Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/LQ6xYWGbmZrS7TEVYHN02-X09Yk.mft
File: LQ6xYWGbmZrS7TEVYHN02-X09Yk.mft (raw, json)
Hash identifier: CvokBEvFjuR5fSRtXPpxLrQqE9DTCgADfZsP/QGExtY=
Subject key identifier: 35:D3:0F:07:7D:73:63:7C:F9:CC:AD:C0:28:BA:28:BF:37:C6:46:7A
Authority key identifier: 2D:0E:B1:61:61:9B:99:9A:D2:ED:31:15:60:73:74:DB:E5:F4:F5:89
Certificate issuer: /CN=2d0eb161619b999ad2ed3115607374dbe5f4f589
Certificate serial: 01A17816452E054F9D5BFBD79128ACC458E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ6xYWGbmZrS7TEVYHN02-X09Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/LQ6xYWGbmZrS7TEVYHN02-X09Yk.mft
Manifest number: 013C
Signing time: Mon 26 Oct 2026 12:01:27 +0000
Manifest this update: Mon 26 Oct 2026 12:01:27 +0000
Manifest next update: Tue 27 Oct 2026 12:01:27 +0000
Files and hashes: 1: ELrx4Q17sWsITam7S8EZhlEpW6c.roa (hash: mfENEikBBj3SnmLqMx+zV5kIHlMvuGZwjX1HrALHXH0=)
2: LQ6xYWGbmZrS7TEVYHN02-X09Yk.crl (hash: k3v4ygj/ejLO+dVhGxOnjOfVOhu8p6rcEn7zMKKTsM8=)
3: mJqKOIkFyoOYp1GMyp0ruDBB97k.roa (hash: scvnlkEX/qiRygLnLE6KpQY7LUS1CDurNLQjTw5koJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/LQ6xYWGbmZrS7TEVYHN02-X09Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/LQ6xYWGbmZrS7TEVYHN02-X09Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ6xYWGbmZrS7TEVYHN02-X09Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:16:45:2e:05:4f:9d:5b:fb:d7:91:28:ac:c4:58:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0eb161619b999ad2ed3115607374dbe5f4f589
Validity
Not Before: Oct 26 12:01:27 2026 GMT
Not After : Oct 27 12:01:27 2026 GMT
Subject: CN=35d30f077d73637cf9ccadc028ba28bf37c6467a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cf:e4:bb:27:6a:b0:58:04:42:0e:be:b1:d9:
df:55:81:fe:36:01:7e:98:8a:6a:ea:70:c4:9c:7b:
81:9a:c7:2e:59:7d:04:27:f1:e8:8f:81:9a:93:ee:
9c:de:32:a3:a9:c5:3a:4e:6c:ae:e7:08:18:12:d5:
65:82:87:2f:83:10:e1:ce:49:28:aa:3c:2e:2e:19:
4f:44:70:c4:f4:d3:5e:22:d9:91:41:ed:de:1b:e4:
9f:d6:2a:b9:ad:ee:29:35:9d:f9:d3:30:48:f2:67:
02:2b:0b:d4:9d:14:eb:fa:dd:1a:11:bb:09:24:d1:
6e:02:33:50:a3:86:d4:13:75:11:30:1a:13:40:a8:
e9:4d:32:11:54:96:64:f0:a5:df:9b:f0:32:c4:79:
6d:a8:b5:cc:77:e2:f5:29:c3:ad:89:bb:72:4e:a9:
cf:a2:0f:38:dc:9e:0e:b2:8d:69:f9:7a:73:fe:08:
fd:00:1f:2b:61:f5:63:85:8e:8c:88:a9:a6:69:16:
d6:bc:7d:14:af:95:9b:8e:ea:2e:80:b3:da:2a:85:
dd:03:51:e0:fc:82:da:77:c1:0d:9d:e7:a3:89:8c:
80:6f:30:c4:33:4c:e2:a2:1e:89:ea:3a:de:4e:56:
5d:cd:60:8a:f7:2d:8c:29:67:53:dc:d3:9f:9e:85:
68:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D3:0F:07:7D:73:63:7C:F9:CC:AD:C0:28:BA:28:BF:37:C6:46:7A
X509v3 Authority Key Identifier:
keyid:2D:0E:B1:61:61:9B:99:9A:D2:ED:31:15:60:73:74:DB:E5:F4:F5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ6xYWGbmZrS7TEVYHN02-X09Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/LQ6xYWGbmZrS7TEVYHN02-X09Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/LQ6xYWGbmZrS7TEVYHN02-X09Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:5e:32:90:e3:41:b3:a7:fe:85:9f:0a:a2:df:6e:00:cf:ab:
6f:cd:42:e8:d8:2c:f2:ec:25:a4:30:18:19:49:c7:77:7a:d1:
ad:0d:82:b7:9c:06:a7:e6:9b:de:bc:53:93:aa:03:df:5f:23:
7b:68:0b:d4:0a:bb:e2:9c:48:73:d4:f3:d6:05:74:f2:ee:62:
79:b0:24:81:70:a7:e1:5e:4a:06:91:03:4e:06:bb:fe:26:08:
6d:8d:0d:82:3f:50:47:19:e7:0f:b8:f5:af:f8:a1:94:dc:5c:
c1:b8:df:3c:be:f2:63:8d:ed:5e:00:ba:0c:8c:62:ce:b7:8f:
da:f7:a0:b2:d2:23:c5:2d:6f:c2:4f:17:48:ba:38:d4:45:43:
b9:b5:16:13:7e:58:0b:a2:52:b9:e9:56:03:42:f2:50:1d:1a:
2c:07:b4:1a:08:0d:5f:c7:a4:0d:57:ad:4d:0e:1c:3a:ee:d2:
71:fe:fb:10:1f:33:af:7d:a0:15:6f:fe:cd:69:51:0e:c5:51:
af:2c:c0:95:55:0a:69:b2:e3:11:e0:93:61:19:15:99:e1:4e:
e9:03:4c:8f:90:b7:67:6f:55:11:45:b6:e7:91:b2:52:ca:f2:
39:bd:cf:a3:d0:f2:6b:e1:4e:d7:a0:45:3c:cb:ec:ae:3e:dd:
da:22:1a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:04:15 2026 by rpki-client