Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
File: lQCCqFlGcix_wchk8PvYDcVNzSk.mft (raw, json)
Hash identifier: nw7DiJzgCmms56935iL2p5e8eJqNzpfxMVlz4T/vYzI=
Subject key identifier: 66:43:A5:56:48:F4:E1:94:FC:28:7D:81:F2:A1:7E:3F:B3:F0:49:8B
Authority key identifier: 95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
Certificate issuer: /CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Certificate serial: 019F93927FEBC55590CA8D904375C8F64C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
Manifest number: 0C08
Signing time: Fri 24 Jul 2026 10:01:19 +0000
Manifest this update: Fri 24 Jul 2026 10:01:19 +0000
Manifest next update: Sat 25 Jul 2026 10:01:19 +0000
Files and hashes: 1: 6Q3hJK7l5gtN_Lr_bBxFEB7LRps.roa (hash: iw8Ogmc/LXNOPuyk5RisCNNGw5P8+o4St4o7kNLdmFM=)
2: UcrjdhQUtMyXZBZ14yoz47DP1KQ.roa (hash: pwlq/+c8DXzCaRg9hbORmAoeOdAKmI0H3fOLHE09GyY=)
3: lQCCqFlGcix_wchk8PvYDcVNzSk.crl (hash: fx68EXV5OLSBdEoyBW8nppN2IRP1bE61AF32zHg+fWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:7f:eb:c5:55:90:ca:8d:90:43:75:c8:f6:4c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Validity
Not Before: Jul 24 10:01:19 2026 GMT
Not After : Jul 25 10:01:19 2026 GMT
Subject: CN=6643a55648f4e194fc287d81f2a17e3fb3f0498b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4d:32:ee:83:f2:2a:c7:41:c4:6f:d2:e2:81:
11:9a:6f:e8:42:dd:3a:74:60:c7:cd:22:54:85:a3:
0a:bb:62:97:96:9f:77:d2:83:26:c1:d2:e0:15:7a:
0b:e3:34:d4:00:b5:fb:48:3d:b1:37:4b:07:a2:6a:
20:73:1c:5b:49:5e:5c:24:a9:be:31:e3:e2:8b:83:
23:7c:92:8c:ab:f6:65:a0:da:d3:53:49:29:b3:b5:
39:81:6a:4b:59:88:2b:0b:7d:a5:a2:f1:3e:fb:90:
e3:28:ed:b2:cc:17:0d:56:4a:c5:00:9c:db:e3:7f:
64:a9:73:a0:0a:40:72:7d:32:e1:e7:d0:4c:51:63:
80:e3:2d:81:cb:00:27:3c:eb:df:06:cc:7d:93:2c:
cd:d1:8c:4e:be:3e:90:05:a4:85:0c:38:c1:e8:1c:
f9:9c:79:f3:47:e3:bd:d6:49:61:bd:2a:e9:04:f7:
dc:8b:ec:19:db:a4:bb:9b:95:e7:09:dc:7e:79:97:
bd:c5:25:06:27:e6:d6:de:7d:60:17:87:b2:69:f4:
ab:f7:09:c0:1f:90:31:49:2f:d7:b0:87:6e:9c:7b:
15:aa:c7:dd:41:98:ab:6d:58:9c:6b:77:14:3a:e9:
10:ca:99:8d:b2:64:c9:37:7f:50:0f:be:3e:92:a2:
ce:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:43:A5:56:48:F4:E1:94:FC:28:7D:81:F2:A1:7E:3F:B3:F0:49:8B
X509v3 Authority Key Identifier:
keyid:95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ee:1b:ff:8e:04:34:c2:7c:05:73:33:5e:a6:04:4c:56:b9:
10:8f:d6:57:0c:de:46:f6:f0:3c:a8:48:b1:09:10:9c:1f:95:
d6:3d:6a:cc:82:03:29:dd:e7:ff:59:4c:01:7f:68:32:20:26:
c0:4f:71:50:e3:2d:41:83:1c:81:00:9d:45:29:b8:bf:c3:87:
a6:5e:d9:60:4f:bc:bc:5e:f3:ce:11:50:05:26:17:12:8f:c0:
c5:51:5e:48:8d:e5:0c:2a:ac:41:ca:45:33:d2:da:73:14:21:
3e:9d:da:0f:f7:60:61:04:d6:95:ac:90:e8:d8:df:be:4b:6a:
c0:4b:6f:c5:01:2a:cb:62:22:e4:78:ca:66:bf:97:35:73:5c:
13:03:6f:07:70:33:76:b6:a0:b4:a2:13:f9:48:2e:ba:5c:f7:
f7:d6:ee:5b:f4:a2:39:47:03:ff:16:c1:db:78:b2:aa:2f:db:
bb:a2:5e:1b:e5:80:c5:19:d4:d2:08:c1:b1:b8:5c:f4:c0:6c:
8c:e0:56:d2:18:5c:fa:ab:0d:d7:88:6c:a7:8b:7c:95:37:df:
b7:fa:50:8e:c1:7f:b8:aa:9e:3d:2a:37:47:d2:fb:cc:f0:58:
c4:ea:c9:b5:39:6f:c8:28:a0:84:e3:1d:05:f8:f2:88:1e:05:
c8:7c:6a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:19:06 2026 by rpki-client