Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/LQ6xYWGbmZrS7TEVYHN02-X09Yk.mft
File: LQ6xYWGbmZrS7TEVYHN02-X09Yk.mft (raw, json)
Hash identifier: D86eG2sgydYd/Y8Lq+RNQu+F618i0JWEdjtSRWj9WKs=
Subject key identifier: 59:FF:28:15:20:5B:82:A4:11:4C:B5:8C:14:0D:65:91:31:33:D8:F9
Authority key identifier: 2D:0E:B1:61:61:9B:99:9A:D2:ED:31:15:60:73:74:DB:E5:F4:F5:89
Certificate issuer: /CN=2d0eb161619b999ad2ed3115607374dbe5f4f589
Certificate serial: 01A13290757FC1DFC5979763ED5CAEB3F4E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ6xYWGbmZrS7TEVYHN02-X09Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/LQ6xYWGbmZrS7TEVYHN02-X09Yk.mft
Manifest number: 0118
Signing time: Tue 13 Oct 2026 00:01:30 +0000
Manifest this update: Tue 13 Oct 2026 00:01:30 +0000
Manifest next update: Wed 14 Oct 2026 00:01:30 +0000
Files and hashes: 1: ELrx4Q17sWsITam7S8EZhlEpW6c.roa (hash: mfENEikBBj3SnmLqMx+zV5kIHlMvuGZwjX1HrALHXH0=)
2: LQ6xYWGbmZrS7TEVYHN02-X09Yk.crl (hash: Z2OUmcXdZDs9hmA+qmsC9xRca84ZTEQhmfiJC+2WAIQ=)
3: mJqKOIkFyoOYp1GMyp0ruDBB97k.roa (hash: scvnlkEX/qiRygLnLE6KpQY7LUS1CDurNLQjTw5koJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/LQ6xYWGbmZrS7TEVYHN02-X09Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/LQ6xYWGbmZrS7TEVYHN02-X09Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ6xYWGbmZrS7TEVYHN02-X09Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:90:75:7f:c1:df:c5:97:97:63:ed:5c:ae:b3:f4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0eb161619b999ad2ed3115607374dbe5f4f589
Validity
Not Before: Oct 13 00:01:30 2026 GMT
Not After : Oct 14 00:01:30 2026 GMT
Subject: CN=59ff2815205b82a4114cb58c140d65913133d8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4a:14:a3:11:a8:a6:20:9a:fa:94:1c:45:c0:
38:7c:5b:dc:5d:c8:41:e8:4c:86:df:cd:9a:43:e0:
80:25:33:72:8e:1b:11:99:40:9e:2e:fa:76:c8:cc:
60:8b:11:34:c7:ac:d2:52:e6:95:73:61:d4:34:2b:
2c:04:be:c0:8b:2d:18:bf:50:3a:e2:be:a2:0f:b7:
5f:5b:71:05:38:1b:50:d4:13:4c:67:a2:97:c8:5f:
76:fd:45:3b:f2:67:8f:fd:f2:f3:63:1b:ad:5b:f3:
cc:23:6f:d7:89:6a:bd:90:80:23:83:84:c3:4f:8b:
64:01:fb:29:d7:73:bc:48:c7:23:46:e0:dd:6f:af:
fd:a7:c7:00:45:da:42:5f:43:cd:07:c1:d3:4d:41:
b3:1a:a8:75:e5:0d:c4:06:53:fd:2b:89:08:1e:fd:
20:d0:d8:1d:ac:ac:a6:79:e1:4c:f8:d5:16:9e:56:
c1:2d:74:4b:88:53:87:fe:e2:32:9b:a0:f8:0e:ff:
be:3b:e8:bb:13:a4:08:bd:94:bc:99:33:74:24:35:
91:1c:e1:90:09:33:dd:42:47:ad:aa:6c:a9:2c:54:
1a:94:78:b0:8e:ea:ca:35:c2:d3:1f:a5:e9:ff:c3:
60:10:b2:c9:00:3a:6c:99:d0:40:a3:b3:dc:8a:d7:
c7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FF:28:15:20:5B:82:A4:11:4C:B5:8C:14:0D:65:91:31:33:D8:F9
X509v3 Authority Key Identifier:
keyid:2D:0E:B1:61:61:9B:99:9A:D2:ED:31:15:60:73:74:DB:E5:F4:F5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ6xYWGbmZrS7TEVYHN02-X09Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/LQ6xYWGbmZrS7TEVYHN02-X09Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/LQ6xYWGbmZrS7TEVYHN02-X09Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2c:38:a0:df:f5:24:f2:81:c0:dd:2c:1d:8f:b6:14:d2:13:
42:5e:34:8a:d7:57:73:46:51:13:67:d0:41:cc:a2:6e:7a:58:
b0:41:92:0e:f3:ac:6f:3a:78:df:2c:66:dd:7d:6b:e0:31:c7:
3b:01:3f:4d:41:be:dc:a2:6c:a7:74:63:da:fc:c4:70:04:75:
5d:f2:98:a4:82:8d:2e:98:08:ee:e4:44:cf:c6:6f:ff:b9:53:
c1:86:61:b3:aa:ee:61:7d:22:2d:8c:cb:75:50:0f:45:32:6d:
2c:a7:1c:d6:df:b2:10:3e:4b:52:0c:43:af:a4:5c:10:7e:a7:
99:07:95:e6:99:b8:ee:a2:b3:03:fb:36:54:65:b5:11:66:d3:
dc:66:cb:32:6e:ea:d5:a4:3e:89:a2:07:23:0b:2a:fa:b8:16:
94:07:26:9d:89:9f:d2:fb:83:00:10:3f:1b:bf:aa:44:ba:ee:
b6:db:d2:5e:89:a1:bd:f3:7e:9d:c3:85:38:c1:44:ab:ca:75:
9d:97:68:e0:29:28:67:3d:de:9d:58:03:90:79:58:67:dd:87:
8f:aa:cf:11:27:dc:07:17:83:06:36:e5:95:11:75:ab:b3:a7:
2c:72:98:c0:cf:e0:ea:30:0c:e2:85:19:70:f9:cf:c2:34:ec:
a3:b1:f9:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEykHV/wd/Fl5dj7Vyus/TlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMGViMTYxNjE5Yjk5OWFkMmVkMzExNTYwNzM3NGRiZTVm
NGY1ODkwHhcNMjYxMDEzMDAwMTMwWhcNMjYxMDE0MDAwMTMwWjAzMTEwLwYDVQQD
Eyg1OWZmMjgxNTIwNWI4MmE0MTE0Y2I1OGMxNDBkNjU5MTMxMzNkOGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UoUoxGopiCa+pQcRcA4fFvcXchB
6EyG382aQ+CAJTNyjhsRmUCeLvp2yMxgixE0x6zSUuaVc2HUNCssBL7Aiy0Yv1A6
4r6iD7dfW3EFOBtQ1BNMZ6KXyF92/UU78meP/fLzYxutW/PMI2/XiWq9kIAjg4TD
T4tkAfsp13O8SMcjRuDdb6/9p8cARdpCX0PNB8HTTUGzGqh15Q3EBlP9K4kIHv0g
0NgdrKymeeFM+NUWnlbBLXRLiFOH/uIym6D4Dv++O+i7E6QIvZS8mTN0JDWRHOGQ
CTPdQketqmypLFQalHiwjurKNcLTH6Xp/8NgELLJADpsmdBAo7PcitfHRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFn/KBUgW4KkEUy1jBQNZZExM9j5MB8GA1UdIwQY
MBaAFC0OsWFhm5ma0u0xFWBzdNvl9PWJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFE2eFlXR2JtWnJTN1RFVllITjAyLVgwOVlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jMzM5ZGQtNDQzZi00YmE5LWE5NTkt
NjZkYjI1ZTE5OTBjLzEvTFE2eFlXR2JtWnJTN1RFVllITjAyLVgwOVlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9jMzM5ZGQtNDQzZi00YmE5LWE5NTktNjZkYjI1ZTE5OTBj
LzEvTFE2eFlXR2JtWnJTN1RFVllITjAyLVgwOVlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMiw4oN/1
JPKBwN0sHY+2FNITQl40itdXc0ZRE2fQQcyibnpYsEGSDvOsbzp43yxm3X1r4DHH
OwE/TUG+3KJsp3Rj2vzEcAR1XfKYpIKNLpgI7uREz8Zv/7lTwYZhs6ruYX0iLYzL
dVAPRTJtLKcc1t+yED5LUgxDr6RcEH6nmQeV5pm47qKzA/s2VGW1EWbT3GbLMm7q
1aQ+iaIHIwsq+rgWlAcmnYmf0vuDABA/G7+qRLruttvSXomhvfN+ncOFOMFEq8p1
nZdo4CkoZz3enVgDkHlYZ92Hj6rPESfcBxeDBjbllRF1q7OnLHKYwM/g6jAM4oUZ
cPnPwjTso7H58A==
-----END CERTIFICATE-----
Generated at Tue Oct 13 04:31:29 2026 by rpki-client