Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
File: lQCCqFlGcix_wchk8PvYDcVNzSk.mft (raw, json)
Hash identifier: D+8MjdXtEQgBgoT7DmKpsM9jo52jKw7h1O+l592ZQus=
Subject key identifier: EE:C4:87:70:31:10:2D:63:79:09:BA:05:D7:11:C9:D4:E8:E4:09:DD
Authority key identifier: 95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
Certificate issuer: /CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Certificate serial: 019CAA213180C23D5D8CECEED2351E161D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
Manifest number: 0A86
Signing time: Sun 01 Mar 2026 16:00:27 +0000
Manifest this update: Sun 01 Mar 2026 16:00:27 +0000
Manifest next update: Mon 02 Mar 2026 16:00:27 +0000
Files and hashes: 1: 6Q3hJK7l5gtN_Lr_bBxFEB7LRps.roa (hash: iw8Ogmc/LXNOPuyk5RisCNNGw5P8+o4St4o7kNLdmFM=)
2: UcrjdhQUtMyXZBZ14yoz47DP1KQ.roa (hash: pwlq/+c8DXzCaRg9hbORmAoeOdAKmI0H3fOLHE09GyY=)
3: lQCCqFlGcix_wchk8PvYDcVNzSk.crl (hash: SifsB8UecPMToAlUOxugRUyUEA+tFkrRD1FdOXFw1AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:31:80:c2:3d:5d:8c:ec:ee:d2:35:1e:16:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Validity
Not Before: Mar 1 16:00:27 2026 GMT
Not After : Mar 2 16:00:27 2026 GMT
Subject: CN=eec4877031102d637909ba05d711c9d4e8e409dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:88:fb:79:82:b6:d7:f5:2c:7f:ef:68:8f:39:
bb:77:2e:32:a0:70:7a:69:fa:cb:8c:c1:ed:0e:a2:
59:5e:6a:fd:50:05:99:7b:3d:69:7b:c8:c9:33:cc:
2c:11:92:f2:01:91:b7:f6:23:03:08:11:4e:74:96:
bc:c0:9c:cd:24:b1:82:91:86:17:f9:3b:e7:a0:cb:
7e:37:4a:fb:f3:6d:a6:2a:07:60:f8:be:14:a7:98:
b1:6f:80:92:17:e3:0c:6b:f6:64:94:ec:81:1d:f6:
38:9e:e8:47:e3:63:bc:f8:b8:27:d3:a9:52:69:cd:
7e:1c:21:9b:8e:7b:3f:2f:4c:d3:d2:e2:b6:c5:98:
ac:85:ec:3e:04:35:cb:f3:a3:d3:1b:94:a5:85:a0:
8c:2a:a0:70:66:81:81:52:9b:e6:50:c5:fc:07:b5:
66:d2:46:6c:82:a9:db:58:2a:bb:f2:c5:35:00:b6:
3e:99:f3:91:59:3c:5a:5b:9b:3d:15:bd:b4:d1:bb:
d2:d7:d1:13:7e:54:39:bd:b3:55:a3:12:e4:c9:47:
a4:52:65:7f:cc:c6:9c:c1:a9:f2:5f:98:f4:44:1b:
3b:a2:72:78:59:ff:53:95:84:27:93:42:f9:c9:00:
b6:74:8b:c0:56:b9:97:5b:58:cb:2c:23:fd:4c:b3:
f8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C4:87:70:31:10:2D:63:79:09:BA:05:D7:11:C9:D4:E8:E4:09:DD
X509v3 Authority Key Identifier:
keyid:95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8b:6d:ba:61:21:80:41:51:2e:15:20:a9:de:eb:b4:11:a9:
e8:ef:81:8f:87:1c:7f:a5:14:12:5b:da:97:9f:5e:ff:58:59:
18:aa:d0:c0:35:f9:14:65:c8:ae:b9:f8:d6:67:28:74:fb:d9:
68:6e:34:09:2b:ce:d2:ae:16:60:48:e1:dd:c6:36:bb:a4:03:
fd:30:8c:ab:b4:dc:15:00:8b:b9:18:56:12:8e:27:96:b1:17:
a0:29:42:2f:78:26:06:a5:86:3d:73:0f:79:90:6e:2c:6a:03:
4f:3b:b8:26:aa:49:06:62:72:2d:50:0a:0f:85:25:82:cb:a8:
32:e0:4f:c4:ab:66:33:77:4e:d0:8c:8f:89:75:dc:45:2e:fb:
92:c5:4c:ca:58:c3:c4:52:fd:80:03:8b:79:c5:d5:f6:c3:4d:
ec:de:9b:90:f1:c6:9b:bb:aa:16:c5:43:cd:8d:2b:7b:6b:e2:
12:ec:a3:66:83:7b:ca:67:0c:ee:ad:3e:4c:9d:6c:0a:ab:c6:
39:de:f6:e7:59:a3:31:71:49:d8:3f:11:c9:9d:df:7f:45:b8:
36:73:d3:a3:5f:11:3f:d9:fe:42:a2:5e:b9:3d:ee:3f:49:4f:
4e:a7:e6:77:5c:48:53:71:be:d0:68:19:0e:fc:e9:5f:cf:55:
f7:93:bb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:47 2026 by rpki-client