Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.mft
File: lqOP7q6QPbyyj_kzPgQ15-lIi0s.mft (raw, json)
Hash identifier: FC1XCGWCFgi7ycHnHMvoF3zIBEJIXnzuWMtkpCy/4HE=
Subject key identifier: EF:E1:39:E8:E8:20:96:63:44:E3:8A:1D:66:8F:9D:09:2C:39:B8:66
Authority key identifier: 96:A3:8F:EE:AE:90:3D:BC:B2:8F:F9:33:3E:04:35:E7:E9:48:8B:4B
Certificate issuer: /CN=96a38feeae903dbcb28ff9333e0435e7e9488b4b
Certificate serial: 01A0EB1BE78279B489FFDC48B0E3D8EDDB01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqOP7q6QPbyyj_kzPgQ15-lIi0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.mft
Manifest number: F3
Signing time: Tue 29 Sep 2026 03:01:09 +0000
Manifest this update: Tue 29 Sep 2026 03:01:09 +0000
Manifest next update: Wed 30 Sep 2026 03:01:09 +0000
Files and hashes: 1: ItN4mW12iVyH6BrYFKfPQy7lr08.roa (hash: /6ILhaZ9nnrQCe2x3LhpJcOwVGQyxXtUIIDXznVVDPA=)
2: lqOP7q6QPbyyj_kzPgQ15-lIi0s.crl (hash: WerDrsBPxzkjpFpRoPlXxNB48SGW/nDTajxghejayUg=)
3: qSB-Fr5on66jEvQLa_-E0yx5agQ.roa (hash: /d6onL0LuXW1jRb8TBZIzkovZYA/Bhrij6W7usA00vo=)
4: yR4cNbVarjz8LFgC6lYaD_f6Y4M.roa (hash: QiANg/lT9BhVA0Gyjnvg/6FNpwOrRHBchB0Jd5cbcxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqOP7q6QPbyyj_kzPgQ15-lIi0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1b:e7:82:79:b4:89:ff:dc:48:b0:e3:d8:ed:db:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a38feeae903dbcb28ff9333e0435e7e9488b4b
Validity
Not Before: Sep 29 03:01:09 2026 GMT
Not After : Sep 30 03:01:09 2026 GMT
Subject: CN=efe139e8e820966344e38a1d668f9d092c39b866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c7:09:21:f6:67:e1:9c:37:fe:12:e4:83:e4:
c9:04:21:02:15:ed:cf:fd:c4:4c:4b:2d:62:3c:d0:
e3:bb:34:44:92:e1:49:c6:95:a6:28:0c:15:f1:6a:
1f:d4:4d:35:2f:fa:f5:71:bd:f6:77:f2:26:00:34:
a9:b0:b1:42:92:07:5b:1e:e5:42:74:ef:76:7b:70:
78:7c:19:84:0f:8d:00:63:58:18:e1:e5:cd:1c:3c:
e5:c7:6e:a5:a9:8c:27:d2:f6:68:17:f1:2f:30:7f:
b5:53:7f:db:47:3f:2b:ef:77:c4:d0:71:f6:81:e9:
4d:c6:b2:20:af:c7:b9:8f:72:ce:7e:dc:56:4c:6d:
4c:88:11:e3:4f:55:b0:24:de:a2:3c:5f:24:16:b1:
f4:26:32:12:61:d0:4e:71:8e:f1:2d:48:0b:2e:30:
60:6a:f4:87:de:2a:e6:e5:e5:14:e4:36:37:17:25:
a0:3d:f1:f8:61:08:14:8f:80:0c:03:13:0e:a3:9e:
94:1f:2f:ea:6a:9c:b2:f7:d3:4b:31:50:e2:c8:07:
ae:ff:dd:8c:87:46:ba:89:ac:bf:fe:63:1b:c8:ec:
7c:9e:1d:49:44:3b:40:f0:3c:79:b8:72:80:06:91:
bc:d8:d5:eb:52:00:d0:6b:2e:53:51:86:e8:79:36:
8b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E1:39:E8:E8:20:96:63:44:E3:8A:1D:66:8F:9D:09:2C:39:B8:66
X509v3 Authority Key Identifier:
keyid:96:A3:8F:EE:AE:90:3D:BC:B2:8F:F9:33:3E:04:35:E7:E9:48:8B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqOP7q6QPbyyj_kzPgQ15-lIi0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:8a:fd:04:bc:26:1c:bc:7d:c7:75:51:63:75:bf:ac:a6:4d:
f6:71:a2:08:ec:66:6f:75:7c:c9:56:a2:3b:58:c1:84:c3:1d:
05:bc:84:f6:23:31:ad:75:05:09:c4:fd:4d:3f:97:df:c6:3e:
67:ee:c8:f5:f3:1a:d3:86:8b:92:d0:25:67:be:61:ed:48:e9:
96:1a:6e:d8:a4:fc:ae:10:b3:b6:4b:36:75:20:bb:7a:ed:7e:
8f:32:7e:5b:1e:aa:ff:7e:fc:78:f8:d0:39:fb:8f:d9:a8:77:
59:fa:54:7e:4b:ba:0f:d6:f3:13:05:e3:97:80:ee:3e:3a:13:
ac:89:f6:76:1f:6d:ef:71:d8:57:54:78:cc:bc:11:b4:af:f0:
1a:b5:2b:f9:d8:75:77:af:92:4c:a9:b8:d6:c3:7f:f0:f0:1d:
cb:f7:72:81:43:1b:f3:3d:8d:32:58:24:a5:92:e1:0f:a9:7e:
e4:cd:e0:76:0a:f4:46:74:24:7e:f9:8e:46:c5:28:63:6e:c3:
e6:9f:8c:c4:5d:13:9b:0c:31:4e:01:00:3f:94:98:76:ee:8e:
c4:6d:04:ae:0a:75:1f:87:56:09:6f:01:48:af:bd:a3:32:7a:
6f:b6:14:4d:e0:a0:de:e5:bb:a1:78:45:11:c7:77:cb:de:7d:
ee:d3:b7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 14:49:41 2026 by rpki-client