Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
File: lo-QT-7x95FiuCGaikg7hY9UC_o.mft (raw, json)
Hash identifier: 3cWo4OBEhqcmPOVmVHdQ7PrZk/UMUerAbzZXIEMQURc=
Subject key identifier: 4E:9B:E8:8B:2D:B0:BB:07:76:CD:01:31:C3:F3:74:F3:77:59:85:F3
Authority key identifier: 96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA
Certificate issuer: /CN=968f904feef1f79162b8219a8a483b858f540bfa
Certificate serial: 019D9AE31F2D8E1A73EFA0E4EDE6EA146E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 10:01:09 +0000
Manifest this update: Fri 17 Apr 2026 10:01:09 +0000
Manifest next update: Sat 18 Apr 2026 10:01:09 +0000
Files and hashes: 1: lo-QT-7x95FiuCGaikg7hY9UC_o.crl (hash: NK6VT1EGA7jEof5R047EcHwkqkQh3FoS7nKw+uVBeZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:1f:2d:8e:1a:73:ef:a0:e4:ed:e6:ea:14:6e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968f904feef1f79162b8219a8a483b858f540bfa
Validity
Not Before: Apr 17 10:01:09 2026 GMT
Not After : Apr 18 10:01:09 2026 GMT
Subject: CN=4e9be88b2db0bb0776cd0131c3f374f3775985f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c3:14:bb:d7:e4:5a:f0:2f:df:0a:0f:1d:3a:
2a:68:2e:91:ee:55:fb:1b:23:ab:f1:60:20:4d:c1:
a8:6a:f8:57:48:fe:98:01:04:bd:59:c5:fc:30:7e:
a6:56:32:cb:aa:c7:e9:2e:ee:6b:44:05:5b:bd:29:
25:16:ef:a3:8b:7b:72:9b:de:ef:12:86:0d:11:2b:
e4:cb:88:5e:b7:c4:ae:13:1e:94:2d:fd:2b:c1:3c:
af:41:87:7c:87:6c:ae:79:a8:6a:dc:de:2f:96:31:
52:81:1f:d2:44:40:05:5b:ed:c0:95:6c:8a:4c:c0:
bc:6b:a0:5e:c2:1f:bd:49:e6:32:1b:19:f7:d8:98:
31:6f:1e:00:15:32:65:9d:fe:9d:57:a6:66:88:43:
83:45:b9:a7:fd:fa:9d:51:c2:08:6e:2d:31:77:47:
56:99:d7:fe:a5:f6:a3:89:d7:89:3f:2f:32:bc:b2:
bd:6d:4c:e6:6b:9c:33:6a:de:02:55:9a:ee:1b:3d:
c7:8e:fe:ee:c2:2c:32:e9:dc:df:b4:9d:b5:60:71:
ca:83:03:de:01:17:2b:db:18:64:49:3b:42:46:f5:
e4:8e:bc:07:ff:86:87:e8:6c:cc:f7:f2:53:04:a6:
0f:db:db:fb:e2:cf:bb:85:06:18:4e:de:42:c2:fa:
cd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9B:E8:8B:2D:B0:BB:07:76:CD:01:31:C3:F3:74:F3:77:59:85:F3
X509v3 Authority Key Identifier:
keyid:96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1b:63:44:12:d5:32:95:3a:9a:5b:63:e6:1f:23:46:b1:0e:
46:4a:1e:93:7b:02:6f:e3:08:31:7a:14:2f:3a:39:a6:28:04:
af:bb:e2:43:9f:18:2c:bd:df:6f:8d:05:bf:6e:e1:66:0a:94:
83:73:06:70:bb:70:7a:87:e4:68:8c:67:22:4f:b1:e3:f2:4d:
f6:ac:c6:8b:73:a6:99:ff:43:8e:5e:9c:77:1e:ff:15:af:e4:
4f:f5:83:e6:4b:f9:31:78:f5:25:2f:99:5c:39:01:f3:4c:18:
2d:1a:18:41:6f:e5:76:79:b8:6a:28:f5:1d:49:99:8b:0f:90:
ac:e6:45:f0:0b:bb:87:d1:cf:41:8b:a9:bb:31:47:b2:a5:0f:
02:3f:bc:5a:ef:70:ce:16:98:2d:d2:33:1c:c3:36:6f:92:28:
16:33:db:41:07:de:5b:a7:08:98:08:44:e8:83:1e:60:9c:ad:
d7:b9:ea:67:bf:1b:57:2b:c4:d3:74:fc:4c:db:a0:e9:a3:b0:
10:f5:f7:5b:31:01:03:17:5e:7b:7c:71:59:87:fd:37:0e:40:
ae:b4:94:ef:6d:0d:85:d8:3c:52:aa:8e:fc:3f:17:7d:3a:d5:
48:00:12:7e:b0:12:88:87:c9:4e:df:83:d2:50:07:ec:7d:e9:
63:84:62:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:12:57 2026 by rpki-client