Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
File: lo-QT-7x95FiuCGaikg7hY9UC_o.mft (raw, json)
Hash identifier: 213C9V0ZpRMOVHE+5XBoR0I4WidpB/2tEEBWjmo48h8=
Subject key identifier: 23:CA:07:06:23:2B:2F:10:BD:1C:66:F1:62:8E:3F:89:A4:B9:BD:A1
Authority key identifier: 96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA
Certificate issuer: /CN=968f904feef1f79162b8219a8a483b858f540bfa
Certificate serial: 019D2AE13E8C9A4EB5EA3B1AE2DFDDA916FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 16:01:37 +0000
Manifest this update: Thu 26 Mar 2026 16:01:37 +0000
Manifest next update: Fri 27 Mar 2026 16:01:37 +0000
Files and hashes: 1: lo-QT-7x95FiuCGaikg7hY9UC_o.crl (hash: 4qnpqtR3IzfWmX3AcFBdIz7MMIOjF/9sFQ79idTTF30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:3e:8c:9a:4e:b5:ea:3b:1a:e2:df:dd:a9:16:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968f904feef1f79162b8219a8a483b858f540bfa
Validity
Not Before: Mar 26 16:01:37 2026 GMT
Not After : Mar 27 16:01:37 2026 GMT
Subject: CN=23ca0706232b2f10bd1c66f1628e3f89a4b9bda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6b:c8:9d:37:46:07:a9:46:1a:92:ff:7d:b9:
6b:4c:bb:05:8f:ca:44:ab:88:af:74:36:0a:2f:5b:
00:82:3b:81:53:34:87:49:8e:e0:51:b3:cb:27:f7:
92:0d:11:01:82:d8:20:53:6e:bb:d8:ae:16:32:ea:
5e:dd:c7:e2:4f:22:d8:2a:f9:69:19:7a:d0:6e:0d:
a2:93:12:cc:a5:a3:ed:53:7c:6b:f9:df:0b:3f:b5:
3a:aa:d6:65:84:ba:69:70:eb:63:c8:48:04:ae:7a:
e6:c6:b7:fd:cc:00:cf:ca:cb:c8:b9:15:c1:a6:6a:
83:d9:60:e4:2f:2c:9a:fc:30:91:9b:63:08:7f:ed:
9c:20:3b:a1:4e:9f:e6:d3:ab:f8:83:36:c7:97:4c:
86:f8:cd:c7:d0:16:27:36:d0:1b:d0:f3:30:ed:2b:
4f:fd:6f:0a:4b:b3:fe:1c:4b:4a:b2:a1:da:80:e7:
8b:7f:0d:48:47:82:18:83:13:0a:1a:00:65:aa:ac:
95:a8:25:9a:30:bd:5c:f6:9b:6a:dd:2e:b7:80:d4:
ef:b5:ea:63:69:76:fa:51:ef:e6:b3:3b:c7:9a:68:
ea:49:d0:4d:1e:db:80:04:b1:49:96:d0:51:c3:95:
c5:d5:b9:ba:8d:f0:59:64:85:67:0c:7e:ec:54:39:
d0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CA:07:06:23:2B:2F:10:BD:1C:66:F1:62:8E:3F:89:A4:B9:BD:A1
X509v3 Authority Key Identifier:
keyid:96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:bd:53:ff:f8:2a:5f:6f:50:1b:3d:0b:6a:6f:f9:c1:ef:f7:
9f:74:ef:b1:2c:01:73:7e:19:ce:be:91:8f:8b:a9:6e:1d:d8:
ce:11:cd:21:11:dd:f6:2b:7d:4d:a5:f7:59:a8:14:1a:a9:5d:
db:c3:3c:66:9a:ce:43:d4:ea:6d:3e:2b:58:e9:c1:83:b3:eb:
9d:f2:62:60:b0:27:46:74:5e:f0:8f:26:72:9e:05:d7:58:7b:
d7:20:dd:ae:fd:20:61:2b:e5:0e:27:ed:44:55:5a:22:9f:67:
b9:1f:4e:ed:f9:50:23:ca:3c:16:fc:0e:d5:cb:f7:f3:31:b7:
af:4e:89:3e:6f:b3:88:d8:73:6a:9f:ac:23:1d:b4:09:93:93:
51:a4:42:df:90:d0:31:e7:06:07:3c:3b:ab:d6:45:21:55:65:
da:d9:22:b6:7b:f1:2c:5d:9d:41:ca:85:e4:e1:e8:e6:98:3a:
60:14:cc:f5:79:c7:c6:8f:15:fe:5c:ad:ac:bf:c8:f9:dd:b7:
a3:33:bc:9b:69:26:fa:7f:de:17:3b:fc:3a:69:00:e7:8e:ef:
a6:81:65:10:60:8a:cc:aa:41:65:ca:be:da:aa:51:9a:20:1b:
75:a7:21:9e:ab:d8:ec:b8:52:d5:d9:cd:3a:33:62:c4:df:77:
ca:2f:9b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:33:58 2026 by rpki-client