Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.mft
File: lqOP7q6QPbyyj_kzPgQ15-lIi0s.mft (raw, json)
Hash identifier: YtYvidK8ZMxf6HzEQrFbbqt858K2jT4b2jghkWpYxh8=
Subject key identifier: 98:E8:1A:42:87:68:3A:9A:11:D6:BA:EC:6F:41:7D:14:30:3E:40:8E
Authority key identifier: 96:A3:8F:EE:AE:90:3D:BC:B2:8F:F9:33:3E:04:35:E7:E9:48:8B:4B
Certificate issuer: /CN=96a38feeae903dbcb28ff9333e0435e7e9488b4b
Certificate serial: 019F935AAD496D9E032E61F3FC3854497B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqOP7q6QPbyyj_kzPgQ15-lIi0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:20 +0000
Manifest this update: Fri 24 Jul 2026 09:00:20 +0000
Manifest next update: Sat 25 Jul 2026 09:00:20 +0000
Files and hashes: 1: ItN4mW12iVyH6BrYFKfPQy7lr08.roa (hash: /6ILhaZ9nnrQCe2x3LhpJcOwVGQyxXtUIIDXznVVDPA=)
2: lqOP7q6QPbyyj_kzPgQ15-lIi0s.crl (hash: UnVeHUFrQWcIT7iCuW+z74HOO9UxarSu81ONeL+9TtY=)
3: qSB-Fr5on66jEvQLa_-E0yx5agQ.roa (hash: /d6onL0LuXW1jRb8TBZIzkovZYA/Bhrij6W7usA00vo=)
4: yR4cNbVarjz8LFgC6lYaD_f6Y4M.roa (hash: QiANg/lT9BhVA0Gyjnvg/6FNpwOrRHBchB0Jd5cbcxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqOP7q6QPbyyj_kzPgQ15-lIi0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:ad:49:6d:9e:03:2e:61:f3:fc:38:54:49:7b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a38feeae903dbcb28ff9333e0435e7e9488b4b
Validity
Not Before: Jul 24 09:00:20 2026 GMT
Not After : Jul 25 09:00:20 2026 GMT
Subject: CN=98e81a4287683a9a11d6baec6f417d14303e408e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:76:2c:35:e0:32:5d:16:e2:69:46:30:22:
68:5b:83:39:37:54:3a:8a:12:32:a5:52:55:7a:e2:
5b:cd:43:a1:77:1d:4f:bb:63:ae:a4:d6:4d:28:76:
d5:af:70:f0:c3:96:1e:91:d1:7e:68:d0:51:09:6e:
a8:06:5e:c1:07:b6:c8:63:8f:4f:5c:da:ea:2f:14:
fb:dd:db:14:ce:a6:54:f8:0e:cb:1e:97:d5:49:52:
46:9f:85:9e:f3:86:68:99:c5:7f:c1:b4:2d:98:39:
42:9f:15:a2:1f:1e:dc:b6:af:69:27:7a:84:c3:0a:
31:7c:fb:09:9c:49:d7:52:c6:61:5f:09:da:2c:b8:
a2:3c:f3:a5:5d:8b:bb:50:80:01:4f:fc:f0:d3:ee:
4a:2a:d3:5e:19:55:06:f2:8e:c0:77:ea:0c:9f:59:
df:c8:7c:ab:10:0a:80:36:c5:92:da:2c:5e:cb:cb:
19:d4:bf:46:dc:ba:0c:1b:cf:76:78:aa:65:7d:53:
6f:59:c6:f1:c1:7e:58:60:72:44:c1:73:80:5c:f4:
5e:44:d4:23:d2:c3:78:70:32:b8:d4:41:0f:60:9c:
16:f9:79:3d:ab:c0:2f:3d:01:c5:01:5f:a7:96:f9:
7d:00:b5:fd:26:f9:79:af:d2:99:ec:1d:e1:70:fc:
64:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E8:1A:42:87:68:3A:9A:11:D6:BA:EC:6F:41:7D:14:30:3E:40:8E
X509v3 Authority Key Identifier:
keyid:96:A3:8F:EE:AE:90:3D:BC:B2:8F:F9:33:3E:04:35:E7:E9:48:8B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqOP7q6QPbyyj_kzPgQ15-lIi0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c0:58:57:25:35:dd:c0:32:4d:0e:ce:1b:a1:02:4e:d4:a1:
c9:de:d0:ea:9e:a7:cd:b6:71:92:a1:6f:7e:c1:4d:8e:ac:b6:
f7:8a:89:0f:6e:5b:9a:7e:09:ad:cc:cb:aa:5f:0c:30:20:3c:
a2:40:af:26:f4:17:7d:c7:c3:6d:5f:fc:19:77:50:da:1b:a7:
18:df:bc:b6:89:b7:a0:6f:36:e0:02:7d:90:87:68:ff:45:aa:
76:61:94:91:04:0a:1a:3a:19:71:d9:c9:60:64:23:59:9a:57:
7a:8a:50:fa:03:aa:e8:54:84:60:9d:b2:bd:cc:1c:9c:40:ae:
27:d0:8f:db:e5:ed:ee:a9:4b:b2:48:a7:52:71:b1:14:2a:51:
d8:7a:c2:3a:33:91:da:e7:20:39:8f:bc:ea:9f:92:12:bb:06:
ca:ca:6a:dc:f7:d4:66:a0:13:d7:f1:32:1b:71:46:9c:54:40:
72:27:7d:70:59:cd:38:11:eb:49:82:37:16:1f:57:f0:dd:07:
32:49:c1:76:97:95:2b:3f:27:4e:b0:2d:f6:bd:66:b4:b2:96:
9c:c3:07:27:3c:87:01:ae:07:a2:92:93:2c:7d:e3:f3:8b:e1:
81:c6:8c:ec:23:1c:ef:76:e0:22:9a:86:de:58:b7:8c:75:38:
2e:44:ca:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:13:45 2026 by rpki-client