Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
File: LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json)
Hash identifier: 6EDVamiipcCsLuudEhoj5DIWgCC9JtolWm9iCX7q7xQ=
Subject key identifier: ED:59:67:05:F1:74:BA:EC:C1:73:AE:65:8E:78:8F:D3:BC:57:72:77
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 019ED574B87C826EC54E8639B986D7C4772B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
Manifest number: 0957
Signing time: Wed 17 Jun 2026 12:00:56 +0000
Manifest this update: Wed 17 Jun 2026 12:00:56 +0000
Manifest next update: Thu 18 Jun 2026 12:00:56 +0000
Files and hashes: 1: G8YCS6i0g0ubDbA7T2_j3kguxlE.roa (hash: qHRsf2eTwCBKp1PGCkPmqwvIHubp6Ujq79DZ3/G/6VI=)
2: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: nf0wlc9qzn+aR1jHGlJjBqZLxmakSkk/Ie3ZtgBDYiI=)
3: _Q66pLzef8HiB2dIFrB73IR2x2g.roa (hash: nOI8zIBVSnJqmIf0/LULlXY1T16i45MjeJq+7As4mVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:74:b8:7c:82:6e:c5:4e:86:39:b9:86:d7:c4:77:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: Jun 17 12:00:56 2026 GMT
Not After : Jun 18 12:00:56 2026 GMT
Subject: CN=ed596705f174baecc173ae658e788fd3bc577277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0f:fc:18:6a:db:9f:bc:af:de:a3:15:9d:38:
6b:43:a6:f1:94:27:dc:62:52:2d:b8:0d:a0:29:8c:
13:0a:72:60:95:04:41:e3:7a:4a:e3:f7:e3:88:81:
09:ac:7a:84:bf:09:f2:95:6c:db:53:ba:13:fd:42:
53:e5:d8:21:9f:27:8f:e8:3e:aa:f0:1a:40:68:ef:
8c:62:ba:5b:03:f3:bb:0c:50:e9:c5:0c:e3:22:0e:
fd:1e:57:1d:38:c0:b0:fe:7f:01:08:4e:70:a5:b7:
1e:0a:3d:c2:b4:67:84:6d:89:20:13:36:0a:91:79:
a7:c2:a9:88:07:f8:e6:e7:f0:bc:ac:e9:ca:23:88:
70:db:5c:bf:29:26:b8:52:8c:38:21:ee:dc:9e:9f:
f6:ee:78:9d:f4:03:9c:6c:22:16:03:b3:36:0f:df:
5a:88:28:41:69:94:85:b6:26:aa:0a:a2:bf:6f:7a:
e0:1c:eb:93:58:84:0d:07:3f:de:55:bc:eb:46:bd:
a3:69:38:82:ed:0c:a0:2e:ad:0f:8d:78:86:1b:b2:
36:44:55:3d:d4:0f:54:37:bb:f7:59:f0:c7:1a:ec:
4f:c2:54:c3:1d:9d:24:6d:9d:78:56:3b:0e:78:c7:
b0:02:0a:95:de:66:8b:3e:bb:cc:97:ff:d7:2a:de:
58:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:59:67:05:F1:74:BA:EC:C1:73:AE:65:8E:78:8F:D3:BC:57:72:77
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:bd:09:03:8c:65:c7:34:a0:bd:95:23:bd:e2:88:3c:f8:53:
d8:71:0e:2d:37:e0:a7:c4:47:5f:28:43:a2:4b:22:69:e6:14:
74:ce:33:07:53:1d:65:15:ac:0b:2e:48:1f:18:69:42:b8:c1:
71:f3:5e:a9:eb:e9:1d:fc:b1:a7:41:be:6e:8c:dc:cb:1d:83:
8a:fb:32:b1:17:fa:74:08:d5:5d:57:cd:8c:70:1e:a3:8d:86:
8b:1c:04:66:f9:0a:ca:6d:22:5d:e0:a8:ea:c6:4f:cb:d4:d6:
01:ff:ec:f0:8a:b4:21:48:aa:e0:99:a2:c0:48:8c:3e:e9:a3:
6a:16:67:14:09:4d:4b:61:d3:d2:d0:81:1d:cc:2e:28:d5:59:
ec:d0:6a:74:49:a3:f6:71:23:32:60:de:5a:3b:34:9e:71:c1:
5e:1d:70:0a:7f:6f:63:43:7a:a0:5a:1f:a0:a2:00:ed:ea:01:
2f:e6:32:22:35:a9:54:59:e1:c4:dd:f3:c0:60:f5:98:b1:6e:
aa:ad:25:7e:cf:04:09:7d:44:44:6b:4f:b4:53:89:43:85:c9:
7d:46:42:e7:02:f0:fa:9a:af:b9:d6:ce:5c:72:37:7b:03:4f:
69:2b:94:bc:22:77:a9:29:03:3e:40:b3:87:c9:81:21:7d:a6:
a4:55:a3:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7VdLh8gm7FToY5uYbXxHcrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMGQ2MjEyOWQwMjA2M2Q0MDllYmZiMDFjNjQ4ZDQ2ZjM0
ODg5ZTAwHhcNMjYwNjE3MTIwMDU2WhcNMjYwNjE4MTIwMDU2WjAzMTEwLwYDVQQD
EyhlZDU5NjcwNWYxNzRiYWVjYzE3M2FlNjU4ZTc4OGZkM2JjNTc3Mjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ/8GGrbn7yv3qMVnThrQ6bxlCfc
YlItuA2gKYwTCnJglQRB43pK4/fjiIEJrHqEvwnylWzbU7oT/UJT5dghnyeP6D6q
8BpAaO+MYrpbA/O7DFDpxQzjIg79HlcdOMCw/n8BCE5wpbceCj3CtGeEbYkgEzYK
kXmnwqmIB/jm5/C8rOnKI4hw21y/KSa4Uow4Ie7cnp/27nid9AOcbCIWA7M2D99a
iChBaZSFtiaqCqK/b3rgHOuTWIQNBz/eVbzrRr2jaTiC7QygLq0PjXiGG7I2RFU9
1A9UN7v3WfDHGuxPwlTDHZ0kbZ14VjsOeMewAgqV3maLPrvMl//XKt5YkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1ZZwXxdLrswXOuZY54j9O8V3J3MB8GA1UdIwQY
MBaAFC0NYhKdAgY9QJ6/sBxkjUbzSIngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wNjBmN2UtOGNmMC00ZWMyLWFmN2Et
MWRhZWE0YmM5NGIzLzEvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wNjBmN2UtOGNmMC00ZWMyLWFmN2EtMWRhZWE0YmM5NGIz
LzEvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGb0JA4xl
xzSgvZUjveKIPPhT2HEOLTfgp8RHXyhDoksiaeYUdM4zB1MdZRWsCy5IHxhpQrjB
cfNeqevpHfyxp0G+bozcyx2DivsysRf6dAjVXVfNjHAeo42GixwEZvkKym0iXeCo
6sZPy9TWAf/s8Iq0IUiq4JmiwEiMPumjahZnFAlNS2HT0tCBHcwuKNVZ7NBqdEmj
9nEjMmDeWjs0nnHBXh1wCn9vY0N6oFofoKIA7eoBL+YyIjWpVFnhxN3zwGD1mLFu
qq0lfs8ECX1ERGtPtFOJQ4XJfUZC5wLw+pqvudbOXHI3ewNPaSuUvCJ3qSkDPkCz
h8mBIX2mpFWjcQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 15:34:42 2026 by rpki-client