Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
File: LQSlVAgkJpvlwR8gEouGQUzVWUU.mft (raw, json)
Hash identifier: /FhdPll1aGB6ElTRbGxQCkIm4VohhWWsM4WVus1ili0=
Subject key identifier: B8:E1:60:C7:6A:5A:4D:BF:DE:F1:24:0C:EE:42:BA:77:F9:C0:BB:D1
Authority key identifier: 2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45
Certificate issuer: /CN=2d04a5540824269be5c11f20128b86414cd55945
Certificate serial: 019D2695F271D0FCB5C999315442323D605F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
Manifest number: 03D6
Signing time: Wed 25 Mar 2026 20:00:54 +0000
Manifest this update: Wed 25 Mar 2026 20:00:54 +0000
Manifest next update: Thu 26 Mar 2026 20:00:54 +0000
Files and hashes: 1: LQSlVAgkJpvlwR8gEouGQUzVWUU.crl (hash: v3/tocOT4vP9Zbjd1q8fizAcmUOBdOifHz9dzryVRrE=)
2: mkoR_2Qj1P7ucMa0xTA2WyuYFT0.roa (hash: N937OZCdBilb1OADuX8QhLksdpQ9AoFfCxgf7tzf5mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:f2:71:d0:fc:b5:c9:99:31:54:42:32:3d:60:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d04a5540824269be5c11f20128b86414cd55945
Validity
Not Before: Mar 25 20:00:54 2026 GMT
Not After : Mar 26 20:00:54 2026 GMT
Subject: CN=b8e160c76a5a4dbfdef1240cee42ba77f9c0bbd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:57:81:2f:12:5b:83:9f:7b:db:02:da:98:
95:c5:01:94:ca:0c:b5:96:9f:94:5a:af:91:16:7a:
e6:c5:3b:e5:9e:34:a5:b9:58:24:33:04:14:72:3f:
7a:9b:dd:c6:b6:9a:83:95:de:94:82:de:c5:38:14:
7f:21:d3:cb:1a:36:e1:58:67:35:41:85:5a:47:0f:
1c:c6:7f:95:2a:23:b4:45:f8:76:3a:59:49:66:9e:
1e:d4:89:c7:f5:5d:97:c1:31:67:79:99:36:9d:f6:
e5:3c:86:80:2e:80:37:fb:c2:c6:6c:1d:cf:0d:ce:
96:fa:eb:f4:23:27:03:33:24:d8:a7:a1:8e:08:ee:
75:e9:51:15:5b:e7:3f:41:cf:34:fe:4e:36:db:bb:
c5:2a:db:14:6b:3d:a7:6c:a1:0f:62:43:69:0c:b6:
8d:99:a6:77:3d:7a:77:59:c8:40:96:2c:81:78:c6:
ff:3c:b8:49:27:ba:81:d8:32:ad:36:c5:a7:57:10:
e5:aa:4d:e8:91:9a:fe:ac:14:eb:7e:5e:28:8f:83:
7c:4c:cc:36:db:4c:97:d9:40:5c:1b:61:57:ad:55:
2e:78:12:0a:41:88:5c:23:72:37:bb:ec:8b:af:00:
e2:b6:21:05:df:2b:e0:a9:79:7d:d8:ad:bd:f8:ae:
d3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E1:60:C7:6A:5A:4D:BF:DE:F1:24:0C:EE:42:BA:77:F9:C0:BB:D1
X509v3 Authority Key Identifier:
keyid:2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:57:5d:f5:47:2e:60:60:ae:01:16:5a:a9:dc:8a:e6:8d:3b:
af:22:de:26:1d:9a:ef:f4:e9:b9:61:93:cf:6d:4d:6b:b1:e4:
4b:c6:0a:0f:b8:e2:bb:72:8b:92:4c:8c:96:fe:0a:4d:8f:2b:
2c:4c:e8:84:b6:8e:fa:28:f2:9d:6b:32:ae:a5:86:bd:2e:19:
e1:43:b6:a1:90:b8:df:e2:16:79:af:11:c3:02:a7:45:9e:13:
de:2d:10:c7:06:0b:9a:b1:e1:65:26:1c:b1:52:2e:f8:40:f2:
3a:6b:e6:ec:9e:7b:16:f2:b7:d8:f5:3c:cd:36:8d:71:f8:b5:
64:31:56:e0:cc:8d:a9:b3:c1:2d:f4:c2:36:bd:16:22:56:06:
52:3d:ac:df:86:1a:ea:e9:c5:bb:75:48:0f:33:67:65:c5:9f:
1e:1c:22:0e:06:b5:a1:55:27:ba:5d:ca:a9:1f:92:1c:bf:29:
f1:ed:fe:c6:f1:4b:7f:fc:60:0e:30:c2:81:16:de:6d:0a:8f:
12:c8:84:d2:1e:8e:90:cd:39:07:0e:cb:90:83:a0:40:8a:c0:
2a:8d:7c:3f:20:6f:51:7d:d9:08:e0:d6:56:82:0d:31:f4:be:
df:03:cb:86:c2:a2:d8:b9:4e:a6:0a:56:c3:55:98:31:87:bc:
ce:da:bb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:57 2026 by rpki-client