Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
File: lqKMzDCRW1xzEoCowcpn_mAJVO4.mft (raw, json)
Hash identifier: +oj9Pe5+vChdnICz9aB6Y2Rj3RjzrjLdsNNhKBq7Jwo=
Subject key identifier: 9F:C9:2B:A9:A5:CE:03:D2:9C:97:D1:90:21:03:8C:CB:CB:D9:15:10
Authority key identifier: 96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
Certificate issuer: /CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Certificate serial: 019CAD598D3108FC32F69EB1B7CE0477EA0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
Manifest number: 08C3
Signing time: Mon 02 Mar 2026 07:00:52 +0000
Manifest this update: Mon 02 Mar 2026 07:00:52 +0000
Manifest next update: Tue 03 Mar 2026 07:00:52 +0000
Files and hashes: 1: lqKMzDCRW1xzEoCowcpn_mAJVO4.crl (hash: h396OHjjWMSEYgXouGbWEAHX2MjyeJ4lz/uzbXUgkUg=)
2: tpEzmPn6Emv4oxeWEF0eNzB9vks.roa (hash: lobNcn+6RzeUxnDnoUeGrIRglUEmt1L2WBn8rml/ud0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:8d:31:08:fc:32:f6:9e:b1:b7:ce:04:77:ea:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Validity
Not Before: Mar 2 07:00:52 2026 GMT
Not After : Mar 3 07:00:52 2026 GMT
Subject: CN=9fc92ba9a5ce03d29c97d19021038ccbcbd91510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:c6:65:00:69:2b:87:b8:3e:79:0d:74:a1:c6:
a8:17:e2:82:83:aa:db:08:74:6f:de:da:e4:4d:de:
af:45:3d:02:ef:80:8c:91:92:bd:38:11:01:eb:dd:
25:3f:8d:5c:3c:e1:f6:ff:db:5a:a9:92:02:81:66:
12:94:b9:a5:93:b6:a8:83:4b:01:3a:71:b1:ee:8e:
0a:34:62:4c:77:8e:e9:8e:b3:9e:ad:69:9c:af:52:
a5:c8:56:18:bf:93:42:5c:48:de:13:89:fc:8b:ea:
76:79:3a:54:75:98:aa:b9:3f:b1:27:6d:ae:9c:7e:
75:39:0d:ac:b9:32:8e:56:45:06:cd:1d:6a:69:7e:
de:31:60:c4:28:09:f7:13:77:08:b7:41:2a:aa:c4:
60:6d:f9:9d:72:06:15:fa:2e:cd:9f:2c:5d:84:12:
e7:cf:f9:d4:51:27:1f:de:91:00:47:2f:34:ff:77:
af:2d:76:64:0e:3c:22:b6:2f:ee:f7:b9:f3:b7:6e:
b3:4c:3d:2a:85:2d:4d:96:b3:8a:ea:f2:3d:ca:0c:
10:2a:fd:70:b8:c1:78:1f:0a:96:bf:b1:34:be:e2:
0b:5b:2f:ee:f7:28:34:cd:37:3d:c7:01:71:24:55:
67:91:fd:43:3d:26:c4:ec:01:ee:64:3f:04:23:56:
49:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C9:2B:A9:A5:CE:03:D2:9C:97:D1:90:21:03:8C:CB:CB:D9:15:10
X509v3 Authority Key Identifier:
keyid:96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b4:52:74:d8:c3:e8:c9:d0:32:90:94:da:f7:ec:9f:b0:22:
1a:4f:2e:0d:c5:37:f2:3c:9b:d8:e8:85:d2:c8:66:91:e5:b2:
5d:77:ed:5d:fe:d4:d8:45:d7:86:74:d7:41:06:5a:29:d7:8d:
0d:c5:97:7e:a2:a5:77:51:3d:7f:42:c9:d2:c7:91:53:73:bf:
6f:68:55:86:4e:7d:7e:d6:72:43:19:49:76:27:98:79:b6:66:
69:9e:9a:e4:23:b4:45:08:ee:2a:19:bc:4f:76:07:9c:67:da:
3b:e3:85:b6:ed:13:0d:72:2f:c7:32:c0:b3:50:0c:3d:29:1a:
e9:1f:0d:5d:e9:11:6b:73:66:ac:47:7e:b8:57:11:d6:05:13:
4a:18:9f:58:9e:7a:bd:ca:80:96:c8:7e:f4:52:f2:51:ba:41:
be:e6:c8:68:92:03:bc:43:93:23:37:0d:4b:c8:f6:36:c7:8b:
bd:0f:9c:38:c1:2a:bb:15:39:e8:76:7f:f6:a0:e7:22:e1:75:
30:e7:8d:0d:06:49:53:0c:ea:b7:3c:76:8f:95:af:ec:93:1f:
33:d7:51:b1:87:27:49:5f:8e:23:b8:2d:a4:ee:1f:70:71:99:
96:fc:48:5a:73:c0:bf:cd:4c:5f:24:84:42:55:ab:b8:86:85:
15:76:3e:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWY0xCPwy9p6xt84Ed+oKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YTI4Y2NjMzA5MTViNWM3MzEyODBhOGMxY2E2N2ZlNjAw
OTU0ZWUwHhcNMjYwMzAyMDcwMDUyWhcNMjYwMzAzMDcwMDUyWjAzMTEwLwYDVQQD
Eyg5ZmM5MmJhOWE1Y2UwM2QyOWM5N2QxOTAyMTAzOGNjYmNiZDkxNTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+8ZlAGkrh7g+eQ10ocaoF+KCg6rb
CHRv3trkTd6vRT0C74CMkZK9OBEB690lP41cPOH2/9taqZICgWYSlLmlk7aog0sB
OnGx7o4KNGJMd47pjrOerWmcr1KlyFYYv5NCXEjeE4n8i+p2eTpUdZiquT+xJ22u
nH51OQ2suTKOVkUGzR1qaX7eMWDEKAn3E3cIt0EqqsRgbfmdcgYV+i7NnyxdhBLn
z/nUUScf3pEARy80/3evLXZkDjwiti/u97nzt26zTD0qhS1NlrOK6vI9ygwQKv1w
uMF4HwqWv7E0vuILWy/u9yg0zTc9xwFxJFVnkf1DPSbE7AHuZD8EI1ZJYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/JK6mlzgPSnJfRkCEDjMvL2RUQMB8GA1UdIwQY
MBaAFJaijMwwkVtccxKAqMHKZ/5gCVTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHFLTXpEQ1JXMXh6RW9Db3djcG5fbUFKVk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82YTJhYTktMGVhMS00MGQ2LWI4YTct
NjUxYjcxN2Y4YTlhLzEvbHFLTXpEQ1JXMXh6RW9Db3djcG5fbUFKVk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82YTJhYTktMGVhMS00MGQ2LWI4YTctNjUxYjcxN2Y4YTlh
LzEvbHFLTXpEQ1JXMXh6RW9Db3djcG5fbUFKVk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo7RSdNjD
6MnQMpCU2vfsn7AiGk8uDcU38jyb2OiF0shmkeWyXXftXf7U2EXXhnTXQQZaKdeN
DcWXfqKld1E9f0LJ0seRU3O/b2hVhk59ftZyQxlJdieYebZmaZ6a5CO0RQjuKhm8
T3YHnGfaO+OFtu0TDXIvxzLAs1AMPSka6R8NXekRa3NmrEd+uFcR1gUTShifWJ56
vcqAlsh+9FLyUbpBvubIaJIDvEOTIzcNS8j2NseLvQ+cOMEquxU56HZ/9qDnIuF1
MOeNDQZJUwzqtzx2j5Wv7JMfM9dRsYcnSV+OI7gtpO4fcHGZlvxIWnPAv81MXySE
QlWruIaFFXY+rg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:46 2026 by rpki-client