Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
File: lo-QT-7x95FiuCGaikg7hY9UC_o.mft (raw, json)
Hash identifier: bF5k9Zi7GQc5DDV3i3lPKVQZGRhfjDaujEXBmh+HELc=
Subject key identifier: 75:1F:A8:97:3E:35:85:E9:CC:5D:5F:29:EB:6B:A4:3B:DE:34:21:17
Authority key identifier: 96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA
Certificate issuer: /CN=968f904feef1f79162b8219a8a483b858f540bfa
Certificate serial: 019CAB6BBE53E4AA0A8172377CAF177F4213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:01:30 +0000
Manifest this update: Sun 01 Mar 2026 22:01:30 +0000
Manifest next update: Mon 02 Mar 2026 22:01:30 +0000
Files and hashes: 1: lo-QT-7x95FiuCGaikg7hY9UC_o.crl (hash: Tu7UxeFxckolzWUhfub5uYGK/2rWXVo4fs2cXFU7UYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:be:53:e4:aa:0a:81:72:37:7c:af:17:7f:42:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968f904feef1f79162b8219a8a483b858f540bfa
Validity
Not Before: Mar 1 22:01:30 2026 GMT
Not After : Mar 2 22:01:30 2026 GMT
Subject: CN=751fa8973e3585e9cc5d5f29eb6ba43bde342117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b2:dd:9c:9e:d3:08:d0:c1:53:a7:01:ca:b2:
e9:8a:8e:60:bf:bf:d7:33:bd:fb:a3:79:44:bf:5a:
19:24:4b:78:ad:79:d4:3f:f4:65:59:eb:59:bd:c2:
0b:6b:eb:b2:c6:ac:78:84:cf:ea:50:7c:45:ab:f2:
27:8d:de:d3:e9:88:d4:40:8c:cd:67:7d:38:ba:27:
17:77:db:07:e5:cb:90:76:0f:b6:4b:1a:08:92:2a:
4c:a7:74:75:5a:82:48:5b:9d:91:08:ca:3f:63:ca:
82:d4:ac:ef:27:c1:84:25:8c:21:04:fa:f2:b6:3c:
75:b6:dd:63:93:ae:29:9c:22:43:5c:6f:de:dd:42:
b8:ff:76:09:6e:39:26:90:f9:94:14:9e:a9:6f:9c:
e7:8b:7e:27:18:85:79:fd:2c:23:3a:0a:2f:d9:94:
60:a8:23:ec:5b:4e:6e:f4:05:47:91:a8:7e:5f:a6:
3a:ed:49:c5:69:cc:10:a3:a3:46:89:1c:8a:cb:69:
73:09:ba:23:f4:8b:19:a1:46:15:b6:07:c7:cc:6d:
0c:35:18:55:dd:f1:6a:66:27:b5:f9:3f:01:1f:16:
d0:13:a7:dd:32:86:b3:b7:5b:f1:3c:7c:54:44:00:
b6:3c:ec:67:a3:89:ef:b8:f5:29:dc:ee:6b:97:89:
69:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1F:A8:97:3E:35:85:E9:CC:5D:5F:29:EB:6B:A4:3B:DE:34:21:17
X509v3 Authority Key Identifier:
keyid:96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:af:8c:63:1c:1a:7b:4d:39:39:26:b1:a7:6e:93:43:3a:1b:
cb:a6:47:fd:d8:23:e5:90:b2:44:2f:ed:74:28:3f:09:2c:ff:
0b:49:64:bb:a1:d9:66:f6:df:9d:25:de:32:c3:81:ed:af:3d:
ae:0e:be:3e:02:39:cc:84:e1:cf:ea:61:5a:18:13:36:dd:b9:
a4:24:1f:c1:40:d0:9e:b8:34:f7:a5:c2:9d:11:c4:46:4e:09:
d5:c9:cf:0b:6b:55:4e:8a:1d:f6:fd:71:82:6e:af:92:e7:69:
5d:16:5f:47:b2:4f:01:f6:15:2d:f0:c8:31:9e:6b:ae:70:47:
fb:bf:b6:bc:74:e4:19:0f:e7:16:49:89:f3:64:c2:b5:59:bc:
d6:18:a7:2c:2d:31:00:f0:19:59:60:2a:38:9e:5d:a7:3d:e2:
ac:08:97:f6:d3:15:c3:4a:d3:b1:cb:1b:e0:31:75:cb:a6:ba:
eb:0b:c2:78:ea:62:f7:5b:f1:c4:d5:5c:90:e6:8d:e9:2d:2d:
96:b7:8e:1c:45:c5:0f:f7:65:18:36:ed:89:e5:f1:a6:20:0d:
b6:00:7e:27:3e:a8:ca:ff:e8:04:72:19:82:70:e6:8d:ab:39:
1e:82:83:ce:3f:d4:20:6e:c3:d9:5f:34:17:65:e6:3d:e7:66:
ae:c3:5d:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra75T5KoKgXI3fK8Xf0ITMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2OGY5MDRmZWVmMWY3OTE2MmI4MjE5YThhNDgzYjg1OGY1
NDBiZmEwHhcNMjYwMzAxMjIwMTMwWhcNMjYwMzAyMjIwMTMwWjAzMTEwLwYDVQQD
Eyg3NTFmYTg5NzNlMzU4NWU5Y2M1ZDVmMjllYjZiYTQzYmRlMzQyMTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbLdnJ7TCNDBU6cByrLpio5gv7/X
M737o3lEv1oZJEt4rXnUP/RlWetZvcILa+uyxqx4hM/qUHxFq/Injd7T6YjUQIzN
Z304uicXd9sH5cuQdg+2SxoIkipMp3R1WoJIW52RCMo/Y8qC1KzvJ8GEJYwhBPry
tjx1tt1jk64pnCJDXG/e3UK4/3YJbjkmkPmUFJ6pb5zni34nGIV5/SwjOgov2ZRg
qCPsW05u9AVHkah+X6Y67UnFacwQo6NGiRyKy2lzCboj9IsZoUYVtgfHzG0MNRhV
3fFqZie1+T8BHxbQE6fdMoazt1vxPHxURAC2POxno4nvuPUp3O5rl4lpuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUfqJc+NYXpzF1fKetrpDveNCEXMB8GA1UdIwQY
MBaAFJaPkE/u8feRYrghmopIO4WPVAv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG8tUVQtN3g5NUZpdUNHYWlrZzdoWTlVQ19vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kZGRmM2QtZTg4Ny00MjczLWJiN2It
NjgxZmEwZDk5ODIxLzEvbG8tUVQtN3g5NUZpdUNHYWlrZzdoWTlVQ19vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9kZGRmM2QtZTg4Ny00MjczLWJiN2ItNjgxZmEwZDk5ODIx
LzEvbG8tUVQtN3g5NUZpdUNHYWlrZzdoWTlVQ19vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkq+MYxwa
e005OSaxp26TQzoby6ZH/dgj5ZCyRC/tdCg/CSz/C0lku6HZZvbfnSXeMsOB7a89
rg6+PgI5zIThz+phWhgTNt25pCQfwUDQnrg096XCnRHERk4J1cnPC2tVTood9v1x
gm6vkudpXRZfR7JPAfYVLfDIMZ5rrnBH+7+2vHTkGQ/nFkmJ82TCtVm81hinLC0x
APAZWWAqOJ5dpz3irAiX9tMVw0rTscsb4DF1y6a66wvCeOpi91vxxNVckOaN6S0t
lreOHEXFD/dlGDbtieXxpiANtgB+Jz6oyv/oBHIZgnDmjas5HoKDzj/UIG7D2V80
F2XmPedmrsNduQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:30 2026 by rpki-client