Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
File: dLQqbeTgH8MSUNG74yIoEEbuYao.mft (raw, json)
Hash identifier: ltv36RBmzXRUDp/Qp0DzCFd0W17KDcX1eF/Kiexr8ZI=
Subject key identifier: 6D:57:CE:21:1D:B0:25:37:29:C8:46:FF:FC:3E:C2:94:CE:6D:55:55
Authority key identifier: 74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
Certificate issuer: /CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Certificate serial: 019CAC469214A6BA1C99344219684086DDCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
Manifest number: 12EA
Signing time: Mon 02 Mar 2026 02:00:31 +0000
Manifest this update: Mon 02 Mar 2026 02:00:31 +0000
Manifest next update: Tue 03 Mar 2026 02:00:31 +0000
Files and hashes: 1: 2snz2cHxMIqDrmWpyQdj5PDHUMA.roa (hash: PDvyyYGhi1AmhDsFwKXgGPleS0592sAJ/29+42mhJtU=)
2: ck9fph3pnGBfD51d6ySumkAZbWw.roa (hash: cePM5hzSAL7gxgiyzP8i8tA4JspwG2EEsvqQZVUTIU0=)
3: dLQqbeTgH8MSUNG74yIoEEbuYao.crl (hash: md5zLwx+YQHnx+05nozmKyhOiRz9uIJQD0UFyxh3YDw=)
4: zsYC7eTs7CKxZQzMiKBYtW02NU4.roa (hash: zfsiqu/7VESSfUyUGFpkJ4f5HeLFmZSKqmckIw2soSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:92:14:a6:ba:1c:99:34:42:19:68:40:86:dd:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Validity
Not Before: Mar 2 02:00:31 2026 GMT
Not After : Mar 3 02:00:31 2026 GMT
Subject: CN=6d57ce211db0253729c846fffc3ec294ce6d5555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:07:d2:76:b9:cc:7a:a7:9e:f2:64:af:0d:
36:da:ba:1f:6f:6b:ab:61:2a:8e:36:79:b9:63:34:
75:4c:c9:9d:32:ec:de:34:2a:80:5b:f1:6c:78:97:
0a:d2:6a:bf:c5:46:41:6b:b3:55:69:3a:ec:87:d5:
5c:fb:23:01:5f:5c:d1:1d:02:95:13:93:f7:66:36:
f9:93:20:28:e0:81:db:f9:48:e3:a1:6f:d9:42:d8:
62:5d:02:ff:27:dd:d4:8e:a7:44:00:89:79:07:95:
45:bc:3a:30:37:ac:bf:ad:66:ea:99:ef:39:c1:78:
a0:ae:22:3e:f2:36:5a:36:87:92:56:a3:54:5a:ca:
8e:da:4b:74:55:92:82:2f:85:c3:28:e2:e5:d0:3f:
51:e1:29:8c:33:5c:19:cb:d6:be:ce:bb:a2:2a:7e:
e8:e5:12:ba:44:61:30:37:04:f5:5a:91:49:15:82:
96:0c:0e:d0:b9:f3:fc:83:64:35:15:a7:66:5e:ac:
58:a0:f2:bb:a7:50:f3:50:61:34:71:9a:a7:9b:73:
fd:dd:9f:71:8b:6a:b1:45:58:7c:c8:b6:f7:18:ed:
5f:42:38:68:ba:30:76:9f:ac:d1:c0:52:bb:72:b2:
8d:47:d6:f1:43:49:1d:4a:21:d9:ae:45:4c:b4:22:
86:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:57:CE:21:1D:B0:25:37:29:C8:46:FF:FC:3E:C2:94:CE:6D:55:55
X509v3 Authority Key Identifier:
keyid:74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d3:20:b9:5c:77:4a:d3:ec:45:47:a5:cc:87:59:73:fa:7f:
d0:11:9d:1a:9d:9b:05:e5:1c:64:c8:2a:06:5e:0a:ce:1e:44:
9c:b0:4a:5a:92:dd:ac:d1:c5:42:ad:f6:64:2b:d3:20:5d:63:
6d:f3:ec:2b:f3:4f:cb:e8:e4:7f:50:4c:98:8a:59:13:15:62:
05:99:6f:b0:3e:57:5e:34:37:be:d4:4b:1d:9d:1b:76:83:d1:
e6:9b:a5:34:61:8c:f8:55:9d:42:45:81:7d:15:0d:5b:11:00:
cd:23:eb:d9:7f:17:12:15:1d:26:3e:b6:d7:b7:45:59:f3:66:
45:12:6d:47:82:58:ef:04:18:6f:31:81:e8:92:2c:3e:f3:1d:
7a:cd:d9:97:68:4b:9f:bd:60:ff:bc:23:1c:e9:da:9d:aa:a5:
25:de:5f:d0:9d:5c:bd:78:d3:e3:22:21:cd:0b:34:22:e0:66:
9a:1f:e2:e8:f1:e1:4f:f4:12:05:7c:0b:b6:f5:7a:7e:d0:c5:
0c:12:e6:3b:ff:71:29:27:2e:5d:3e:7a:f4:b0:b1:1a:2f:45:
99:06:9d:a5:05:1e:36:60:23:11:b9:19:1d:5c:4c:2d:fa:30:
83:8e:2b:7c:7f:b9:0a:30:e7:41:92:11:66:1d:dc:03:04:58:
84:5c:64:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRpIUprocmTRCGWhAht3MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YjQyYTZkZTRlMDFmYzMxMjUwZDFiYmUzMjIyODEwNDZl
ZTYxYWEwHhcNMjYwMzAyMDIwMDMxWhcNMjYwMzAzMDIwMDMxWjAzMTEwLwYDVQQD
Eyg2ZDU3Y2UyMTFkYjAyNTM3MjljODQ2ZmZmYzNlYzI5NGNlNmQ1NTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdoH0na5zHqnnvJkrw022rofb2ur
YSqONnm5YzR1TMmdMuzeNCqAW/FseJcK0mq/xUZBa7NVaTrsh9Vc+yMBX1zRHQKV
E5P3Zjb5kyAo4IHb+UjjoW/ZQthiXQL/J93UjqdEAIl5B5VFvDowN6y/rWbqme85
wXigriI+8jZaNoeSVqNUWsqO2kt0VZKCL4XDKOLl0D9R4SmMM1wZy9a+zruiKn7o
5RK6RGEwNwT1WpFJFYKWDA7QufP8g2Q1FadmXqxYoPK7p1DzUGE0cZqnm3P93Z9x
i2qxRVh8yLb3GO1fQjhoujB2n6zRwFK7crKNR9bxQ0kdSiHZrkVMtCKGMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1XziEdsCU3KchG//w+wpTObVVVMB8GA1UdIwQY
MBaAFHS0Km3k4B/DElDRu+MiKBBG7mGqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9lNTU1NmMtY2ZlYS00OTcyLWFhZjgt
MTdhMWRjZGNjNmUwLzEvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9lNTU1NmMtY2ZlYS00OTcyLWFhZjgtMTdhMWRjZGNjNmUw
LzEvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArdMguVx3
StPsRUelzIdZc/p/0BGdGp2bBeUcZMgqBl4Kzh5EnLBKWpLdrNHFQq32ZCvTIF1j
bfPsK/NPy+jkf1BMmIpZExViBZlvsD5XXjQ3vtRLHZ0bdoPR5pulNGGM+FWdQkWB
fRUNWxEAzSPr2X8XEhUdJj6217dFWfNmRRJtR4JY7wQYbzGB6JIsPvMdes3Zl2hL
n71g/7wjHOnanaqlJd5f0J1cvXjT4yIhzQs0IuBmmh/i6PHhT/QSBXwLtvV6ftDF
DBLmO/9xKScuXT569LCxGi9FmQadpQUeNmAjEbkZHVxMLfowg44rfH+5CjDnQZIR
Zh3cAwRYhFxkCQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:17 2026 by rpki-client