Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
File: lqSbOF03Of3SQ34K798iUc1dKlE.mft (raw, json)
Hash identifier: F1SgHdjXK6dAXztEt0eWRDeSM6A3Q0U4hn1WpuqoWg8=
Subject key identifier: 1E:6E:3A:F5:D2:35:C2:44:D3:9F:27:26:E2:1F:36:89:BC:52:3A:EB
Authority key identifier: 96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51
Certificate issuer: /CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51
Certificate serial: 019D265F4ED55464000EBC11394734EF7472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
Manifest number: 04C8
Signing time: Wed 25 Mar 2026 19:01:13 +0000
Manifest this update: Wed 25 Mar 2026 19:01:13 +0000
Manifest next update: Thu 26 Mar 2026 19:01:13 +0000
Files and hashes: 1: lqSbOF03Of3SQ34K798iUc1dKlE.crl (hash: EtJG6U0vU0KOzT3V+iwYEuYdJh/9XzU2z5B7FX+JkF8=)
2: r7dmA6Cimt2y9DxwybhrZ8RQGZI.roa (hash: gakrlzuzHNIrUEQPTssrms796la3N/RETBOOb2DRmlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:4e:d5:54:64:00:0e:bc:11:39:47:34:ef:74:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51
Validity
Not Before: Mar 25 19:01:13 2026 GMT
Not After : Mar 26 19:01:13 2026 GMT
Subject: CN=1e6e3af5d235c244d39f2726e21f3689bc523aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:0a:11:b5:ae:f4:7a:9e:1c:7d:c5:b4:05:
d0:17:1c:35:db:ed:13:2c:28:3a:06:a1:a4:0d:b1:
12:8e:95:d8:2c:a8:8e:1d:71:5e:7c:02:6a:81:74:
7f:16:77:ed:cf:23:5f:06:6e:68:eb:0b:a1:d8:8c:
4a:8c:c2:1f:13:db:a8:59:89:0d:ca:92:e5:5f:67:
9b:45:d4:15:39:82:8f:32:16:bd:75:1d:7a:8d:26:
bc:64:03:83:36:f7:f3:1f:f1:c7:30:38:07:ba:a0:
30:23:8c:3a:cf:28:54:02:1a:7c:14:84:b9:d2:39:
2f:a0:21:42:21:45:7f:93:b4:f3:c7:5c:13:c9:62:
7c:da:a3:92:44:e8:5d:0d:39:32:35:ed:f1:6c:90:
b6:c2:88:67:78:c2:bc:aa:b4:f8:8f:a3:88:fb:d4:
4f:b5:db:50:de:97:e5:00:97:59:19:39:b8:a8:53:
fa:01:9e:39:e1:6a:a2:bc:e4:1c:4f:9d:b9:b9:8e:
ed:6c:33:35:2c:e3:36:87:7c:2e:6b:02:8e:29:2e:
d3:51:dc:9f:da:be:b2:0d:20:29:57:12:7b:6d:c4:
fb:f1:11:a3:29:09:36:62:bb:67:d4:61:96:68:f1:
af:7b:bd:7d:5d:f0:0f:d3:1e:06:2b:47:56:87:d6:
6f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6E:3A:F5:D2:35:C2:44:D3:9F:27:26:E2:1F:36:89:BC:52:3A:EB
X509v3 Authority Key Identifier:
keyid:96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:79:12:e4:39:6c:2d:8f:bc:e1:e2:ac:f8:a6:49:9a:d8:3c:
ba:c6:1a:bf:c1:0a:f0:ea:a6:5c:31:4c:43:fa:47:dc:54:45:
9b:83:60:03:4c:0d:87:94:6d:8d:7f:20:a6:9b:15:27:bc:b7:
ff:bd:1a:d7:15:17:6f:b2:0d:ee:68:5e:e1:b8:d8:5b:e4:08:
ba:d6:74:62:5c:45:80:58:d3:d6:38:f7:5f:e5:8d:06:80:64:
04:b6:b3:80:81:fe:61:c9:74:78:29:02:2a:22:81:59:af:5b:
3a:da:dc:ca:ce:9b:29:16:d8:8b:ae:33:ca:c1:b7:3c:e3:86:
d4:48:ef:ce:fb:b2:fe:75:ab:9b:3d:74:cb:ae:23:b1:af:f1:
69:c8:55:90:84:ab:db:dd:64:be:97:f5:25:84:80:9e:9b:a4:
ec:f2:14:6b:6a:03:dd:a5:56:a8:e2:4e:8d:e3:cf:b7:ab:27:
d8:89:1d:18:b0:50:bd:84:1b:91:e4:ad:07:c8:a8:26:40:d4:
27:af:35:69:6b:23:fc:c6:79:19:ad:6d:af:2c:72:46:6a:d7:
a7:25:86:4b:4e:ac:ce:44:fc:a8:78:1d:39:f2:61:46:da:69:
8a:8d:50:4e:6f:ba:04:ae:c0:13:38:83:e0:f9:ba:19:46:61:
06:70:e2:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX07VVGQADrwROUc073RyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YTQ5YjM4NWQzNzM5ZmRkMjQzN2UwYWVmZGYyMjUxY2Q1
ZDJhNTEwHhcNMjYwMzI1MTkwMTEzWhcNMjYwMzI2MTkwMTEzWjAzMTEwLwYDVQQD
EygxZTZlM2FmNWQyMzVjMjQ0ZDM5ZjI3MjZlMjFmMzY4OWJjNTIzYWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwMKEbWu9HqeHH3FtAXQFxw12+0T
LCg6BqGkDbESjpXYLKiOHXFefAJqgXR/FnftzyNfBm5o6wuh2IxKjMIfE9uoWYkN
ypLlX2ebRdQVOYKPMha9dR16jSa8ZAODNvfzH/HHMDgHuqAwI4w6zyhUAhp8FIS5
0jkvoCFCIUV/k7Tzx1wTyWJ82qOSROhdDTkyNe3xbJC2wohneMK8qrT4j6OI+9RP
tdtQ3pflAJdZGTm4qFP6AZ454WqivOQcT525uY7tbDM1LOM2h3wuawKOKS7TUdyf
2r6yDSApVxJ7bcT78RGjKQk2Yrtn1GGWaPGve719XfAP0x4GK0dWh9ZvCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5uOvXSNcJE058nJuIfNom8UjrrMB8GA1UdIwQY
MBaAFJakmzhdNzn90kN+Cu/fIlHNXSpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85NWYxNDMtZTljZC00NDQ3LWFiZWEt
ZmI0ZWFhNTI2MmY3LzEvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC85NWYxNDMtZTljZC00NDQ3LWFiZWEtZmI0ZWFhNTI2MmY3
LzEvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3kS5Dls
LY+84eKs+KZJmtg8usYav8EK8OqmXDFMQ/pH3FRFm4NgA0wNh5RtjX8gppsVJ7y3
/70a1xUXb7IN7mhe4bjYW+QIutZ0YlxFgFjT1jj3X+WNBoBkBLazgIH+Ycl0eCkC
KiKBWa9bOtrcys6bKRbYi64zysG3POOG1Ejvzvuy/nWrmz10y64jsa/xachVkISr
291kvpf1JYSAnpuk7PIUa2oD3aVWqOJOjePPt6sn2IkdGLBQvYQbkeStB8ioJkDU
J681aWsj/MZ5Ga1tryxyRmrXpyWGS06szkT8qHgdOfJhRtppio1QTm+6BK7AEziD
4Pm6GUZhBnDiaw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:57 2026 by rpki-client