
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.mft
File: lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.mft (raw, json)
Hash identifier: twQWWD8wxLKnpAeefH7Xk3PxUsQTzfilP7V/ZQIZTjk=
Subject key identifier: 01:C0:F3:27:BF:F0:EE:82:F7:A6:B1:49:8C:5B:F9:C1:02:0D:C7:2F
Authority key identifier: 95:0D:7F:3C:8F:1F:E0:11:C0:92:1A:BD:AD:C3:55:04:7D:32:DC:59
Certificate issuer: /CN=950d7f3c8f1fe011c0921abdadc355047d32dc59
Certificate serial: 019FACAD3D0E9484C66E4F722759B74C8ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.mft
Manifest number: 55
Signing time: Wed 29 Jul 2026 07:01:02 +0000
Manifest this update: Wed 29 Jul 2026 07:01:02 +0000
Manifest next update: Thu 30 Jul 2026 07:01:02 +0000
Files and hashes: 1: WlZHaK6cwmsSNYmxvN2mo3I2-mo.roa (hash: gNHxdcU+ZZjds1fvfGvkBhqPhdBcauHdFZB1oUleTSo=)
2: lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.crl (hash: sYliuOVIKCtUQdmX7dl4x1KBQ2DdcO56IlInYwydpks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:3d:0e:94:84:c6:6e:4f:72:27:59:b7:4c:8a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950d7f3c8f1fe011c0921abdadc355047d32dc59
Validity
Not Before: Jul 29 07:01:02 2026 GMT
Not After : Jul 30 07:01:02 2026 GMT
Subject: CN=01c0f327bff0ee82f7a6b1498c5bf9c1020dc72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:63:30:d8:bc:09:15:59:e9:e1:86:26:87:
19:70:6d:d5:96:6a:2e:3e:91:a2:7f:99:f2:df:19:
af:7e:d2:f8:40:24:cf:b0:4b:ce:ca:df:9c:b9:f0:
72:54:00:8a:fc:3e:09:12:3d:bb:ac:92:07:99:fd:
ca:f6:0a:ee:cb:dc:4a:9c:df:e7:a0:3c:4b:c4:b3:
99:10:79:22:8f:14:cb:29:d7:60:56:8c:bf:a5:53:
61:01:cc:e6:10:2d:a5:f9:ca:37:15:a1:4e:97:df:
c7:66:46:8f:24:a0:eb:da:a2:d9:fe:cf:a8:a7:e4:
f2:e1:f2:c6:d3:a8:80:a8:49:6a:ec:fe:76:12:81:
27:79:ae:81:0b:d2:71:b2:60:6e:3a:f5:5e:b8:6b:
9e:4f:02:ae:80:23:3d:d9:3e:24:21:21:cc:ba:80:
f1:fd:a2:70:e5:17:95:0d:94:41:ac:20:43:c7:f0:
78:aa:dd:50:ff:96:f9:c1:18:5f:70:f8:1b:80:41:
c9:52:15:2b:73:89:90:0c:d5:da:8b:e0:6f:bc:85:
7c:05:04:27:4d:62:7e:ee:de:6a:3a:09:2e:9f:ab:
8b:6e:48:b3:28:00:60:43:1c:48:4a:2c:f7:8e:ed:
b4:21:ae:0c:38:14:97:60:4c:9b:c1:c6:b6:9d:7a:
2a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C0:F3:27:BF:F0:EE:82:F7:A6:B1:49:8C:5B:F9:C1:02:0D:C7:2F
X509v3 Authority Key Identifier:
keyid:95:0D:7F:3C:8F:1F:E0:11:C0:92:1A:BD:AD:C3:55:04:7D:32:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:cc:2f:d9:21:3e:a9:c9:3d:24:7c:f2:f6:00:ff:cb:29:df:
f5:b0:4d:66:12:66:16:12:e1:e5:c5:bd:a3:63:3e:a3:b1:c1:
2b:e5:36:dc:4c:eb:30:1e:14:c6:b1:33:66:97:15:41:81:fb:
de:cb:c5:84:54:ff:ca:ac:2a:b3:50:8c:c3:c0:3c:a1:ad:b8:
96:78:f1:db:f4:63:ad:38:d0:a4:0a:92:fd:7d:03:64:c1:9d:
79:f7:61:8c:12:de:28:49:7d:47:c1:ef:36:21:27:3e:d1:d9:
60:d2:4c:c9:d4:1e:ea:5c:cc:81:db:00:e0:d8:0a:ac:d1:d8:
ab:2f:9f:5f:1f:8d:d4:a4:30:b5:89:ca:bb:db:ce:da:17:8d:
c0:bb:de:c9:65:3e:19:43:06:a5:14:85:18:1f:1c:3e:4d:69:
94:a5:9f:90:50:46:80:35:df:76:05:a9:e8:13:aa:0e:7f:35:
ed:31:7a:93:ce:92:85:5e:d6:52:1c:b3:4c:b0:68:bd:70:80:
9a:e3:f9:d5:95:7e:41:39:6d:70:22:d4:cc:3d:49:ff:46:66:
ed:00:06:6c:4f:ab:0e:0a:12:e4:40:eb:00:ff:a2:09:f7:af:
bf:f0:d5:e9:69:2f:4e:9a:06:9b:0b:97:ae:bb:f0:fb:51:10:
ed:62:13:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:19:16 2026 by rpki-client