
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
File: lQRT7UhedocGF6Dk9GdRRMMZLLI.mft (raw, json)
Hash identifier: iiN6GzD4A3LRpamRpmZGlXA3g32jDb6Xk41bl4MTMJ0=
Subject key identifier: 18:2F:27:3C:E4:12:5D:0F:9A:4F:55:44:E8:FD:9B:4C:18:DA:28:91
Authority key identifier: 95:04:53:ED:48:5E:76:87:06:17:A0:E4:F4:67:51:44:C3:19:2C:B2
Certificate issuer: /CN=950453ed485e76870617a0e4f4675144c3192cb2
Certificate serial: 01A0D3B89DAE0B4C268479C021ADA3EEAF52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQRT7UhedocGF6Dk9GdRRMMZLLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
Manifest number: 0171
Signing time: Thu 24 Sep 2026 14:01:26 +0000
Manifest this update: Thu 24 Sep 2026 14:01:26 +0000
Manifest next update: Fri 25 Sep 2026 14:01:26 +0000
Files and hashes: 1: Z4ZoaORQua51KCRsVg2IUhoDAXo.roa (hash: NCkzuayiCIk++QJTY6wsrqBuJEYrBZjGt9dXQEIDPoM=)
2: lQRT7UhedocGF6Dk9GdRRMMZLLI.crl (hash: 18AMWLegPVD7jdzc+Uu1fQ/pYirRylyxfRmdOeypXbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQRT7UhedocGF6Dk9GdRRMMZLLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:9d:ae:0b:4c:26:84:79:c0:21:ad:a3:ee:af:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950453ed485e76870617a0e4f4675144c3192cb2
Validity
Not Before: Sep 24 14:01:26 2026 GMT
Not After : Sep 25 14:01:26 2026 GMT
Subject: CN=182f273ce4125d0f9a4f5544e8fd9b4c18da2891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:25:26:84:b9:cc:e6:5b:df:49:9e:a8:42:
4b:e4:17:1a:fc:6d:c4:bb:ce:65:e7:24:6f:73:75:
ab:ba:d0:ec:e9:38:8e:dc:55:f2:8e:30:da:76:44:
58:59:6d:4a:1a:5d:75:93:6b:35:6f:9f:83:9c:90:
b7:3d:d1:51:bb:97:a3:ff:10:2d:ed:8e:28:63:f1:
ba:a0:6e:0a:d7:cd:c1:87:12:e1:fa:97:4a:8a:cd:
c3:02:7b:99:da:17:2c:33:72:5f:9d:83:d5:45:1d:
2e:92:f7:e2:2e:e1:c0:de:f2:9c:26:ad:dc:25:7a:
94:bc:41:04:fd:13:42:73:c4:14:79:01:5c:66:e2:
1d:21:27:9c:a3:86:23:25:d7:d4:0d:71:ba:57:03:
dc:d3:f2:d5:da:8b:51:72:fb:fc:08:53:11:78:4b:
02:ff:02:14:39:a4:e7:67:dd:2c:db:37:3d:4b:79:
a4:10:77:60:08:ce:f8:52:ac:1b:7e:56:80:fd:df:
69:87:1b:9a:d5:c5:be:10:8e:7c:97:c7:bd:35:4d:
35:14:94:7e:01:25:f8:b4:3c:23:7f:fc:3b:bd:c5:
38:6e:74:22:f3:14:33:42:4a:d7:5b:30:10:ba:3b:
ad:b1:f2:8b:14:ce:e9:4b:6b:72:6d:fc:34:c8:81:
16:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2F:27:3C:E4:12:5D:0F:9A:4F:55:44:E8:FD:9B:4C:18:DA:28:91
X509v3 Authority Key Identifier:
keyid:95:04:53:ED:48:5E:76:87:06:17:A0:E4:F4:67:51:44:C3:19:2C:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQRT7UhedocGF6Dk9GdRRMMZLLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:65:48:25:8e:09:64:3f:30:bf:54:bf:34:51:c0:1e:59:34:
b7:28:1e:af:7d:31:72:bb:ef:79:91:cb:5d:33:10:04:47:1d:
c6:29:80:d2:24:c7:2a:bf:f7:ff:0e:df:33:79:73:2b:c5:ed:
8e:fd:b4:e5:71:d4:58:cb:1a:8c:57:f2:c0:79:8e:4f:26:ad:
3c:4f:84:86:f1:76:22:e2:dd:16:08:13:48:f0:bf:ff:6f:7f:
f8:43:f4:b8:2f:be:2a:66:73:ed:c7:90:9d:ff:e8:26:38:23:
49:ec:d2:ee:d1:59:e3:a8:4b:0a:50:68:c4:ff:c6:28:0a:43:
9a:03:cc:cb:bc:d8:ca:b2:0d:99:67:c0:6e:89:c2:c5:d0:01:
56:ca:6e:d2:ca:5b:a1:38:47:59:3f:30:b1:83:50:0f:27:ce:
51:c9:30:de:2b:1f:54:ec:04:fb:66:00:05:cc:14:da:57:8b:
6a:74:31:47:6e:a5:5e:10:48:9b:1c:18:5e:cd:4f:fc:b7:01:
13:d9:d2:2b:4a:94:bc:7a:0f:58:4d:59:b2:4a:3e:b9:39:a6:
50:90:b2:4b:46:2e:5c:df:99:1a:a3:ce:7c:fc:14:b9:94:d0:
f0:bd:f3:f4:e4:24:c2:12:8a:f8:38:db:8b:12:46:fc:77:3b:
33:e9:1c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:27:54 2026 by rpki-client