Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
File: LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json)
Hash identifier: hSP+d44toEdktIMgUbcRj2+X73XWfMxY7kv61QIJrWU=
Subject key identifier: F5:6F:33:3A:19:2B:21:93:38:F8:F5:85:D6:A1:33:33:84:68:A5:30
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 01A128439BB687D92971E6F731EACCAB6B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
Manifest number: 0A8B
Signing time: Sun 11 Oct 2026 00:01:21 +0000
Manifest this update: Sun 11 Oct 2026 00:01:21 +0000
Manifest next update: Mon 12 Oct 2026 00:01:21 +0000
Files and hashes: 1: G8YCS6i0g0ubDbA7T2_j3kguxlE.roa (hash: qHRsf2eTwCBKp1PGCkPmqwvIHubp6Ujq79DZ3/G/6VI=)
2: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: gOEgEiAX8VDSIpdrb+uTMm+iE7Bu6qCBsuAvvoNnZgY=)
3: _Q66pLzef8HiB2dIFrB73IR2x2g.roa (hash: nOI8zIBVSnJqmIf0/LULlXY1T16i45MjeJq+7As4mVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 00:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:43:9b:b6:87:d9:29:71:e6:f7:31:ea:cc:ab:6b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: Oct 11 00:01:21 2026 GMT
Not After : Oct 12 00:01:21 2026 GMT
Subject: CN=f56f333a192b219338f8f585d6a133338468a530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7a:06:55:3f:f3:f7:e0:c4:ca:12:ae:2b:18:
e5:36:a5:f9:a7:a7:10:2d:93:ff:0f:84:55:5a:8f:
9a:ed:a4:b7:06:be:34:aa:8b:56:ce:2d:13:2f:69:
31:61:e7:70:4b:52:39:13:f3:81:39:af:81:c1:a3:
bd:66:fd:97:89:33:53:2b:fd:0e:14:5d:9f:e1:73:
e9:2d:14:ba:cf:3f:22:a2:20:d8:c6:3a:40:e4:ba:
61:4c:5c:e9:52:73:8d:9c:c7:22:b0:65:75:0e:48:
26:e6:1b:0d:e1:1b:e1:44:42:e0:c9:18:91:b6:8e:
ec:32:48:bb:fd:be:b1:e7:b5:61:87:a2:a4:c0:40:
fe:72:21:ca:2a:98:e4:2c:d4:bf:0e:b2:9f:da:6a:
8c:f3:ca:23:08:94:b8:66:4b:8b:f2:4c:b4:f8:b1:
c6:67:5e:8c:b6:47:b6:03:13:77:18:a7:ba:40:02:
2f:67:70:62:2d:78:fc:e0:4a:73:96:10:67:c4:9b:
64:37:05:8b:4b:c7:3f:3c:9e:f1:4a:28:6e:22:72:
cf:07:dd:5f:0c:85:13:7f:fc:0d:f6:db:be:87:40:
bf:81:be:a9:95:27:e5:fa:e3:15:ce:3c:d7:6e:40:
08:45:cc:32:46:0e:c7:7f:ab:8a:91:7a:f5:23:25:
24:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6F:33:3A:19:2B:21:93:38:F8:F5:85:D6:A1:33:33:84:68:A5:30
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8e:cd:87:6a:8a:37:15:84:cc:39:bb:c6:83:3c:98:6b:66:
60:02:a3:6f:4b:02:fe:36:af:0b:b3:02:58:72:bc:a2:5b:25:
59:17:7e:aa:17:67:d0:15:63:6d:e1:be:63:31:1c:68:77:c2:
a6:5f:1d:fd:37:b3:a9:bf:ad:bc:03:d9:6a:dc:33:90:e2:aa:
00:03:23:99:cd:f5:0f:a3:be:97:2f:48:ec:61:03:d2:25:fc:
0f:fc:e2:a6:7a:23:2a:62:25:aa:cd:37:ee:61:00:3b:ed:a9:
f1:d1:50:09:5c:96:37:ce:c4:39:28:a8:47:5f:10:8d:d8:c8:
12:2d:2f:50:73:b8:5e:6f:03:bf:6b:f4:5a:79:b2:d8:30:32:
fc:a2:0a:d7:ca:72:b6:72:00:4f:56:8f:37:f0:75:e3:22:3c:
8f:c6:76:05:d3:67:54:37:f5:76:d0:60:db:5f:40:c7:60:9d:
9e:aa:c7:20:3a:be:01:95:e0:2b:23:9e:6b:e9:63:02:fc:2c:
0a:6f:e7:33:c9:ac:76:16:5f:f2:1a:5e:58:8d:42:2b:6b:0f:
dc:76:a4:f9:f3:c8:c3:5b:c2:e2:e2:c7:ea:a1:c1:5e:e9:9b:
1e:ac:59:45:4c:2e:78:81:06:e4:3b:d7:84:25:e9:a0:03:c9:
bf:6f:b6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:50:48 2026 by rpki-client