Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
File: lQCCqFlGcix_wchk8PvYDcVNzSk.mft (raw, json)
Hash identifier: HTDV4E3Fz0p0Yy5aOmIP51EzAPvVap9p4J1oE6vWaSo=
Subject key identifier: 0D:63:FE:BA:42:8D:FB:D3:15:6F:81:A5:8C:C8:51:89:EF:09:9E:1E
Authority key identifier: 95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
Certificate issuer: /CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Certificate serial: 019D27A8C679866FCAB8A62F979D38379B02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
Manifest number: 0AC7
Signing time: Thu 26 Mar 2026 01:01:05 +0000
Manifest this update: Thu 26 Mar 2026 01:01:05 +0000
Manifest next update: Fri 27 Mar 2026 01:01:05 +0000
Files and hashes: 1: 6Q3hJK7l5gtN_Lr_bBxFEB7LRps.roa (hash: iw8Ogmc/LXNOPuyk5RisCNNGw5P8+o4St4o7kNLdmFM=)
2: UcrjdhQUtMyXZBZ14yoz47DP1KQ.roa (hash: pwlq/+c8DXzCaRg9hbORmAoeOdAKmI0H3fOLHE09GyY=)
3: lQCCqFlGcix_wchk8PvYDcVNzSk.crl (hash: Zv9zUA6tzUehOeQgnUSGF2HoSLYxEYppHMXgOdy60bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c6:79:86:6f:ca:b8:a6:2f:97:9d:38:37:9b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Validity
Not Before: Mar 26 01:01:05 2026 GMT
Not After : Mar 27 01:01:05 2026 GMT
Subject: CN=0d63feba428dfbd3156f81a58cc85189ef099e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b2:28:8b:e7:0a:00:b1:44:aa:a3:7f:53:62:
fa:44:eb:ef:42:c4:70:75:2c:80:f7:7d:48:3a:94:
70:5b:0a:7f:a4:07:03:e7:18:64:4b:c9:11:cc:eb:
b3:fe:a7:7d:22:d1:27:81:48:5a:84:fc:2f:41:28:
b2:28:43:fd:29:73:44:b1:c2:af:28:6d:6d:3d:b6:
53:d7:b1:0d:df:40:d3:ad:21:91:1f:57:da:fb:7d:
fa:3a:7a:c7:16:ac:ad:ec:73:d6:cc:9d:ee:7c:83:
2b:28:53:40:8f:34:6f:06:e3:e6:5d:9a:ce:5b:95:
73:f9:c7:51:cb:c1:45:06:93:34:88:33:f9:a4:67:
cb:bb:e2:32:74:33:7b:17:5a:20:d9:56:6a:34:74:
e2:ea:f3:f3:91:37:e4:b6:84:c8:0d:88:fc:b7:72:
cc:02:f5:05:34:9f:aa:9f:84:ea:48:d4:4a:8d:72:
75:f9:4b:d2:50:17:80:bb:f1:ba:14:19:8e:ae:57:
49:4b:eb:ff:c8:a6:55:80:94:56:b3:e8:14:3a:71:
ac:03:9c:34:71:d1:87:33:2a:45:24:3b:7b:7a:19:
f1:55:98:50:76:f6:66:21:dc:de:98:35:0c:4a:23:
7d:48:a6:65:f7:dd:82:f8:e1:57:29:f0:63:5e:a6:
b9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:63:FE:BA:42:8D:FB:D3:15:6F:81:A5:8C:C8:51:89:EF:09:9E:1E
X509v3 Authority Key Identifier:
keyid:95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:53:16:85:9c:df:b7:d5:8d:c4:d2:b1:6b:f0:b1:74:55:0c:
21:49:88:18:70:c3:20:65:99:a3:4e:86:c8:76:53:c6:31:9b:
62:52:09:4b:8f:82:f3:59:59:0f:ea:39:4a:c7:ba:64:76:b6:
5a:34:b4:40:e2:1f:5f:fc:9e:b4:fb:1e:01:6a:58:e6:7a:e9:
54:51:7e:ba:08:dc:47:00:bc:04:16:65:4e:d9:56:9f:7a:50:
30:2e:21:95:b6:11:9a:43:11:1a:74:ff:f0:54:54:aa:39:78:
95:31:62:59:b1:fb:1e:b8:03:56:b3:9d:48:c9:7b:30:7d:6e:
57:05:3c:bc:6e:71:e5:9b:2d:93:fc:ce:c1:cb:f7:19:dd:9c:
72:7d:41:e5:af:16:46:b6:48:8e:f3:dd:4a:1f:0d:eb:1e:96:
2a:4d:ff:34:d7:72:19:7c:5b:3d:21:55:8c:a7:39:95:7a:c8:
6a:7f:a8:1d:7c:cb:2f:44:7b:e1:c4:bc:1a:53:16:ed:29:b3:
ce:d5:f3:09:5c:4c:f0:20:b1:d5:e7:e8:c6:22:e8:21:d3:20:
7d:73:2e:b5:f6:05:78:90:8f:03:f2:f1:db:41:37:57:08:50:
ba:e6:12:49:b1:13:35:e0:6f:86:7f:e6:96:f8:f2:d8:6f:ed:
28:ea:57:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:09 2026 by rpki-client