Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
File: lQCCqFlGcix_wchk8PvYDcVNzSk.mft (raw, json)
Hash identifier: K12jHOHypys9JRV7pes1+1f4e81BlaoIdmqpl8W0o6E=
Subject key identifier: 04:62:31:D6:8E:B2:58:DF:61:EB:E1:0C:EA:EE:28:38:69:8C:F8:83
Authority key identifier: 95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
Certificate issuer: /CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Certificate serial: 019E1CEBE3F99F376B58ED2A1865E73E012E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
Manifest number: 0B46
Signing time: Tue 12 May 2026 16:01:21 +0000
Manifest this update: Tue 12 May 2026 16:01:21 +0000
Manifest next update: Wed 13 May 2026 16:01:21 +0000
Files and hashes: 1: 6Q3hJK7l5gtN_Lr_bBxFEB7LRps.roa (hash: iw8Ogmc/LXNOPuyk5RisCNNGw5P8+o4St4o7kNLdmFM=)
2: UcrjdhQUtMyXZBZ14yoz47DP1KQ.roa (hash: pwlq/+c8DXzCaRg9hbORmAoeOdAKmI0H3fOLHE09GyY=)
3: lQCCqFlGcix_wchk8PvYDcVNzSk.crl (hash: HV5K/uvch/hBGDG2e4c+MRcOzOqBncprHmMZX8E5ftg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:e3:f9:9f:37:6b:58:ed:2a:18:65:e7:3e:01:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Validity
Not Before: May 12 16:01:21 2026 GMT
Not After : May 13 16:01:21 2026 GMT
Subject: CN=046231d68eb258df61ebe10ceaee2838698cf883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:d1:7c:79:6e:e8:3a:8b:b8:93:a6:32:ca:
32:e7:7d:b0:08:5d:a1:02:a7:f6:cd:04:f8:30:55:
4e:ae:8c:f6:02:f6:30:ab:d6:cd:f2:fa:20:a3:a4:
6b:02:ca:77:2c:d3:cf:35:b0:85:05:23:72:74:d5:
c5:56:4f:7e:8f:00:81:a9:e2:83:8f:50:91:1e:e6:
e5:6c:24:c6:4a:5a:4a:f2:e7:4e:b3:97:c0:a4:33:
d7:e6:77:62:11:11:d0:98:8a:06:0a:09:15:3e:07:
7f:dd:ba:5f:c6:59:0f:92:0a:ee:94:15:cd:63:df:
d2:92:ae:30:16:80:32:9d:56:87:aa:ce:8e:cf:09:
77:c3:07:08:e2:64:8a:e6:9f:79:38:31:60:49:63:
91:9b:6d:6f:f5:ec:5c:2a:d6:6c:6b:71:20:e2:75:
43:8e:7a:eb:88:90:4d:9e:f2:cd:d0:97:11:89:e4:
8d:fc:c6:90:3b:1a:a5:35:b4:5b:81:10:98:3f:c5:
56:eb:8b:ed:e2:eb:77:e4:48:20:c4:a1:c8:19:b9:
fe:78:45:d9:8c:54:72:3e:69:3f:a6:5b:4f:5d:5c:
5c:e3:ca:42:ce:b9:25:e3:b0:5e:c8:15:d0:fb:db:
78:6b:05:8e:69:47:c2:c0:a6:85:3a:51:4b:63:26:
c0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:62:31:D6:8E:B2:58:DF:61:EB:E1:0C:EA:EE:28:38:69:8C:F8:83
X509v3 Authority Key Identifier:
keyid:95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:bf:33:43:76:28:52:99:e2:d2:6b:fb:93:67:a8:0a:bb:42:
af:a7:05:1c:5a:b1:d0:7e:ec:66:32:b9:95:6a:6f:6a:62:80:
bc:c7:da:21:1c:97:14:1d:0d:20:59:e5:2f:b2:ea:bc:88:36:
b6:cd:f9:f4:09:88:8e:13:18:70:13:69:1e:19:7e:cd:28:c1:
f3:ea:4e:99:04:19:58:ad:c9:93:1f:b3:db:74:d9:aa:e5:6b:
6b:b4:bc:c5:cc:89:60:6c:dc:4f:6b:5c:9f:75:8d:3e:84:66:
3e:88:79:f5:38:02:53:93:ef:7e:7a:56:86:39:a6:a0:68:97:
bb:da:77:bf:e0:6d:3b:0c:e4:01:4f:13:ff:5c:14:c7:d4:ae:
d0:c5:8d:9b:64:9f:76:8e:3d:de:ce:76:5b:c0:ac:3e:cb:aa:
9a:f0:fa:e7:ab:05:c1:a7:93:5c:a8:8d:16:68:e3:5d:bf:ea:
e9:ec:7f:85:b8:ea:88:d8:6a:43:b3:8c:96:4d:11:24:6b:68:
59:18:27:f2:2f:b7:c1:7e:53:ee:14:95:fe:e7:b4:a2:99:08:
2d:96:de:4d:6f:eb:9b:a3:8e:b1:ec:a5:4a:04:da:76:68:95:
dc:2f:fa:57:dc:fd:b7:c3:67:0d:82:e2:ae:12:b9:c8:0e:4a:
a2:0f:cb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:40:49 2026 by rpki-client