Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
File: lqKMzDCRW1xzEoCowcpn_mAJVO4.mft (raw, json)
Hash identifier: YATyaiGizH1svtiqS53fe/oujupeCaUh1R1dXmEw2rk=
Subject key identifier: A9:08:29:E7:AB:A0:AF:17:53:28:DF:03:E9:8A:B8:96:49:EA:E0:D9
Authority key identifier: 96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
Certificate issuer: /CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Certificate serial: 019D386562F42466A6DFA091224334D62551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
Manifest number: 090B
Signing time: Sun 29 Mar 2026 07:01:01 +0000
Manifest this update: Sun 29 Mar 2026 07:01:01 +0000
Manifest next update: Mon 30 Mar 2026 07:01:01 +0000
Files and hashes: 1: lqKMzDCRW1xzEoCowcpn_mAJVO4.crl (hash: WugHiIxHs4F9mRiZ4V1blFB2cn1TyYaXFezCEE4wfOw=)
2: tpEzmPn6Emv4oxeWEF0eNzB9vks.roa (hash: lobNcn+6RzeUxnDnoUeGrIRglUEmt1L2WBn8rml/ud0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:62:f4:24:66:a6:df:a0:91:22:43:34:d6:25:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Validity
Not Before: Mar 29 07:01:01 2026 GMT
Not After : Mar 30 07:01:01 2026 GMT
Subject: CN=a90829e7aba0af175328df03e98ab89649eae0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:35:fa:1a:b4:47:95:a0:55:b6:98:9f:fa:1c:
d8:15:d4:53:c1:4e:b0:39:d2:88:56:ff:01:71:1b:
e2:f3:7c:80:02:f7:d6:1b:60:34:ea:93:e0:b0:ca:
f4:e6:37:51:10:4e:f1:93:1a:d3:70:4b:d8:96:bf:
a6:58:fd:68:4e:c7:e3:2f:ad:8c:22:7a:bf:74:b7:
1e:c6:4a:54:a3:96:09:35:03:59:2a:7f:20:f8:94:
3b:0a:8d:ad:17:4f:40:fc:75:d2:15:e4:50:11:bb:
89:b2:98:aa:e0:5d:f1:d4:59:ba:94:9b:87:b9:ec:
d2:e6:ed:42:55:a6:d9:31:7b:d0:b3:bd:81:ba:3d:
30:b7:ad:9d:7f:1c:6c:7d:f0:4e:b6:28:bc:87:85:
17:71:d7:46:e3:ac:65:22:ee:0c:f3:0c:9c:ad:ac:
2e:d0:f8:fd:d1:8e:c8:cc:e7:cb:35:9e:31:58:0f:
39:ff:e9:91:ae:09:8f:d8:f9:4f:b0:c1:64:14:b4:
d9:16:0b:c4:08:b9:10:dd:c9:bf:b1:fd:d6:ec:53:
95:c7:44:58:70:51:75:7a:c7:3e:a3:2e:9a:4d:16:
7c:ad:f8:bf:7d:34:d3:81:4c:9a:9d:81:ea:e0:54:
27:47:b2:83:e1:8d:be:ae:14:6c:20:04:0d:2c:7d:
95:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:08:29:E7:AB:A0:AF:17:53:28:DF:03:E9:8A:B8:96:49:EA:E0:D9
X509v3 Authority Key Identifier:
keyid:96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:38:3a:7c:eb:0f:85:df:76:36:9c:ce:50:f1:a2:95:30:e2:
aa:7a:26:4f:ec:9d:ba:61:d2:15:ae:d2:31:e0:d9:c4:65:cc:
24:8e:9a:b9:af:47:7c:f0:6d:dc:4d:16:bf:da:99:bb:cc:94:
49:87:4c:34:ac:2d:8b:ae:93:9e:ad:b1:35:fc:bf:76:3a:90:
35:ad:77:1a:bd:07:95:2f:7a:dd:9a:4f:c0:24:37:ec:a0:b9:
ed:0b:07:0c:83:1a:ea:b1:0a:90:cb:57:ed:29:a7:45:c6:8b:
72:1d:fc:61:e7:5f:40:1e:77:5d:fe:86:93:1d:94:e6:80:72:
f9:eb:15:9f:cd:e3:3b:c9:f3:9c:61:f9:60:70:5b:be:a9:67:
3b:a9:d4:f1:d6:75:62:13:32:d8:44:57:9f:2f:72:4c:d5:22:
9c:c7:ba:84:1a:81:6e:cc:da:1a:8c:4b:33:83:44:e0:fa:22:
d3:09:5f:16:bf:3c:ec:9a:e3:98:bf:5f:92:3d:22:33:95:a7:
2d:c3:55:94:ef:5d:b6:d1:8a:b8:35:a2:c2:0d:76:22:ae:4e:
f3:3e:3e:e7:69:af:dd:92:8a:02:9d:3b:03:61:35:21:d1:1b:
3b:e7:e2:e6:ef:cf:af:89:f9:24:d3:be:d6:20:73:66:9c:c4:
72:24:9f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:18 2026 by rpki-client