Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
File: lQRT7UhedocGF6Dk9GdRRMMZLLI.mft (raw, json)
Hash identifier: XEMLUrSwgL028k4RW6R/WFfU/TsH2S6/IG/1P0ziUSk=
Subject key identifier: 11:5B:1A:B0:5B:85:89:D0:06:D1:DF:85:FD:44:9D:50:F0:A6:63:0D
Authority key identifier: 95:04:53:ED:48:5E:76:87:06:17:A0:E4:F4:67:51:44:C3:19:2C:B2
Certificate issuer: /CN=950453ed485e76870617a0e4f4675144c3192cb2
Certificate serial: 019F932448F92AA4DB4E07AFE4EE90F60539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQRT7UhedocGF6Dk9GdRRMMZLLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
Manifest number: CB
Signing time: Fri 24 Jul 2026 08:00:56 +0000
Manifest this update: Fri 24 Jul 2026 08:00:56 +0000
Manifest next update: Sat 25 Jul 2026 08:00:56 +0000
Files and hashes: 1: Z4ZoaORQua51KCRsVg2IUhoDAXo.roa (hash: NCkzuayiCIk++QJTY6wsrqBuJEYrBZjGt9dXQEIDPoM=)
2: lQRT7UhedocGF6Dk9GdRRMMZLLI.crl (hash: J7aB4JZM9uWcTXYbLgEz8VCeGftnZmXrSSiCxgAsNzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQRT7UhedocGF6Dk9GdRRMMZLLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:48:f9:2a:a4:db:4e:07:af:e4:ee:90:f6:05:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950453ed485e76870617a0e4f4675144c3192cb2
Validity
Not Before: Jul 24 08:00:56 2026 GMT
Not After : Jul 25 08:00:56 2026 GMT
Subject: CN=115b1ab05b8589d006d1df85fd449d50f0a6630d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:6d:2e:1e:4f:c5:e7:1b:7e:cd:cf:4c:53:
8d:7c:91:f8:cc:b4:97:4b:a2:b8:dc:85:9f:25:3a:
19:e5:3a:30:b4:90:16:fa:60:77:db:90:b1:85:be:
41:db:1f:0a:6f:06:6c:51:41:7a:3d:e8:7b:99:59:
43:00:18:84:11:93:ea:3c:99:38:36:eb:9c:58:7d:
4e:75:fa:53:ac:94:ed:9d:5f:6b:09:0d:da:cd:6a:
73:55:1f:f0:63:61:6b:f2:1c:04:98:bd:0a:99:23:
1c:1b:a2:c1:02:fa:4a:cd:df:d3:54:7c:1c:24:b6:
89:6c:92:ab:64:84:c5:82:e0:a2:bf:32:ae:71:f9:
61:d7:3b:ca:4b:c3:62:a4:48:7b:11:c7:c6:b4:8c:
e2:ef:20:39:df:76:bd:8b:d2:d6:e3:97:58:35:d5:
c8:d6:fb:32:df:20:24:10:ab:0f:1e:14:2c:9f:7f:
40:96:dc:3f:28:eb:fe:45:0c:93:90:fe:e5:4f:94:
4d:bf:c6:31:d5:1a:82:96:f4:69:2b:91:64:70:44:
b2:20:b5:9e:e5:e9:07:bc:02:e3:0e:80:02:e7:c2:
9f:cb:e9:51:4b:3a:62:89:2d:3f:ab:de:59:88:0a:
74:3f:64:94:6a:24:96:7f:51:89:9b:37:b1:59:fe:
d1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5B:1A:B0:5B:85:89:D0:06:D1:DF:85:FD:44:9D:50:F0:A6:63:0D
X509v3 Authority Key Identifier:
keyid:95:04:53:ED:48:5E:76:87:06:17:A0:E4:F4:67:51:44:C3:19:2C:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQRT7UhedocGF6Dk9GdRRMMZLLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ad:27:58:2e:3d:59:af:64:76:28:8c:9c:e9:93:05:96:2e:
c2:3e:b0:6d:3a:b6:c3:e3:c3:6e:b2:df:97:2d:a3:bc:1a:c9:
46:43:6d:66:9a:f4:02:bd:7e:d3:99:1e:51:60:21:0e:4c:ac:
0b:61:78:e5:ca:c5:34:57:ee:7b:7d:bf:66:69:41:99:11:3c:
7c:1e:63:b3:74:94:7f:91:18:7c:f3:a2:5f:02:21:81:c5:bf:
10:13:28:dd:06:a1:38:90:e1:9a:39:0c:64:7d:3e:b7:6a:a9:
6e:e7:91:42:47:5f:e2:da:a9:0c:12:7c:45:f8:0d:a7:1a:ed:
3b:08:60:e7:05:0d:8b:05:8a:59:ac:bd:a1:8c:b1:bb:17:93:
aa:9d:e3:70:e6:be:eb:0d:a8:28:35:d6:c1:98:f9:e0:0e:6b:
9f:63:be:5a:eb:22:b7:94:b2:14:82:91:06:c2:15:86:1c:0a:
ec:d7:75:7a:c6:f6:e7:c9:7f:07:8d:02:11:54:a3:7b:24:79:
3f:56:38:ce:49:f2:67:0e:a6:93:44:c8:3c:ce:dc:ec:76:ea:
51:cd:97:4c:96:08:10:33:3e:77:99:a1:cd:1c:c2:2e:d6:8f:
f1:41:87:35:58:8b:0c:d8:b2:2d:ab:af:83:85:b4:9b:a6:8c:
20:2c:6b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:57:17 2026 by rpki-client