Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
File: lqKMzDCRW1xzEoCowcpn_mAJVO4.mft (raw, json)
Hash identifier: MHlztwOJv5c2E1cVUy7HBjk4baRIglLXFxJxKsAnVLw=
Subject key identifier: EB:DE:70:A5:72:D3:D4:AA:92:4B:53:BB:4A:AD:F4:27:71:7D:5B:CE
Authority key identifier: 96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
Certificate issuer: /CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Certificate serial: 019D9AE27FB6441710BA836EAB02DCE5047C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
Manifest number: 093E
Signing time: Fri 17 Apr 2026 10:00:28 +0000
Manifest this update: Fri 17 Apr 2026 10:00:28 +0000
Manifest next update: Sat 18 Apr 2026 10:00:28 +0000
Files and hashes: 1: lqKMzDCRW1xzEoCowcpn_mAJVO4.crl (hash: WHp7dSWE7AAdyQE1v/Z2E3Fq3y04sDY90E2dBlt6ea8=)
2: tpEzmPn6Emv4oxeWEF0eNzB9vks.roa (hash: lobNcn+6RzeUxnDnoUeGrIRglUEmt1L2WBn8rml/ud0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:7f:b6:44:17:10:ba:83:6e:ab:02:dc:e5:04:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Validity
Not Before: Apr 17 10:00:28 2026 GMT
Not After : Apr 18 10:00:28 2026 GMT
Subject: CN=ebde70a572d3d4aa924b53bb4aadf427717d5bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:87:f0:65:16:94:1b:41:cb:6a:1d:d7:ae:37:
47:01:bf:5b:51:45:c3:e2:b0:a1:c6:2c:e5:2c:53:
67:00:16:99:03:b5:48:37:a5:ce:d5:ab:b1:55:ae:
af:fa:25:b8:51:4c:9d:d0:f7:00:d5:53:22:89:26:
41:75:c2:47:5c:e1:6e:5d:1e:bf:bb:ed:ba:b6:1a:
d2:41:b1:f5:01:33:2e:35:cf:32:ce:1f:49:e8:e8:
8a:5e:77:83:5c:7f:20:e2:b4:75:71:f5:8d:2c:2a:
ca:d5:c1:5c:15:c5:6a:29:f3:6d:38:d9:a6:c7:0c:
99:22:b9:a8:69:3c:47:ef:1f:5c:d5:33:ad:c9:a5:
30:c6:d6:96:8d:f4:c4:d3:bb:c5:e1:b5:c9:04:78:
ed:84:41:ca:b4:ef:a2:ee:50:78:43:57:24:d6:ed:
13:01:f2:41:45:47:4e:46:b5:40:9c:a8:20:b1:11:
be:2d:8f:19:26:c4:30:88:5c:87:79:02:af:3b:5e:
0c:56:53:ac:23:b0:85:48:41:a3:7a:5c:b8:df:b9:
58:cc:42:b4:b7:33:b4:47:8a:6a:75:8f:23:97:16:
57:07:c9:8e:df:20:9d:ac:1c:b2:ee:be:fe:4c:93:
08:db:86:db:cb:ff:af:e9:67:33:9e:aa:ab:02:3a:
e5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DE:70:A5:72:D3:D4:AA:92:4B:53:BB:4A:AD:F4:27:71:7D:5B:CE
X509v3 Authority Key Identifier:
keyid:96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:57:3f:5f:ef:4f:44:73:5f:ce:4b:4b:3e:40:e5:29:7c:7d:
af:89:60:12:17:ec:25:28:01:16:aa:ae:54:14:8c:ce:fa:00:
91:3e:24:40:13:27:53:30:4f:b1:b2:37:82:e4:f7:71:ab:84:
06:73:0b:92:40:e5:d3:05:98:76:e3:fc:05:db:be:f3:d3:8e:
e2:4b:59:0d:23:ea:75:5b:ae:a3:ac:e9:2c:d4:42:f8:99:4c:
db:a2:e5:56:30:3e:9e:09:7c:a5:fe:e5:53:7d:b4:8d:c8:96:
7a:1a:93:44:b4:5a:45:29:c6:a9:7f:18:91:81:e9:d3:5e:15:
2c:5f:b5:af:fe:eb:73:c9:04:c1:f8:be:66:8a:3e:8a:06:b2:
6d:9f:04:f8:a5:2f:a4:1a:c1:5e:81:4e:23:25:6e:ab:13:ad:
e8:bd:8a:bd:f4:e7:15:48:e9:40:25:c2:99:9e:5e:1b:bd:1b:
a0:be:f3:30:24:a7:90:4c:ab:15:d1:e2:fd:37:ae:42:46:5e:
d2:39:61:64:a9:6a:64:53:1e:8c:4d:f2:70:18:75:15:e9:6d:
d4:6d:69:d7:60:20:d2:a4:c1:d5:13:ab:dd:42:5d:89:26:c3:
ed:e8:df:1d:3a:70:e4:29:dd:f5:5c:e8:56:2a:02:d8:8f:60:
09:b6:82:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:39:23 2026 by rpki-client