Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
File: LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json)
Hash identifier: WwPg4IKbjbVVdKXkoZ4DlMsy6+GgoF5KWzWK3CINmdg=
Subject key identifier: 08:EE:EA:4C:29:4B:A4:64:D1:D1:50:73:5A:88:CB:60:8B:40:72:FD
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 019CEAEE9306C485B3C4BF06C8F19CB8B20C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
Manifest number: 0859
Signing time: Sat 14 Mar 2026 06:00:29 +0000
Manifest this update: Sat 14 Mar 2026 06:00:29 +0000
Manifest next update: Sun 15 Mar 2026 06:00:29 +0000
Files and hashes: 1: G8YCS6i0g0ubDbA7T2_j3kguxlE.roa (hash: qHRsf2eTwCBKp1PGCkPmqwvIHubp6Ujq79DZ3/G/6VI=)
2: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: cC17k1mb+xEDEJgOSGCOMmbgfIVljr8VLTQH6f/yNG4=)
3: _Q66pLzef8HiB2dIFrB73IR2x2g.roa (hash: nOI8zIBVSnJqmIf0/LULlXY1T16i45MjeJq+7As4mVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ea:ee:93:06:c4:85:b3:c4:bf:06:c8:f1:9c:b8:b2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: Mar 14 06:00:29 2026 GMT
Not After : Mar 15 06:00:29 2026 GMT
Subject: CN=08eeea4c294ba464d1d150735a88cb608b4072fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4e:aa:a8:c9:c9:de:d8:b6:55:50:a1:4c:d4:
9f:60:6d:72:7f:ea:bc:01:d0:a8:2e:b4:40:80:63:
c9:48:81:c8:eb:80:34:9b:15:f1:3e:1c:1c:98:da:
45:66:1a:6a:35:ce:04:10:7c:87:06:c0:1c:a0:3e:
9f:7b:27:5f:7e:53:be:60:76:9d:34:ac:15:6c:dd:
ba:f4:03:e5:1c:53:b3:3e:8f:65:ec:4f:6a:e5:53:
7f:c8:65:7a:a2:f0:55:2d:63:3d:7c:68:44:eb:c5:
a4:62:a1:43:b9:ad:0f:0d:49:b6:03:6a:5f:3f:47:
e5:d0:a2:ea:fd:51:19:d1:b9:46:a9:47:f4:2f:bb:
e3:63:48:2e:c5:f9:18:c6:75:08:b3:3b:6c:12:12:
5d:71:21:ef:fb:9a:7c:36:99:59:de:a1:83:2b:97:
86:9a:98:7e:58:ec:e6:74:e5:68:b5:a7:4f:94:9b:
d4:a8:21:b5:c7:b6:ea:d4:a3:ba:a2:43:f7:61:f6:
87:ba:ec:98:03:1f:bd:e2:54:a4:87:d9:2c:e9:d6:
74:85:ff:05:37:3f:a5:61:ad:2f:d1:86:a7:77:23:
c0:57:a9:26:50:1f:ab:e8:9d:27:20:d4:4a:6e:01:
5f:9a:93:fb:4d:1f:dc:b2:15:87:6b:80:3b:57:ba:
c6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EE:EA:4C:29:4B:A4:64:D1:D1:50:73:5A:88:CB:60:8B:40:72:FD
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:44:91:14:0a:55:21:35:99:9f:a1:00:fd:22:da:82:7f:ba:
32:ba:9d:df:c9:18:7c:d0:e9:14:cf:c0:01:cd:48:a2:5b:67:
c7:72:1d:6f:11:cb:76:f7:1e:af:1d:04:54:57:60:d8:76:d5:
11:1f:64:65:2d:7a:91:87:21:fc:a5:72:c3:7a:63:ae:48:e5:
41:91:b6:d3:35:25:9a:7e:8d:31:d2:99:79:88:b4:d1:a9:2a:
76:f0:e0:48:4b:fc:37:8c:ff:55:12:56:a8:97:d6:0a:3c:7c:
97:34:61:fd:41:7f:03:f1:37:92:bf:63:35:c5:91:90:8c:92:
9d:61:9c:92:fe:16:7d:1f:05:96:3a:80:13:41:c4:d8:f4:e4:
1f:31:43:8a:78:50:85:f8:3a:5a:5f:4e:63:09:45:59:c6:8a:
c0:e2:65:d2:f4:4b:ff:0f:d6:52:ae:79:0a:1a:b3:45:10:ff:
f3:16:f8:59:72:e6:78:50:84:d9:a4:f1:b1:c6:30:44:50:99:
97:01:66:87:61:f8:cb:32:76:2a:c1:0b:77:f8:e5:c9:8c:64:
cf:cb:79:68:6b:93:55:4c:f9:20:fd:5e:75:a7:aa:fe:fb:f7:
19:73:fb:d0:16:6a:fe:0e:f2:77:e5:64:4a:41:0f:20:fa:48:
c5:df:e6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 14:58:05 2026 by rpki-client