Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
File: lQLYuCacawf4FKzwx-1ymz9LWYQ.mft (raw, json)
Hash identifier: K+V405WuwYL0V/a1wefQoElW8HnPecdqdTxEJfvJ5iI=
Subject key identifier: 23:69:35:AD:1D:90:AB:31:27:A3:C0:80:85:C7:50:BD:7B:FF:6F:B0
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 01A0D539308FCA6B222345BF578C003B2BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
Manifest number: 1052
Signing time: Thu 24 Sep 2026 21:01:29 +0000
Manifest this update: Thu 24 Sep 2026 21:01:29 +0000
Manifest next update: Fri 25 Sep 2026 21:01:29 +0000
Files and hashes: 1: 9RuEfPDy7NcEevxrr3brvJp9UCU.roa (hash: 0j6TPncrYZJxKRy7qi/uID511rndKgFVeAqO5t+E9Ok=)
2: Jy63By-FZQfSxze4pLedxCdRCZ0.roa (hash: jlnfFTI0k7/ojNNgBH9AiRYF9L1A99AIRcADl9339mo=)
3: WCsF66PA9S1TOale2_gjPHZiFEg.roa (hash: f4T960+J6F/ksqSdQ9f1iQQLFAEXYjALIzG45UEUz10=)
4: WYd4FngiyPvwOCF4MHu9edNzBbE.roa (hash: 0XbYqroAqzM7rgiJX5PGGwG8zSGtxAutxNMT5mAMC74=)
5: XdlGzRcUNVDEpnO9YL0X7aJRffs.roa (hash: RnuPqv8dWz+ZenQXL5WqtuXV26S9E5sAUavYLyGE+b0=)
6: lQLYuCacawf4FKzwx-1ymz9LWYQ.crl (hash: satoRRk0gham81ZF4dc32xaRD7fVV6F8p8XB7jhGKL0=)
7: lSgsM1Fln1OkfjXXb0nOQ5rH6yw.roa (hash: 8bA0ZtJ8C6uPRPwuJKR5tibqu47YSzRKxYwvJbXPPoo=)
8: rz6-rsbx5qAXWZK1lflQBq85gpA.roa (hash: xKQhmoOta01iFvpGrvDgJZEcGx54Mj2U+SALSwttG3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:30:8f:ca:6b:22:23:45:bf:57:8c:00:3b:2b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Sep 24 21:01:29 2026 GMT
Not After : Sep 25 21:01:29 2026 GMT
Subject: CN=236935ad1d90ab3127a3c08085c750bd7bff6fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f4:b8:3c:5a:44:ed:b5:91:f0:8b:7b:4b:70:
08:b1:85:75:d2:ca:50:fd:dd:91:fe:02:de:90:34:
c0:4f:1b:42:79:32:73:f5:96:8d:1a:a3:af:30:54:
7d:9d:bd:4f:8a:60:16:2f:82:9b:0a:44:10:8e:c1:
22:0b:f2:72:90:77:87:60:af:3d:e0:a2:e2:0d:52:
29:a2:11:b8:75:fd:d5:18:87:10:3f:8e:9e:05:4d:
fa:a7:15:1f:f7:6e:99:84:33:78:04:ee:40:44:83:
44:2f:f3:75:2b:6a:f2:7a:aa:03:e6:be:d4:92:dc:
dc:30:51:d1:ba:67:d8:73:bd:71:7d:9c:ab:06:fd:
c2:54:b6:88:51:d5:5a:a0:29:9d:69:84:58:e1:3a:
37:0c:45:68:15:5b:08:13:ea:29:f2:45:2c:74:af:
85:d8:8d:3f:49:58:a5:ab:ef:8b:41:7d:be:89:22:
e7:16:15:c3:8f:32:eb:b3:ef:76:3e:41:2b:df:62:
c9:2f:a3:75:68:ae:cf:41:66:8a:3d:ee:ef:89:54:
c8:9c:17:d7:3f:3c:b6:8a:25:7e:57:12:db:51:bc:
72:94:7e:3f:a2:ee:9e:6f:9a:68:62:c1:00:c0:61:
ec:c1:38:5f:8f:ca:67:04:71:61:ff:95:03:66:12:
ed:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:69:35:AD:1D:90:AB:31:27:A3:C0:80:85:C7:50:BD:7B:FF:6F:B0
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c0:75:bf:49:3a:fe:0d:ab:88:63:8e:db:84:b3:2f:a7:2f:
b9:60:67:55:5f:d5:ba:6c:d3:22:73:01:80:e1:8e:0d:5f:c8:
5d:31:71:73:e4:5a:b4:7e:26:61:5e:09:ab:3e:7a:bd:84:cc:
30:9c:19:c9:cd:1d:46:0d:f5:5c:59:f7:ce:85:d8:b5:e1:05:
03:7b:ab:e2:3a:45:f3:5e:29:1b:62:12:b3:86:b4:66:27:29:
af:90:1a:db:74:92:89:14:41:df:3b:bf:b6:e8:63:f3:54:2b:
e1:42:9b:3c:81:83:2b:1d:2d:03:5f:9d:f7:2e:3b:e7:eb:1e:
c2:0d:8c:21:d7:3a:76:6a:9f:09:fe:be:b2:ad:07:ac:44:84:
db:2c:e2:29:a1:d2:4e:ac:95:cc:8d:fa:26:95:55:cc:99:85:
e2:19:c4:4c:4d:6d:70:f5:8a:c4:a5:ab:a3:22:ef:f8:2b:70:
e4:4c:1c:c3:33:c7:8b:9c:f4:54:49:18:0e:93:a4:77:26:a2:
90:64:d9:63:19:d1:12:e8:4c:1c:82:dc:90:81:e1:3b:ae:8c:
78:2c:7e:f5:e5:59:db:ab:53:e5:3f:ab:b8:89:5d:ed:f2:14:
55:09:3b:48:29:70:3c:58:bd:08:8d:7b:55:d2:e6:38:4a:d1:
c3:81:78:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:48:30 2026 by rpki-client