQ.mft (raw, json)
Hash identifier: 2MMwHOvxznutJSXTuxeoYEBFpgQ3aEL8cXWIqyiA9WY=
Subject key identifier: B4:F5:74:69:89:06:F3:2F:1D:18:ED:02:A3:42:2A:D9:25:DB:11:D3
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 01A1DC826E6B01C92B6111F5CB99D035F2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
Manifest number: 10DB
Signing time: Sun 15 Nov 2026 00:01:37 +0000
Manifest this update: Sun 15 Nov 2026 00:01:37 +0000
Manifest next update: Mon 16 Nov 2026 00:01:37 +0000
Files and hashes: 1: 8TSUJWiFDPDa0bgm0WWpfv58bG0.roa (hash: yHPGe/evnlOV831PNfn2z/vqFvG4v1DFdVZK/++s6ZY=)
2: Jy63By-FZQfSxze4pLedxCdRCZ0.roa (hash: jlnfFTI0k7/ojNNgBH9AiRYF9L1A99AIRcADl9339mo=)
3: WCsF66PA9S1TOale2_gjPHZiFEg.roa (hash: f4T960+J6F/ksqSdQ9f1iQQLFAEXYjALIzG45UEUz10=)
4: WYd4FngiyPvwOCF4MHu9edNzBbE.roa (hash: 0XbYqroAqzM7rgiJX5PGGwG8zSGtxAutxNMT5mAMC74=)
5: XdlGzRcUNVDEpnO9YL0X7aJRffs.roa (hash: RnuPqv8dWz+ZenQXL5WqtuXV26S9E5sAUavYLyGE+b0=)
6: lQLYuCacawf4FKzwx-1ymz9LWYQ.crl (hash: oXQi0M32e78pnD0C5molL2NzN1stwdNZ5NLoPRdY4Xk=)
7: lSgsM1Fln1OkfjXXb0nOQ5rH6yw.roa (hash: 8bA0ZtJ8C6uPRPwuJKR5tibqu47YSzRKxYwvJbXPPoo=)
8: rz6-rsbx5qAXWZK1lflQBq85gpA.roa (hash: xKQhmoOta01iFvpGrvDgJZEcGx54Mj2U+SALSwttG3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:82:6e:6b:01:c9:2b:61:11:f5:cb:99:d0:35:f2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Nov 15 00:01:37 2026 GMT
Not After : Nov 16 00:01:37 2026 GMT
Subject: CN=b4f574698906f32f1d18ed02a3422ad925db11d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:3a:d6:05:b8:fa:7f:d5:8f:87:24:87:b9:
e2:59:15:54:00:0f:8d:4d:ba:bb:46:b7:73:df:6c:
65:0c:87:32:20:4d:85:24:aa:7f:94:42:25:0a:eb:
37:5c:b8:9b:57:a5:bb:82:b8:85:8e:27:c7:6c:e3:
4a:70:96:76:95:f6:4f:dd:45:c6:04:56:39:f1:ef:
64:2d:6f:ca:1c:32:a6:29:a1:2a:0f:0d:27:e7:14:
9a:b0:10:62:a2:32:c9:b2:81:96:45:03:7a:f1:5d:
fb:2f:fb:17:c4:bd:27:27:5b:5d:ab:a8:2c:a9:dc:
93:b5:29:6d:3e:b7:6a:b0:b9:19:e0:69:53:ed:04:
4b:05:bb:fc:ba:75:7d:f3:3b:e1:14:cc:d9:cf:66:
7d:47:e1:3d:3c:11:81:fd:54:7c:8f:77:bd:d7:79:
60:4d:9b:dc:ca:89:44:0b:df:b6:aa:5f:84:f2:9f:
a4:b8:e6:95:bd:d8:df:1d:43:d9:37:94:61:79:b2:
22:1d:c4:b0:f2:96:16:98:f5:28:63:df:59:be:77:
76:50:92:ff:23:cc:ba:6e:93:17:9d:f7:68:c7:3c:
52:f6:24:b1:07:79:d6:bf:20:8e:e0:60:25:15:6b:
e6:3e:d6:b9:ae:a7:79:fe:ac:85:28:38:18:74:39:
2e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F5:74:69:89:06:F3:2F:1D:18:ED:02:A3:42:2A:D9:25:DB:11:D3
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b4:db:51:e5:12:8d:e4:4b:d1:70:05:51:4b:fb:66:c3:96:
0d:46:ac:af:7f:13:a1:8d:53:55:1c:ca:b9:d0:94:9c:09:8e:
c8:6d:92:9b:12:1e:59:72:b7:aa:16:9a:52:4f:1f:ba:83:cd:
0c:ff:d7:62:91:3e:66:c3:86:5a:e7:09:99:e8:ea:5e:f2:55:
e3:f0:b7:a1:dd:ba:e3:67:91:d1:ac:de:84:93:03:e3:b8:28:
f6:cc:23:09:73:78:02:11:47:a9:87:d3:68:2d:1b:90:cc:c7:
e1:63:0f:fb:22:12:a5:c7:9f:75:d4:00:97:0a:7c:96:8a:5d:
06:6e:0c:06:49:d2:21:e3:35:52:68:2f:b0:3e:76:24:4f:89:
6b:79:3e:d6:4d:4b:34:df:d5:c1:00:f5:67:84:99:6d:a0:78:
01:11:18:bb:b7:31:0c:07:fe:6a:97:b7:49:af:c2:57:51:21:
c6:8f:df:f1:d9:21:4e:15:b9:b4:75:ef:01:e4:f6:91:05:be:
5a:24:0b:d7:48:b9:c9:0a:8f:d7:73:2f:f6:7d:1c:d1:d8:6a:
9d:ab:40:12:d5:74:a0:ec:f9:3f:50:c1:d0:b6:66:e0:e7:c5:
5a:36:11:d0:75:1d:57:14:8c:5f:11:18:90:e6:71:a9:31:3e:
23:b2:79:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:31:37 2026 by rpki-client