Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
File: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft (raw, json)
Hash identifier: FMjJb9pS1/sY+eB5gnVxqj/N8a5Xf+nuM2TW4fwZqQE=
Subject key identifier: 96:73:E3:64:8C:66:73:80:97:F8:49:00:28:25:80:EA:15:F4:76:AF
Authority key identifier: D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
Certificate issuer: /CN=d0baab9bd8c69d07b6501147543df74270a33a21
Certificate serial: 019FA97558D0C64820924FFA41EC0912A0B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 16:01:07 +0000
Manifest this update: Tue 28 Jul 2026 16:01:07 +0000
Manifest next update: Wed 29 Jul 2026 16:01:07 +0000
Files and hashes: 1: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl (hash: jO7WtA/oK/I2PvQbEDFmQK7tQcxpCbuXQqyW28Yfrk0=)
2: 5s6XKsomdWNWDCdDfvlwJ_bv16M.roa (hash: 2MYOlX42yAcrFD0bmpi2VtXwK7LzEOj6ivS2Lm4VbdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:58:d0:c6:48:20:92:4f:fa:41:ec:09:12:a0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0baab9bd8c69d07b6501147543df74270a33a21
Validity
Not Before: Jul 28 16:01:07 2026 GMT
Not After : Jul 29 16:01:07 2026 GMT
Subject: CN=9673e3648c66738097f84900282580ea15f476af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:8f:48:c7:9a:c0:8e:04:46:fc:55:a1:cb:
4e:8a:80:9d:6b:a6:1e:4e:4c:43:13:79:e6:46:0a:
df:e2:32:6c:db:05:54:af:27:f5:2b:7d:84:73:f0:
a8:11:0a:c8:de:20:c6:1a:a8:df:5e:61:a6:5b:c9:
8d:1a:e6:64:e2:8b:31:5e:b5:af:78:92:1b:ec:5d:
6f:0b:d2:f2:b1:93:78:84:92:c8:0e:62:f7:26:75:
8c:f9:7d:f2:31:f5:bb:57:0f:0a:63:a3:0c:36:42:
e9:cd:7b:d9:30:3e:3b:62:69:a5:66:1d:8e:53:d6:
c1:24:0f:35:4a:b1:24:7f:99:ff:6b:76:b8:14:3a:
15:f1:24:8f:b3:30:47:f4:50:fd:cb:fa:f6:a7:e0:
1b:75:88:97:02:d1:e2:ad:1a:ab:33:1e:aa:89:56:
e9:ba:d1:71:51:5f:1d:f6:7b:bc:63:05:3d:f0:5f:
b6:c2:9c:b5:c2:8a:ee:f5:d2:7e:c3:8e:12:a7:fa:
15:6d:88:2d:4c:e4:73:f9:8f:7f:07:0a:56:a2:01:
8f:d9:e3:31:34:47:af:18:36:59:90:41:58:d2:a6:
df:28:3a:fe:7b:5f:fb:80:7a:1b:e1:65:be:dc:4a:
a5:ba:dd:89:e0:a2:98:1d:1b:23:65:2b:ac:d6:14:
a2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:73:E3:64:8C:66:73:80:97:F8:49:00:28:25:80:EA:15:F4:76:AF
X509v3 Authority Key Identifier:
keyid:D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:2c:4d:59:ff:fd:7e:14:87:8b:92:31:06:0b:dc:6e:8a:89:
7b:fb:d2:76:08:93:12:0d:d9:45:64:10:15:95:c6:29:4c:2f:
c1:58:b7:77:a3:47:fc:08:32:8f:ef:29:c8:6b:a1:a2:b7:c2:
9e:04:85:d5:30:91:14:13:4d:85:01:4b:3a:2b:30:81:d5:c1:
23:a7:d1:31:d7:14:f3:cf:41:b4:78:59:9d:7a:fb:03:05:27:
b1:0a:b6:93:e9:cb:e7:aa:b4:72:b4:67:d7:cd:5d:85:de:1f:
f4:59:f7:c2:94:4e:74:76:02:3f:d6:cf:91:bc:3d:10:c5:56:
da:d1:5f:81:ec:42:9a:12:37:47:98:eb:0c:8a:4b:59:27:6e:
9c:e6:79:ed:77:21:e2:5c:b0:8c:6b:40:38:93:06:4e:4e:37:
93:24:77:bb:44:31:9e:9f:43:8e:d0:de:c7:cc:56:f5:fe:9b:
89:0c:97:a7:6d:a8:1a:7b:9a:c2:8c:5c:7c:e6:bb:f5:ae:1f:
32:47:0b:5a:49:d3:bb:13:13:f1:47:b7:53:07:65:73:3f:ac:
54:65:d5:39:f9:44:c4:76:53:d1:35:13:51:b9:9e:60:1c:1e:
7b:ce:4c:b3:42:a4:43:6c:04:5c:a8:cf:e4:01:89:23:ad:bf:
0f:ba:b1:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdVjQxkggkk/6QewJEqCzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYmFhYjliZDhjNjlkMDdiNjUwMTE0NzU0M2RmNzQyNzBh
MzNhMjEwHhcNMjYwNzI4MTYwMTA3WhcNMjYwNzI5MTYwMTA3WjAzMTEwLwYDVQQD
Eyg5NjczZTM2NDhjNjY3MzgwOTdmODQ5MDAyODI1ODBlYTE1ZjQ3NmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVGPSMeawI4ERvxVoctOioCda6Ye
TkxDE3nmRgrf4jJs2wVUryf1K32Ec/CoEQrI3iDGGqjfXmGmW8mNGuZk4osxXrWv
eJIb7F1vC9LysZN4hJLIDmL3JnWM+X3yMfW7Vw8KY6MMNkLpzXvZMD47YmmlZh2O
U9bBJA81SrEkf5n/a3a4FDoV8SSPszBH9FD9y/r2p+AbdYiXAtHirRqrMx6qiVbp
utFxUV8d9nu8YwU98F+2wpy1woru9dJ+w44Sp/oVbYgtTORz+Y9/BwpWogGP2eMx
NEevGDZZkEFY0qbfKDr+e1/7gHob4WW+3Eqlut2J4KKYHRsjZSus1hSibwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZz42SMZnOAl/hJACglgOoV9HavMB8GA1UdIwQY
MBaAFNC6q5vYxp0HtlARR1Q990JwozohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMExxcm05akduUWUyVUJGSFZEMzNRbkNqT2lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85MTk5ZWItZThlYi00MDRkLTg5NTUt
OWJkNWQ1MTM4MDU5LzEvMExxcm05akduUWUyVUJGSFZEMzNRbkNqT2lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85MTk5ZWItZThlYi00MDRkLTg5NTUtOWJkNWQ1MTM4MDU5
LzEvMExxcm05akduUWUyVUJGSFZEMzNRbkNqT2lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAryxNWf/9
fhSHi5IxBgvcboqJe/vSdgiTEg3ZRWQQFZXGKUwvwVi3d6NH/Agyj+8pyGuhorfC
ngSF1TCRFBNNhQFLOiswgdXBI6fRMdcU889BtHhZnXr7AwUnsQq2k+nL56q0crRn
181dhd4f9Fn3wpROdHYCP9bPkbw9EMVW2tFfgexCmhI3R5jrDIpLWSdunOZ57Xch
4lywjGtAOJMGTk43kyR3u0Qxnp9DjtDex8xW9f6biQyXp22oGnuawoxcfOa79a4f
MkcLWknTuxMT8Ue3Uwdlcz+sVGXVOflExHZT0TUTUbmeYBwee85Ms0KkQ2wEXKjP
5AGJI62/D7qxpQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:30:44 2026 by rpki-client