Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
File: lQCCqFlGcix_wchk8PvYDcVNzSk.mft (raw, json)
Hash identifier: 1EAnAlESDwHvHvzt8sMPzwl5pb1qYM0rYOU3uZ9bMZM=
Subject key identifier: 74:AF:22:E3:D7:FC:98:07:D1:9D:FD:F0:05:F7:EC:02:A7:6F:68:22
Authority key identifier: 95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
Certificate issuer: /CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Certificate serial: 019EBF23612FF128D49F108CA4145C105AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
Manifest number: 0B9A
Signing time: Sat 13 Jun 2026 04:00:27 +0000
Manifest this update: Sat 13 Jun 2026 04:00:27 +0000
Manifest next update: Sun 14 Jun 2026 04:00:27 +0000
Files and hashes: 1: 6Q3hJK7l5gtN_Lr_bBxFEB7LRps.roa (hash: iw8Ogmc/LXNOPuyk5RisCNNGw5P8+o4St4o7kNLdmFM=)
2: UcrjdhQUtMyXZBZ14yoz47DP1KQ.roa (hash: pwlq/+c8DXzCaRg9hbORmAoeOdAKmI0H3fOLHE09GyY=)
3: lQCCqFlGcix_wchk8PvYDcVNzSk.crl (hash: 8JmqOC8eTUbkOpfr0M1PfhmxbEGOCHb21UwsuwqY3Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:61:2f:f1:28:d4:9f:10:8c:a4:14:5c:10:5a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Validity
Not Before: Jun 13 04:00:27 2026 GMT
Not After : Jun 14 04:00:27 2026 GMT
Subject: CN=74af22e3d7fc9807d19dfdf005f7ec02a76f6822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:10:b0:dc:91:96:91:91:bc:ee:d3:d2:1a:7d:
61:f4:5b:7d:e3:dc:25:00:80:bc:5a:c4:08:57:3b:
85:30:a6:b3:26:d5:39:fd:0c:64:83:e8:57:9a:24:
45:87:62:c1:49:01:ad:31:98:11:b3:d7:3f:1f:38:
d7:b8:64:df:b5:bf:ba:c4:ef:ab:dd:0b:36:ba:16:
60:19:d5:45:22:f6:ec:42:d7:30:59:26:7b:a2:47:
45:5f:9c:d9:af:a5:68:7a:0a:a4:c2:b2:69:a5:01:
1a:75:8e:57:92:b0:e8:ad:3f:67:a0:41:7b:f6:cd:
c1:e3:ee:9b:10:2f:15:c9:d9:d6:49:c5:ed:7d:24:
06:56:37:b7:e3:8d:bc:f7:c8:2b:51:ed:7a:0b:e2:
00:a8:c9:b5:d7:d5:e9:67:d5:a3:1f:a2:52:f8:99:
ad:a4:bf:31:20:bd:83:4a:8e:c8:38:5c:04:b1:4b:
e9:59:e4:e1:2e:35:40:d9:bc:a7:83:16:6c:76:23:
02:0e:45:16:fe:24:b6:af:59:54:76:aa:3f:12:06:
1b:de:b7:fb:9c:d2:79:07:24:fb:47:c5:0b:db:09:
29:a2:42:b9:55:8e:33:47:3e:3a:69:db:98:47:cd:
a5:34:ae:af:1e:50:5a:1e:f8:be:f1:dc:c5:1a:bc:
2d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AF:22:E3:D7:FC:98:07:D1:9D:FD:F0:05:F7:EC:02:A7:6F:68:22
X509v3 Authority Key Identifier:
keyid:95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:46:c8:c0:a4:38:f7:05:cd:85:9f:84:45:0b:57:c3:b7:fc:
01:29:82:90:c5:6f:de:33:ad:80:31:74:b8:f3:8f:06:0c:fd:
6f:45:2d:97:8e:5a:5b:ed:23:7a:e5:6f:09:60:6a:45:c8:79:
5d:a9:e1:05:45:6c:02:b1:e5:bb:38:d2:e2:68:9a:ba:78:67:
28:ef:77:c7:b9:d4:28:92:16:f0:59:19:a7:90:c8:a5:29:f2:
a7:26:73:dc:c9:90:91:97:42:00:bd:9e:f7:f1:13:2c:73:e5:
06:aa:af:2b:d3:19:97:42:08:9c:68:72:2b:a3:51:c3:b0:67:
ab:3f:b0:a8:f7:b7:de:d6:a1:e2:b8:bb:3c:50:7c:bf:df:aa:
0b:ac:e1:5f:2e:a3:94:28:96:9f:e9:dc:f3:6c:13:22:7f:24:
49:ad:67:49:b0:2f:aa:fc:be:b8:06:bd:e6:9f:04:a3:66:61:
39:c8:2d:27:38:c6:a0:75:2f:46:94:7e:78:9b:93:3e:ea:cd:
fd:6b:68:59:d4:ba:36:42:5b:4c:b0:7b:82:f6:76:d7:f6:d4:
d0:aa:3a:9a:9c:f2:33:20:47:03:c3:99:f0:c7:2b:7a:f9:c3:
76:2d:bf:53:82:83:95:fd:7f:3d:3f:12:77:40:81:7b:e3:f4:
84:85:a2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:29:49 2026 by rpki-client