Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
File: lQCCqFlGcix_wchk8PvYDcVNzSk.mft (raw, json)
Hash identifier: blndWxaUOPj+6JUNodydXnoa6K1k4Ex/Rw9XAkmDseU=
Subject key identifier: 1A:89:37:74:72:D6:89:B1:27:7C:41:9F:1F:54:77:16:0B:57:08:72
Authority key identifier: 95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
Certificate issuer: /CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Certificate serial: 019D9998DC4665125FEFA48411212E857A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
Manifest number: 0B02
Signing time: Fri 17 Apr 2026 04:00:24 +0000
Manifest this update: Fri 17 Apr 2026 04:00:24 +0000
Manifest next update: Sat 18 Apr 2026 04:00:24 +0000
Files and hashes: 1: 6Q3hJK7l5gtN_Lr_bBxFEB7LRps.roa (hash: iw8Ogmc/LXNOPuyk5RisCNNGw5P8+o4St4o7kNLdmFM=)
2: UcrjdhQUtMyXZBZ14yoz47DP1KQ.roa (hash: pwlq/+c8DXzCaRg9hbORmAoeOdAKmI0H3fOLHE09GyY=)
3: lQCCqFlGcix_wchk8PvYDcVNzSk.crl (hash: 7WWBeyzq6ESzULrvqgwXomQfSLlfrlu4CzVdElMMpdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:dc:46:65:12:5f:ef:a4:84:11:21:2e:85:7a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Validity
Not Before: Apr 17 04:00:24 2026 GMT
Not After : Apr 18 04:00:24 2026 GMT
Subject: CN=1a89377472d689b1277c419f1f5477160b570872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:12:a2:00:8c:48:b0:00:66:80:ff:66:72:
e6:4b:bc:91:3a:e3:00:1f:d3:7d:3b:a4:3c:68:e7:
7b:37:96:29:48:9c:2e:60:7c:40:0b:0d:11:12:56:
9c:8f:b4:17:38:95:d2:1c:ec:13:c5:68:28:55:bc:
23:25:3f:df:fe:6e:65:e5:30:63:e3:96:d3:ce:c7:
55:a3:b3:94:e2:8a:21:47:05:6c:a2:8f:70:06:76:
90:a3:fd:4f:ff:46:db:80:23:d8:75:8d:24:36:b3:
b7:4b:63:95:d1:83:cb:d0:f7:15:60:e2:58:2f:50:
5a:11:1c:13:3a:d2:63:84:3f:81:3a:a6:da:7e:99:
0d:25:f4:55:27:35:87:fe:59:4a:91:ca:e5:bf:f2:
22:65:68:90:04:7d:b7:59:12:6b:69:29:e0:82:9e:
77:9c:27:f8:7c:e1:36:37:07:05:18:50:5b:00:cb:
ad:f7:1f:8f:12:47:b4:85:77:08:49:a4:7a:7a:4b:
53:7f:92:75:1d:cf:17:0c:6c:35:7d:2d:22:cc:0c:
e0:4d:9d:9f:59:17:25:92:ee:bc:3e:d4:8c:d8:f5:
e0:d9:c5:4e:1c:53:f5:7e:26:20:55:1f:99:3c:01:
02:be:36:93:06:70:5b:05:7d:4f:57:8c:06:84:c2:
dc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:89:37:74:72:D6:89:B1:27:7C:41:9F:1F:54:77:16:0B:57:08:72
X509v3 Authority Key Identifier:
keyid:95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b8:a4:18:8d:d5:ea:9e:e2:3d:5a:1e:e8:55:5e:b5:10:c0:
41:33:57:8d:89:05:f9:c1:59:87:08:26:a2:dd:b8:1c:93:dd:
4e:fa:02:42:4f:af:71:62:5b:3c:fc:bc:48:60:4d:99:12:6c:
85:32:0b:94:9b:8a:4f:04:9c:52:66:15:00:dd:c7:a1:9d:45:
5a:b0:b3:5d:e6:de:0b:29:ad:52:a1:2d:74:40:e1:91:e2:4d:
05:cd:fc:71:bd:ca:ec:52:7c:9c:3b:28:53:43:03:45:a3:f2:
62:01:5b:8e:ed:43:ec:db:3d:f3:e6:9e:95:c3:71:fc:c6:9f:
cb:d2:a4:01:7d:5e:41:d9:b9:8b:f0:63:46:10:70:dc:3f:75:
69:68:db:1f:a8:93:bd:5f:60:5e:0f:73:b1:9f:d5:50:a7:70:
50:57:81:7c:b6:4e:5b:62:c1:0d:fb:3c:04:f6:b4:a5:05:f5:
f7:98:ca:5b:c9:91:1d:77:02:73:f4:5a:a5:ed:27:00:6c:34:
e1:51:4b:47:2b:7b:6c:f9:c2:b0:58:cf:fe:de:cc:0f:8a:27:
bf:52:9f:dd:e6:bd:23:30:b8:95:9f:18:af:d7:ba:67:dc:44:
19:13:75:3b:0c:d5:5e:cb:ae:e3:88:02:00:2b:f1:fb:c6:67:
43:bf:eb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:43:13 2026 by rpki-client