Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
File: lQRT7UhedocGF6Dk9GdRRMMZLLI.mft (raw, json)
Hash identifier: dIarGAN28yC8ouCZ1dZTloASgtmPKslmqlBrrVURD1k=
Subject key identifier: CC:23:53:C9:88:32:95:93:49:DF:B3:FF:EB:62:BF:15:CD:E8:2C:BB
Authority key identifier: 95:04:53:ED:48:5E:76:87:06:17:A0:E4:F4:67:51:44:C3:19:2C:B2
Certificate issuer: /CN=950453ed485e76870617a0e4f4675144c3192cb2
Certificate serial: 019FAC3F5704B83F469E6709E9266216F0F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQRT7UhedocGF6Dk9GdRRMMZLLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
Manifest number: D8
Signing time: Wed 29 Jul 2026 05:00:59 +0000
Manifest this update: Wed 29 Jul 2026 05:00:59 +0000
Manifest next update: Thu 30 Jul 2026 05:00:59 +0000
Files and hashes: 1: Z4ZoaORQua51KCRsVg2IUhoDAXo.roa (hash: NCkzuayiCIk++QJTY6wsrqBuJEYrBZjGt9dXQEIDPoM=)
2: lQRT7UhedocGF6Dk9GdRRMMZLLI.crl (hash: J5ln5ybVTMix+mJLnsbJIS7aPi0hiVpECT+g4NJSyKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQRT7UhedocGF6Dk9GdRRMMZLLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:57:04:b8:3f:46:9e:67:09:e9:26:62:16:f0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950453ed485e76870617a0e4f4675144c3192cb2
Validity
Not Before: Jul 29 05:00:59 2026 GMT
Not After : Jul 30 05:00:59 2026 GMT
Subject: CN=cc2353c98832959349dfb3ffeb62bf15cde82cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c0:df:87:b2:28:9c:c2:29:55:98:c7:4d:9c:
b5:d4:70:b8:f2:84:cd:68:de:7b:ad:e5:7b:b3:52:
3c:a0:b4:ba:8e:ec:fa:b2:8e:72:dd:89:f3:5c:ef:
8a:e0:3e:d4:b9:7e:f3:04:48:75:f0:61:34:7d:08:
6e:75:a2:80:c5:d0:ba:14:93:87:61:68:01:d3:ac:
7a:bb:85:3b:fa:0a:46:86:2c:90:b3:c9:39:f7:fe:
ea:c8:05:3b:98:a0:38:6b:20:95:68:b8:3f:6c:4f:
30:70:3a:6f:75:c4:07:03:d0:72:3c:0c:d9:9c:45:
e6:9a:5c:e2:d9:0c:a0:5a:bb:ce:79:94:34:32:35:
90:7d:f6:85:3a:9c:d2:e7:e2:e2:c0:70:ec:be:f1:
e6:08:f5:f6:ec:98:12:03:21:bd:bd:71:a5:62:e9:
b6:fc:49:b5:b3:86:73:f3:28:ea:f5:1c:cf:21:2b:
65:45:93:5a:e0:b3:7a:d1:32:c4:92:a3:0e:73:07:
99:eb:68:c2:43:68:13:93:1b:6a:87:f8:9f:b3:08:
c4:c3:83:6a:fe:80:80:54:ce:4b:b5:0d:c7:40:e2:
61:b9:e5:52:dd:80:76:77:97:35:12:4e:5f:e4:0f:
99:41:bf:5f:23:ae:20:7b:83:62:ee:ec:4d:21:52:
3d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:23:53:C9:88:32:95:93:49:DF:B3:FF:EB:62:BF:15:CD:E8:2C:BB
X509v3 Authority Key Identifier:
keyid:95:04:53:ED:48:5E:76:87:06:17:A0:E4:F4:67:51:44:C3:19:2C:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQRT7UhedocGF6Dk9GdRRMMZLLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d1:71:44:b3:71:4f:7c:7f:be:05:e9:2c:6a:ec:1f:32:40:
9b:8a:f4:7f:21:d5:89:ec:d9:51:b4:2e:c0:74:56:2a:53:17:
8a:96:c5:91:7b:a9:bd:d5:bd:24:c3:ca:6a:56:2c:93:c3:9f:
09:8e:a7:14:cd:f8:64:34:75:bd:0c:b5:5f:3f:d1:08:17:74:
8b:80:61:5b:05:8f:5c:43:b8:ed:36:cd:ec:43:96:83:af:20:
c4:7f:a1:f1:95:c6:88:b3:36:08:0a:1b:a8:fa:18:3f:b5:6f:
5d:6d:0a:04:3b:43:07:c2:c9:16:64:bb:66:04:e2:c1:59:09:
37:f9:04:5b:47:45:e5:18:bf:ff:17:e6:f7:c5:2d:ed:8c:02:
b3:cc:2a:38:b3:17:8a:d8:1b:76:a6:be:4b:4e:73:68:0f:d7:
84:5e:8d:81:6c:a2:96:30:a2:f9:eb:f4:30:3b:68:5e:51:0b:
b5:85:98:92:c3:62:eb:75:78:9a:15:aa:c6:ef:31:1e:57:0e:
ea:a3:a1:70:b3:73:62:2b:df:a1:26:9f:d8:12:9a:f4:d3:ca:
c4:fe:b0:88:31:39:6b:9b:ad:e4:e2:bb:b7:c8:b5:2e:5b:54:
75:a4:91:04:74:34:b7:95:82:e1:25:a8:85:c6:06:7a:02:4a:
a3:ef:77:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:05:27 2026 by rpki-client