Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
File: LQcZ69mnslPhSyXN7EzdFUoRHjA.mft (raw, json)
Hash identifier: VpNpSSvKuuaLV42sR4jlJrakrGuTyo9Ffm1k2NuI9J4=
Subject key identifier: 45:7B:7B:42:B6:84:EA:D9:9C:BE:AF:AF:F4:BA:9F:D9:4E:41:EC:44
Authority key identifier: 2D:07:19:EB:D9:A7:B2:53:E1:4B:25:CD:EC:4C:DD:15:4A:11:1E:30
Certificate issuer: /CN=2d0719ebd9a7b253e14b25cdec4cdd154a111e30
Certificate serial: 019CAA8F88A3F5E0A6FB3616B368F026BEFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
Manifest number: 04C9
Signing time: Sun 01 Mar 2026 18:00:59 +0000
Manifest this update: Sun 01 Mar 2026 18:00:59 +0000
Manifest next update: Mon 02 Mar 2026 18:00:59 +0000
Files and hashes: 1: LQcZ69mnslPhSyXN7EzdFUoRHjA.crl (hash: wyi8DaVFIUC3Vw0PqCfVkVhmgooGe/jJupCA7MRTL/Y=)
2: QY5IABNKSh9wzdwDFAlBjYGLgBY.roa (hash: DKFoMZra8knldwWf2JPXIqtTY/e0bpiT44EwSqV2A2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:88:a3:f5:e0:a6:fb:36:16:b3:68:f0:26:be:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0719ebd9a7b253e14b25cdec4cdd154a111e30
Validity
Not Before: Mar 1 18:00:59 2026 GMT
Not After : Mar 2 18:00:59 2026 GMT
Subject: CN=457b7b42b684ead99cbeafaff4ba9fd94e41ec44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:82:76:1e:b3:5d:3d:0f:ef:c5:c6:b3:25:7b:
7e:5b:43:ad:53:63:7d:0f:ff:55:ed:0f:bf:47:30:
49:04:58:ca:fc:ca:b6:df:e5:ab:7d:80:0d:65:c5:
f1:05:b6:6c:dc:80:26:e3:eb:56:40:40:5d:c7:64:
e9:31:21:6f:21:0d:4c:6b:0d:95:ba:58:e6:64:b6:
db:7b:81:ab:5c:3a:85:23:13:e9:b3:c1:ab:a4:73:
ba:17:5d:8f:06:ee:39:83:90:07:92:67:80:2f:18:
40:28:32:c1:dc:5e:7c:37:23:c7:cc:56:33:fd:28:
0a:e1:a6:75:d7:b0:80:f5:98:63:71:6b:a2:6f:15:
d3:ba:36:95:be:46:1b:1d:0b:01:8e:49:2f:ab:dc:
cb:d5:b9:4b:09:56:b5:51:c4:67:9c:99:5f:56:8e:
e5:a9:49:df:33:c2:c0:3f:66:88:c5:54:92:5e:a3:
5d:0c:df:82:4a:f4:a1:4e:82:27:3c:d4:76:81:6d:
df:4a:cc:51:f9:94:68:2f:48:0f:3b:9f:aa:2e:bf:
9a:fe:bd:b2:73:81:11:26:c6:8b:3b:a5:b2:d2:c7:
9f:dc:6c:cc:24:1f:ca:a3:6d:ab:52:8a:40:5e:4e:
d6:1c:21:8f:7d:78:ed:f0:bb:0e:c9:cf:88:0d:e8:
f5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7B:7B:42:B6:84:EA:D9:9C:BE:AF:AF:F4:BA:9F:D9:4E:41:EC:44
X509v3 Authority Key Identifier:
keyid:2D:07:19:EB:D9:A7:B2:53:E1:4B:25:CD:EC:4C:DD:15:4A:11:1E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:72:01:24:7d:0d:31:5b:6b:0b:06:ef:a6:16:93:8f:a9:e5:
ec:e7:ea:ea:33:87:ec:62:49:66:a3:f2:9e:21:dc:3d:60:d7:
43:31:e3:03:eb:58:f6:5c:3f:77:f4:30:58:0f:61:db:3e:2e:
67:0a:fe:1e:20:b8:e3:05:fc:fe:6d:cf:04:e7:a1:b5:a6:18:
b4:ff:67:b4:44:d6:0e:a0:7f:73:be:b4:e1:77:6b:66:7d:ae:
12:36:c6:60:56:29:ef:f7:21:e7:70:72:3a:cb:95:f2:7d:61:
aa:04:df:06:95:0e:14:3c:2f:6f:d8:6b:49:eb:eb:bc:d2:dc:
f2:2d:96:40:0f:3c:3c:42:4e:4c:af:e3:53:b1:3a:cd:dc:28:
5a:22:ce:ad:bc:2b:fc:46:4a:9c:95:aa:7b:67:32:f9:04:53:
82:db:d1:ea:53:f7:a3:f5:48:d3:10:e3:a6:52:75:dd:1c:e6:
f4:f0:82:5a:22:6d:9a:d6:3d:eb:33:11:9b:fa:9c:6f:02:d3:
0f:b9:e4:04:3f:b4:35:ab:ae:cf:3e:e1:6c:37:88:16:a1:c3:
5e:2a:f5:6a:22:00:b0:8b:c8:6e:0a:b2:0d:c1:a4:12:d9:3c:
b9:3b:dd:09:76:66:b4:7f:fa:38:08:67:3b:9d:64:50:4a:cd:
ae:4e:81:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:41 2026 by rpki-client