Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
File: lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft (raw, json)
Hash identifier: xKIOQ7yI5jnxdMgUqFiwalBVSusWuyhr0MTqaM8HECE=
Subject key identifier: C5:94:C8:0C:3F:BC:C3:22:26:F1:2C:1D:E8:74:C6:1D:4B:EC:21:2A
Authority key identifier: 96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1
Certificate issuer: /CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
Certificate serial: 019D9A3E0CE5DC14EF617B12AB165ABBE5F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
Manifest number: 0DF3
Signing time: Fri 17 Apr 2026 07:00:50 +0000
Manifest this update: Fri 17 Apr 2026 07:00:50 +0000
Manifest next update: Sat 18 Apr 2026 07:00:50 +0000
Files and hashes: 1: lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl (hash: 9Z9wu4TubSdx4wtrjmp3Pqss1IJ9wHG9UHzax+SkqwA=)
2: mzlwiMISCrNPZJgA3TH1rHI1DI8.roa (hash: Tkog9XF6e0kV/tgQ349vjWkM/evyuOUpmxS3ntIwqts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:0c:e5:dc:14:ef:61:7b:12:ab:16:5a:bb:e5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
Validity
Not Before: Apr 17 07:00:50 2026 GMT
Not After : Apr 18 07:00:50 2026 GMT
Subject: CN=c594c80c3fbcc32226f12c1de874c61d4bec212a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:61:45:45:2a:39:a9:f1:a5:ae:3e:e2:7f:3e:
9f:60:f2:72:72:44:a6:c4:b5:77:33:bd:c3:fb:4a:
0e:e6:e9:da:a4:26:e1:a0:fe:34:48:87:c3:fd:1f:
83:61:f0:d7:32:92:e0:5f:40:3e:32:93:a7:d5:d6:
a5:a0:43:e4:bc:18:d0:82:e8:bc:40:eb:e7:0b:39:
d8:ce:25:68:a2:61:de:39:7f:a9:91:1b:f7:39:12:
df:48:a6:b2:30:20:b2:e2:5c:1f:18:3f:93:18:ca:
48:14:79:36:76:f4:8c:dd:fc:58:89:ad:e4:1d:fe:
b0:4c:06:7e:b2:17:84:42:a8:52:8a:7d:97:9d:1d:
71:a7:6d:0b:cf:4d:41:b2:3e:fc:30:28:52:d2:94:
82:2f:e1:9f:95:8a:26:b6:92:cc:23:ee:48:b3:e3:
cf:ee:c0:f8:96:a8:67:aa:39:82:d4:32:f7:37:11:
28:68:aa:d8:5c:82:4e:33:b1:53:c8:22:52:34:d3:
d2:94:11:47:87:75:b1:84:1a:37:2b:7c:db:86:fd:
93:cc:2e:2d:2f:d9:e2:ac:cc:fe:03:56:af:33:63:
5f:95:0f:73:4b:80:c0:0f:19:ac:0c:a0:36:75:6f:
4d:c7:2d:61:13:71:ee:00:02:1b:e4:4c:97:b7:fd:
92:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:94:C8:0C:3F:BC:C3:22:26:F1:2C:1D:E8:74:C6:1D:4B:EC:21:2A
X509v3 Authority Key Identifier:
keyid:96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:73:70:4f:fb:32:f7:7e:6a:a5:d0:ea:06:9c:0e:dc:ba:2e:
80:9e:1e:ac:01:0a:3b:93:55:3d:46:cc:b3:77:69:c3:41:50:
c9:98:3d:12:44:82:59:12:e4:84:dc:b2:20:c3:c0:00:e7:0e:
19:73:45:1d:83:3d:d9:02:e6:46:27:b8:3d:19:55:40:8c:90:
14:39:57:7d:19:e8:07:b1:f3:bc:de:76:7b:5c:0d:72:a0:f7:
63:fd:d5:f0:70:88:19:8f:9b:14:6e:7e:97:4c:96:6f:cf:76:
fd:0b:1c:e4:a8:6f:95:ea:4b:5b:91:41:a9:4f:db:24:57:2f:
e2:39:3d:3b:10:fa:76:71:b5:b2:dd:dc:c6:6d:08:e5:46:e1:
7b:81:9d:2e:81:6a:f8:05:28:66:e8:96:71:51:70:37:fc:6b:
6c:b3:00:0d:f9:82:48:49:a9:04:b1:f9:3b:d3:53:c3:13:c4:
b5:80:af:dd:7e:29:13:2c:3b:4b:a6:3f:71:ae:9d:7c:97:3a:
90:3e:bd:57:c3:b3:3a:d9:2c:21:a5:b1:f9:0b:71:1a:da:4d:
0a:26:59:37:b5:d4:c9:f7:74:b2:1c:64:af:ca:62:69:95:d5:
6a:15:db:2e:63:a4:7f:25:10:fe:23:c0:ff:16:02:4f:94:1a:
b5:69:3d:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPgzl3BTvYXsSqxZau+XzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YWI0Njk3YTZhNDhmNmM2YzY5M2UzODM5YmZkNWIzZmIw
ZTNiZjEwHhcNMjYwNDE3MDcwMDUwWhcNMjYwNDE4MDcwMDUwWjAzMTEwLwYDVQQD
EyhjNTk0YzgwYzNmYmNjMzIyMjZmMTJjMWRlODc0YzYxZDRiZWMyMTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WFFRSo5qfGlrj7ifz6fYPJyckSm
xLV3M73D+0oO5unapCbhoP40SIfD/R+DYfDXMpLgX0A+MpOn1daloEPkvBjQgui8
QOvnCznYziVoomHeOX+pkRv3ORLfSKayMCCy4lwfGD+TGMpIFHk2dvSM3fxYia3k
Hf6wTAZ+sheEQqhSin2XnR1xp20Lz01Bsj78MChS0pSCL+GflYomtpLMI+5Is+PP
7sD4lqhnqjmC1DL3NxEoaKrYXIJOM7FTyCJSNNPSlBFHh3WxhBo3K3zbhv2TzC4t
L9nirMz+A1avM2NflQ9zS4DADxmsDKA2dW9Nxy1hE3HuAAIb5EyXt/2SwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWUyAw/vMMiJvEsHeh0xh1L7CEqMB8GA1UdIwQY
MBaAFJarRpempI9sbGk+ODm/1bP7DjvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHF0R2w2YWtqMnhzYVQ0NE9iX1ZzX3NPT19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zNzFjYTktNTZhZC00ZDEyLTk2ZjQt
M2IxZTcyMmE5ZGM4LzEvbHF0R2w2YWtqMnhzYVQ0NE9iX1ZzX3NPT19FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8zNzFjYTktNTZhZC00ZDEyLTk2ZjQtM2IxZTcyMmE5ZGM4
LzEvbHF0R2w2YWtqMnhzYVQ0NE9iX1ZzX3NPT19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWHNwT/sy
935qpdDqBpwO3LougJ4erAEKO5NVPUbMs3dpw0FQyZg9EkSCWRLkhNyyIMPAAOcO
GXNFHYM92QLmRie4PRlVQIyQFDlXfRnoB7HzvN52e1wNcqD3Y/3V8HCIGY+bFG5+
l0yWb892/Qsc5KhvlepLW5FBqU/bJFcv4jk9OxD6dnG1st3cxm0I5Ubhe4GdLoFq
+AUoZuiWcVFwN/xrbLMADfmCSEmpBLH5O9NTwxPEtYCv3X4pEyw7S6Y/ca6dfJc6
kD69V8OzOtksIaWx+QtxGtpNCiZZN7XUyfd0shxkr8piaZXVahXbLmOkfyUQ/iPA
/xYCT5QatWk9UA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:34:49 2026 by rpki-client