Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
File: lQRT7UhedocGF6Dk9GdRRMMZLLI.mft (raw, json)
Hash identifier: kNi2ulnohw06AJJR0j4PexBsIyRG7O3yujya1ODL3LM=
Subject key identifier: 52:AA:EC:F8:2B:0D:4F:C8:C9:FD:FA:9D:3B:B0:29:2C:E1:FB:9F:87
Authority key identifier: 95:04:53:ED:48:5E:76:87:06:17:A0:E4:F4:67:51:44:C3:19:2C:B2
Certificate issuer: /CN=950453ed485e76870617a0e4f4675144c3192cb2
Certificate serial: 01A0C6335993253150007AC885CE1B45326B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQRT7UhedocGF6Dk9GdRRMMZLLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
Manifest number: 016A
Signing time: Mon 21 Sep 2026 23:00:48 +0000
Manifest this update: Mon 21 Sep 2026 23:00:48 +0000
Manifest next update: Tue 22 Sep 2026 23:00:48 +0000
Files and hashes: 1: Z4ZoaORQua51KCRsVg2IUhoDAXo.roa (hash: NCkzuayiCIk++QJTY6wsrqBuJEYrBZjGt9dXQEIDPoM=)
2: lQRT7UhedocGF6Dk9GdRRMMZLLI.crl (hash: 4IyenURf4wjGgyueXdXC9iFAXzuny5dWECvPZ0zjG04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQRT7UhedocGF6Dk9GdRRMMZLLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:59:93:25:31:50:00:7a:c8:85:ce:1b:45:32:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950453ed485e76870617a0e4f4675144c3192cb2
Validity
Not Before: Sep 21 23:00:48 2026 GMT
Not After : Sep 22 23:00:48 2026 GMT
Subject: CN=52aaecf82b0d4fc8c9fdfa9d3bb0292ce1fb9f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:89:5f:af:00:61:61:43:72:e3:d1:c9:54:
23:3f:12:ed:c6:65:9d:ee:dc:72:2b:aa:68:ec:0a:
ef:cc:fa:c8:95:9e:5c:20:b4:ef:af:82:80:bd:01:
b8:67:72:88:14:a2:5b:24:fc:4a:5d:d0:50:6a:99:
b9:e7:1f:82:9c:02:fd:be:d5:fa:bc:2c:4b:33:ef:
5b:f9:e4:01:ba:25:33:fd:a8:28:dc:44:98:b0:34:
10:59:e8:6a:fd:1f:26:83:64:e0:ea:70:3e:a7:dd:
a1:04:12:4b:72:5e:7e:49:ca:d9:e9:48:e9:a7:8f:
41:4d:06:7d:65:0e:b8:d8:1c:c1:33:9b:ff:b7:73:
39:80:d1:23:c3:17:30:f8:06:be:f5:86:53:5f:9b:
e8:dc:c5:3b:60:7e:d1:05:19:a9:ce:99:4c:fc:54:
c2:36:cc:ad:cc:9d:b8:55:8c:b4:21:5c:67:cd:de:
7b:80:07:12:a9:f7:aa:62:8c:cf:25:ed:ee:63:9a:
7d:58:96:63:e4:b7:22:11:fb:64:a5:c9:0f:bd:d9:
32:0b:76:1a:d0:48:14:b7:6e:14:1d:24:f7:e3:70:
66:32:e7:46:0f:9b:f5:62:75:7d:b9:0a:51:1a:f6:
01:a0:3e:06:68:11:1c:8a:89:8f:15:27:ea:6f:b6:
0d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AA:EC:F8:2B:0D:4F:C8:C9:FD:FA:9D:3B:B0:29:2C:E1:FB:9F:87
X509v3 Authority Key Identifier:
keyid:95:04:53:ED:48:5E:76:87:06:17:A0:E4:F4:67:51:44:C3:19:2C:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQRT7UhedocGF6Dk9GdRRMMZLLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:84:4b:4b:ae:a1:1e:73:4c:57:d2:42:2b:21:92:b9:5e:16:
36:e8:3c:99:35:c6:d0:23:5e:1e:c4:a9:59:a9:79:66:db:39:
d4:e1:f6:ac:86:38:7d:75:d4:37:48:ec:45:b8:77:e0:0b:e6:
3c:88:3b:ad:85:72:56:40:ff:c2:64:8d:a8:3c:99:8c:52:c6:
84:aa:1f:d4:ef:0a:66:25:c1:2f:f4:88:0e:d6:57:c6:ba:8e:
24:d2:3c:60:01:af:dd:e9:39:29:ae:e7:d6:1a:a4:02:92:81:
78:76:a7:02:95:5c:26:8b:c3:6a:dd:a2:72:bc:05:60:17:42:
b0:3d:9c:dc:fb:7f:d4:ca:c7:72:a7:34:2a:02:0e:57:db:24:
16:54:65:70:fd:c2:5f:de:0e:f1:76:98:7b:61:d4:2b:fc:89:
08:a9:1b:7e:2c:7e:10:d0:14:66:5e:ea:68:47:09:71:34:cf:
e3:a5:82:57:44:52:99:12:ae:65:79:cc:83:1d:c1:80:b9:0e:
44:d5:09:e7:01:ea:53:23:7a:58:2a:c4:e0:07:04:4b:fa:5e:
d8:f7:86:9e:78:b0:83:33:b1:38:22:20:ac:31:5b:b9:f9:01:
50:2a:03:91:18:39:29:13:fe:ea:2c:6c:91:e6:d1:f4:36:52:
51:b6:dd:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGM1mTJTFQAHrIhc4bRTJrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MDQ1M2VkNDg1ZTc2ODcwNjE3YTBlNGY0Njc1MTQ0YzMx
OTJjYjIwHhcNMjYwOTIxMjMwMDQ4WhcNMjYwOTIyMjMwMDQ4WjAzMTEwLwYDVQQD
Eyg1MmFhZWNmODJiMGQ0ZmM4YzlmZGZhOWQzYmIwMjkyY2UxZmI5Zjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFSJX68AYWFDcuPRyVQjPxLtxmWd
7txyK6po7ArvzPrIlZ5cILTvr4KAvQG4Z3KIFKJbJPxKXdBQapm55x+CnAL9vtX6
vCxLM+9b+eQBuiUz/ago3ESYsDQQWehq/R8mg2Tg6nA+p92hBBJLcl5+ScrZ6Ujp
p49BTQZ9ZQ642BzBM5v/t3M5gNEjwxcw+Aa+9YZTX5vo3MU7YH7RBRmpzplM/FTC
NsytzJ24VYy0IVxnzd57gAcSqfeqYozPJe3uY5p9WJZj5LciEftkpckPvdkyC3Ya
0EgUt24UHST343BmMudGD5v1YnV9uQpRGvYBoD4GaBEciomPFSfqb7YNRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKq7PgrDU/Iyf36nTuwKSzh+5+HMB8GA1UdIwQY
MBaAFJUEU+1IXnaHBheg5PRnUUTDGSyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFFSVDdVaGVkb2NHRjZEazlHZFJSTU1aTExJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kMjZhMWMtMTg3MC00ODIxLWJiOGEt
ODRmOTVkMzNlMmM2LzEvbFFSVDdVaGVkb2NHRjZEazlHZFJSTU1aTExJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9kMjZhMWMtMTg3MC00ODIxLWJiOGEtODRmOTVkMzNlMmM2
LzEvbFFSVDdVaGVkb2NHRjZEazlHZFJSTU1aTExJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsYRLS66h
HnNMV9JCKyGSuV4WNug8mTXG0CNeHsSpWal5Zts51OH2rIY4fXXUN0jsRbh34Avm
PIg7rYVyVkD/wmSNqDyZjFLGhKof1O8KZiXBL/SIDtZXxrqOJNI8YAGv3ek5Ka7n
1hqkApKBeHanApVcJovDat2icrwFYBdCsD2c3Pt/1MrHcqc0KgIOV9skFlRlcP3C
X94O8XaYe2HUK/yJCKkbfix+ENAUZl7qaEcJcTTP46WCV0RSmRKuZXnMgx3BgLkO
RNUJ5wHqUyN6WCrE4AcES/pe2PeGnniwgzOxOCIgrDFbufkBUCoDkRg5KRP+6ixs
kebR9DZSUbbdNA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 02:21:29 2026 by rpki-client