Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
File: lQRT7UhedocGF6Dk9GdRRMMZLLI.mft (raw, json)
Hash identifier: VDqlZQThLpHJPBHAhhdoFm8kNJSqzYnFetXEnPcLYmM=
Subject key identifier: 19:58:70:CE:80:52:9B:B8:68:19:69:BE:16:86:31:B8:DB:8D:A0:84
Authority key identifier: 95:04:53:ED:48:5E:76:87:06:17:A0:E4:F4:67:51:44:C3:19:2C:B2
Certificate issuer: /CN=950453ed485e76870617a0e4f4675144c3192cb2
Certificate serial: 01A0D1C95D3E5B3DED679E0F13258162AD0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQRT7UhedocGF6Dk9GdRRMMZLLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
Manifest number: 0170
Signing time: Thu 24 Sep 2026 05:00:29 +0000
Manifest this update: Thu 24 Sep 2026 05:00:29 +0000
Manifest next update: Fri 25 Sep 2026 05:00:29 +0000
Files and hashes: 1: Z4ZoaORQua51KCRsVg2IUhoDAXo.roa (hash: NCkzuayiCIk++QJTY6wsrqBuJEYrBZjGt9dXQEIDPoM=)
2: lQRT7UhedocGF6Dk9GdRRMMZLLI.crl (hash: y54Z3YD9iDooJvSsbHrxP2JFQLrLiHaQD1I4frl9/kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQRT7UhedocGF6Dk9GdRRMMZLLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:5d:3e:5b:3d:ed:67:9e:0f:13:25:81:62:ad:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950453ed485e76870617a0e4f4675144c3192cb2
Validity
Not Before: Sep 24 05:00:29 2026 GMT
Not After : Sep 25 05:00:29 2026 GMT
Subject: CN=195870ce80529bb8681969be168631b8db8da084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:09:2e:65:09:28:b2:87:4e:db:ed:a5:45:0c:
f5:0b:7e:85:4d:85:d5:b3:8a:19:1a:34:bb:f6:6b:
62:fa:e6:99:5c:f8:d3:66:eb:0b:f0:81:1a:31:46:
f9:36:00:ef:d6:d1:59:5b:90:b1:11:78:4d:6b:76:
c9:a3:1a:c2:3a:91:ec:c8:9a:a5:14:60:df:80:9d:
5d:e6:f6:dd:63:04:1f:9a:ba:fd:ac:34:42:d7:a1:
25:62:3b:0e:fc:ec:98:f6:26:b0:23:0f:e6:c0:a4:
0e:d1:45:9b:eb:f2:73:33:3c:56:33:fa:1a:29:65:
bf:db:cb:a5:00:65:5f:7d:cc:36:6a:c0:49:96:99:
ee:b9:32:78:d3:0a:6c:54:44:fb:c4:f3:44:3e:6e:
7b:d0:9a:9b:88:04:2d:b3:88:82:62:e8:88:76:c9:
53:54:22:51:7d:03:a0:5a:e4:ec:1f:36:c7:31:80:
d2:1f:f5:f6:9a:e7:dc:a8:2a:a6:41:fd:28:13:fb:
9d:8c:33:39:68:fd:88:a3:02:fa:6e:85:1a:45:5d:
ef:14:19:36:43:46:5e:7a:e3:68:72:00:f0:c6:a0:
5b:82:01:c1:c4:48:eb:19:86:a2:bc:7b:5a:80:a0:
43:36:6c:f3:8d:4b:eb:9a:7d:3b:ee:6b:e3:7d:33:
62:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:58:70:CE:80:52:9B:B8:68:19:69:BE:16:86:31:B8:DB:8D:A0:84
X509v3 Authority Key Identifier:
keyid:95:04:53:ED:48:5E:76:87:06:17:A0:E4:F4:67:51:44:C3:19:2C:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQRT7UhedocGF6Dk9GdRRMMZLLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4f:d0:df:5c:98:0c:6c:41:ee:61:a0:13:de:f6:20:53:66:
99:96:c6:17:1c:26:f9:55:9f:76:7d:cd:66:c0:0f:e1:79:68:
da:a7:15:0c:e1:54:d1:6e:50:20:e7:cb:cb:7a:08:93:98:8c:
0e:04:fc:7a:66:f6:44:3f:d5:04:f7:d6:3f:13:ab:ec:ff:73:
a9:43:3d:56:79:a5:98:8c:53:64:41:b1:f8:c3:d6:18:e6:18:
2c:56:e7:16:5a:c8:2c:d4:f2:30:f9:78:b2:42:00:69:69:8c:
3f:07:d8:75:6d:2d:c0:5c:04:c8:c7:a1:67:2f:6f:ab:01:b5:
fc:b9:0b:9b:da:b4:9a:20:bd:f5:d7:29:d0:7a:44:cb:16:8e:
f4:1b:d7:b7:bd:b0:23:d8:a7:52:29:10:95:fd:37:67:98:8a:
0e:15:46:12:ee:a8:df:bb:80:6b:a5:4f:aa:63:89:9d:0f:7f:
eb:2b:43:84:e2:4f:7d:f1:19:b2:5f:70:fc:a0:6c:9f:34:d4:
ce:fe:cc:1e:80:28:d4:fa:04:22:7e:5a:73:f6:66:a2:56:1e:
7f:7c:f1:25:23:52:74:3e:16:28:66:5c:ec:d9:34:c6:6b:ff:
8c:da:48:0c:8b:ea:3c:e3:2f:37:20:96:c2:80:4a:78:a3:65:
d1:e5:e5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:01:37 2026 by rpki-client