Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
File: lqSbOF03Of3SQ34K798iUc1dKlE.mft (raw, json)
Hash identifier: AhwBOltE/1Or8i2CjxUKmGHt8VxNuu+URdalNJKv+/0=
Subject key identifier: B5:6F:A8:BC:7D:7D:ED:81:63:20:38:53:41:9C:CF:C9:4B:6E:68:1F
Authority key identifier: 96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51
Certificate issuer: /CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51
Certificate serial: 019CACB4CC850884ABC1032CE1C39ABD67CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
Manifest number: 0489
Signing time: Mon 02 Mar 2026 04:00:55 +0000
Manifest this update: Mon 02 Mar 2026 04:00:55 +0000
Manifest next update: Tue 03 Mar 2026 04:00:55 +0000
Files and hashes: 1: lqSbOF03Of3SQ34K798iUc1dKlE.crl (hash: hx1aGTTgmT3ULeyK0vE6B2cDmytpiloEgaTLJEy0Z6s=)
2: r7dmA6Cimt2y9DxwybhrZ8RQGZI.roa (hash: gakrlzuzHNIrUEQPTssrms796la3N/RETBOOb2DRmlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:cc:85:08:84:ab:c1:03:2c:e1:c3:9a:bd:67:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51
Validity
Not Before: Mar 2 04:00:55 2026 GMT
Not After : Mar 3 04:00:55 2026 GMT
Subject: CN=b56fa8bc7d7ded8163203853419ccfc94b6e681f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c4:51:b3:9e:60:ef:91:9b:a9:4f:fd:5e:f4:
11:37:ec:23:d3:80:0b:66:dd:2e:67:02:89:4d:35:
c2:e8:63:01:d2:00:26:f5:06:4b:cf:3b:b2:40:03:
d8:d2:e0:e2:44:2d:15:75:90:74:71:7a:da:a4:ae:
6b:c2:21:e9:d6:00:d0:08:9a:72:e6:9b:b2:e9:98:
22:c8:0c:97:f7:ca:6c:24:42:bb:56:af:4a:c8:a5:
96:a5:ba:55:34:ad:ee:19:35:a6:b8:5b:4d:09:63:
8f:06:c2:1b:6b:03:5c:4d:c3:df:3b:8c:64:6a:62:
91:e1:06:7e:e4:1a:26:ea:76:25:80:a0:c8:db:62:
21:d5:4c:93:9c:1e:b8:c8:07:5f:2d:8e:79:e3:a1:
89:d9:ef:47:2b:21:0d:9d:ca:7d:6b:b9:75:e8:c0:
8a:d1:4b:51:d0:28:58:a4:b0:2b:9e:94:e6:2d:83:
46:5b:b6:78:df:e6:62:9b:6b:23:97:57:65:e9:98:
18:ec:d7:f1:71:13:7e:b1:be:98:a6:75:f4:cd:35:
e8:b1:e9:8c:b3:05:f3:00:63:65:ef:6c:4f:e7:db:
ac:69:72:32:27:1b:80:27:7f:ec:35:7c:c6:1f:02:
60:b1:1b:4d:57:6d:8f:27:27:fa:9b:c9:9d:0f:c1:
c0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6F:A8:BC:7D:7D:ED:81:63:20:38:53:41:9C:CF:C9:4B:6E:68:1F
X509v3 Authority Key Identifier:
keyid:96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c0:fa:89:93:9d:56:7c:56:fa:13:77:08:7e:00:d1:3b:a3:
d9:95:b9:bf:6d:21:c4:aa:1f:e5:14:9d:9d:fb:23:00:fc:c7:
ba:a1:6c:4e:88:49:2c:8b:50:d6:a3:b0:a6:73:ee:14:09:01:
1d:46:93:1a:6e:04:c7:68:a1:cb:4b:cc:dc:d5:94:cf:04:5d:
20:72:50:0b:aa:7c:64:1a:0f:3d:2f:78:46:b7:05:78:7b:6e:
91:3f:87:30:1e:5e:af:0e:98:07:8a:01:60:ce:a5:f3:69:f8:
4e:e9:87:b7:6d:a8:e0:13:19:b9:e9:1b:cd:16:52:22:04:f5:
61:7d:2a:62:e1:71:93:9e:74:18:c8:32:cb:80:54:4b:90:78:
8c:45:80:fc:47:d2:a1:22:af:01:cd:ad:c0:26:e5:02:d8:cc:
d7:76:41:2b:b5:f2:bc:34:94:4c:fd:85:98:64:8f:fd:00:f7:
70:53:12:85:c9:11:8e:97:e4:2f:88:30:64:4b:87:a2:35:ec:
79:a0:d5:ba:ce:10:4f:e2:fe:8d:a9:f0:12:b7:42:ac:2b:71:
a4:6f:83:48:af:57:fd:57:b9:a2:06:28:2c:07:e5:d6:59:aa:
68:a4:08:a4:8c:35:ad:a7:33:c4:e4:9a:e9:62:36:bc:cd:8c:
83:61:81:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:22:52 2026 by rpki-client