Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
File: LQSlVAgkJpvlwR8gEouGQUzVWUU.mft (raw, json)
Hash identifier: MP3xIRbIAx0rp5eHcu2aDX6n1CxsBG14obdTUHnXKu0=
Subject key identifier: 3F:67:A9:CA:71:B7:62:EF:38:DF:72:76:E7:AC:69:45:34:7C:7C:AE
Authority key identifier: 2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45
Certificate issuer: /CN=2d04a5540824269be5c11f20128b86414cd55945
Certificate serial: 019CB0C8BBE04E57C004570199154F55AE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
Manifest number: 0399
Signing time: Mon 02 Mar 2026 23:01:11 +0000
Manifest this update: Mon 02 Mar 2026 23:01:11 +0000
Manifest next update: Tue 03 Mar 2026 23:01:11 +0000
Files and hashes: 1: LQSlVAgkJpvlwR8gEouGQUzVWUU.crl (hash: +kg/KObljhgJXUXSA01+dlCkIkuGbPQfL8dSR2E/9jQ=)
2: mkoR_2Qj1P7ucMa0xTA2WyuYFT0.roa (hash: N937OZCdBilb1OADuX8QhLksdpQ9AoFfCxgf7tzf5mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:c8:bb:e0:4e:57:c0:04:57:01:99:15:4f:55:ae:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d04a5540824269be5c11f20128b86414cd55945
Validity
Not Before: Mar 2 23:01:11 2026 GMT
Not After : Mar 3 23:01:11 2026 GMT
Subject: CN=3f67a9ca71b762ef38df7276e7ac6945347c7cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6c:27:6d:32:47:73:00:40:74:e4:87:7d:01:
03:64:e6:01:eb:53:22:07:83:fc:6a:26:19:b9:84:
83:7b:7d:0c:fc:c9:eb:ca:7b:6e:d4:a8:ce:3a:8c:
54:ba:24:df:bd:54:89:98:ed:42:fa:94:2e:41:02:
4d:b8:1a:c5:ba:02:d7:b8:38:6b:3e:d5:5c:80:bc:
33:ad:7b:c5:d1:48:21:a7:fd:8e:11:1f:22:ba:31:
f3:2f:68:7c:7b:36:87:3f:79:52:c2:3c:0b:92:e0:
89:39:b9:92:94:ea:8b:c9:d7:f1:73:e5:3c:ad:09:
ed:6c:4c:58:24:0c:77:86:7f:1e:52:39:2f:97:0a:
3e:c4:0a:a5:be:fe:f5:7f:b4:b6:b3:e9:d4:9b:c4:
06:e4:1f:af:5f:9e:6d:39:e8:23:bd:26:81:16:6c:
a7:2c:03:69:49:88:1d:1a:f7:88:ca:6d:c4:a2:ec:
08:a1:b7:29:46:ee:3b:46:ea:09:09:e6:e2:75:92:
0c:f8:19:6d:2d:22:de:21:bc:71:ca:44:bb:14:99:
de:0a:28:d5:95:c3:20:56:e6:9d:76:f0:62:4b:0d:
c7:67:79:d6:90:f8:1d:b2:5d:1e:bb:f8:7d:f0:21:
7d:4e:3a:a3:a5:00:62:f1:6b:53:7c:dc:50:16:2e:
07:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:67:A9:CA:71:B7:62:EF:38:DF:72:76:E7:AC:69:45:34:7C:7C:AE
X509v3 Authority Key Identifier:
keyid:2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b1:32:97:bb:b4:33:56:fc:8d:17:85:02:03:5d:f7:55:a7:
45:12:7e:01:f8:d6:c3:38:ef:48:43:ef:92:69:f3:7b:4b:52:
77:8d:ae:2c:f7:2a:fc:2e:ad:5c:87:47:d4:77:3e:6a:6a:91:
8a:c6:5c:c8:f7:e3:91:61:fb:bb:78:0c:4e:98:9e:9e:25:00:
c7:0a:fb:b4:27:99:4d:d7:00:f0:a0:c2:14:e3:d2:b6:31:1a:
62:28:d8:24:c9:7f:7e:56:f4:94:c2:71:b2:32:c0:d4:e3:14:
d5:7a:18:01:fc:9a:dd:ea:dd:2e:f8:0f:90:24:07:bc:31:48:
bc:ac:2d:ee:6f:2b:95:b6:47:26:ad:02:a3:07:6f:be:86:83:
94:f1:55:ab:0e:a4:26:3e:60:56:68:99:9c:57:41:96:73:6b:
e4:da:96:57:07:eb:60:c1:d5:f6:cf:e2:ec:8e:1c:a4:0b:27:
cc:f1:93:da:50:99:d8:63:52:ca:19:31:d6:c7:e4:cb:96:e0:
6b:00:2e:0a:35:c0:1e:72:72:80:40:33:29:ed:ef:10:ce:51:
4e:c5:f2:f8:dd:d4:ec:50:92:9c:1f:2b:fc:fe:b8:e8:a7:37:
d0:63:c4:59:2e:d6:0d:3c:23:fd:41:c8:ce:56:4a:e9:30:bd:
d9:4f:64:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 06:10:19 2026 by rpki-client