Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
File: lqSbOF03Of3SQ34K798iUc1dKlE.mft (raw, json)
Hash identifier: 2qUE1oWiUE9BNIGIhW8ujlq8nk+pCGp+q5FPjsgLino=
Subject key identifier: 30:8C:6D:66:37:48:3D:A9:DB:48:A4:BB:9B:7A:95:79:B4:2D:9B:E5
Authority key identifier: 96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51
Certificate issuer: /CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51
Certificate serial: 019DA3E6915DA2D04F7828C218857509D093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
Manifest number: 0509
Signing time: Sun 19 Apr 2026 04:01:29 +0000
Manifest this update: Sun 19 Apr 2026 04:01:29 +0000
Manifest next update: Mon 20 Apr 2026 04:01:29 +0000
Files and hashes: 1: lqSbOF03Of3SQ34K798iUc1dKlE.crl (hash: QXX7fanbk+fv/ysvpS7TNl7FSNwOYO8mQ2Pm8P3kHoI=)
2: r7dmA6Cimt2y9DxwybhrZ8RQGZI.roa (hash: gakrlzuzHNIrUEQPTssrms796la3N/RETBOOb2DRmlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:91:5d:a2:d0:4f:78:28:c2:18:85:75:09:d0:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51
Validity
Not Before: Apr 19 04:01:29 2026 GMT
Not After : Apr 20 04:01:29 2026 GMT
Subject: CN=308c6d6637483da9db48a4bb9b7a9579b42d9be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:95:7c:c3:c0:52:fe:68:d4:ea:ad:9c:44:a2:
11:45:0b:46:14:38:f6:fc:91:43:31:65:e2:f1:1d:
5f:cb:8e:9a:06:a3:27:1d:84:24:b3:2b:28:52:86:
3c:1d:64:04:af:d1:40:2f:f0:49:33:b7:94:d5:44:
26:47:71:b6:55:c0:ec:ae:64:ca:a5:63:22:bd:f0:
e8:f6:01:e4:7a:90:34:09:40:32:e2:4a:c2:d9:40:
21:c9:27:47:3b:50:36:19:77:f5:8d:11:82:e3:79:
02:17:be:54:84:32:90:4d:fe:0c:2c:23:e1:b7:64:
2d:33:07:64:ea:88:b5:65:e8:24:90:f4:7e:5b:37:
c7:f4:3f:0a:da:7e:06:d9:6d:0e:2d:34:5a:a5:a2:
c6:4a:2f:a0:ee:d9:f7:a8:cd:34:b0:9c:bd:d0:fd:
35:5c:48:52:78:2e:22:f7:ad:56:bd:0a:73:26:de:
73:79:3a:e6:0f:b3:31:2b:83:c4:56:79:1a:ab:6e:
d2:72:30:4b:79:9f:00:fa:50:40:c6:eb:46:65:e8:
0a:17:fc:d0:ed:96:23:05:b6:3e:2f:00:e9:d4:02:
4d:15:97:86:34:4d:39:df:c6:6d:43:fb:cf:33:91:
88:06:a5:98:65:78:29:d9:02:69:14:ad:bc:68:97:
f1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8C:6D:66:37:48:3D:A9:DB:48:A4:BB:9B:7A:95:79:B4:2D:9B:E5
X509v3 Authority Key Identifier:
keyid:96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:13:a6:05:05:5d:d8:e0:00:65:5b:51:15:ed:70:5f:f5:96:
7d:99:e7:98:5d:2d:6a:a0:f7:5d:fd:e3:ba:17:58:e6:e1:92:
26:b1:a9:01:a6:6d:36:16:dc:a0:95:6b:4d:2f:3c:8b:4a:cc:
a2:cb:05:50:00:22:bc:79:f6:6b:7e:11:bc:0a:89:80:40:d0:
7f:60:4e:ce:21:c1:b9:1a:30:68:95:d7:28:12:e8:44:bd:99:
77:42:6a:5c:79:97:6e:dc:a9:16:c6:5f:b0:e8:39:92:92:c4:
28:06:05:78:45:59:17:38:a1:26:22:9c:65:60:fa:4e:82:41:
5d:3b:0c:bb:51:b4:e2:28:3f:e4:67:07:bb:9f:12:57:37:bc:
b7:a8:d8:21:bc:5d:16:e6:23:43:c2:2f:41:c6:70:25:97:f7:
70:31:ba:07:e3:48:99:0c:5e:0a:c9:17:af:16:a8:80:d8:48:
23:62:ba:47:fa:f3:7b:02:9c:4b:0b:fe:0a:65:e1:43:cb:22:
02:b6:c4:7b:fa:ff:0d:bb:91:f0:4e:5b:eb:08:6d:95:9d:cb:
29:0d:d8:fd:a3:22:21:7e:90:10:71:b9:84:c3:db:a3:b2:bb:
c4:d6:e8:3c:80:59:ec:0b:17:83:1b:9c:1d:c1:17:84:cf:88:
1f:8a:2e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:49:42 2026 by rpki-client