Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
File: lQLYuCacawf4FKzwx-1ymz9LWYQ.mft (raw, json)
Hash identifier: UH04pC73MgmBBuxLU6WcBrHAmJEmALw+1KbfnmRJ6BI=
Subject key identifier: 06:57:C3:AD:07:0C:37:D6:77:E6:7F:D8:1F:B8:FB:42:F4:92:AB:CB
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 019FCAB823FE3241E2377B6638CEC4F0FDFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
Manifest number: 0FC8
Signing time: Tue 04 Aug 2026 03:01:33 +0000
Manifest this update: Tue 04 Aug 2026 03:01:33 +0000
Manifest next update: Wed 05 Aug 2026 03:01:33 +0000
Files and hashes: 1: 9RuEfPDy7NcEevxrr3brvJp9UCU.roa (hash: 0j6TPncrYZJxKRy7qi/uID511rndKgFVeAqO5t+E9Ok=)
2: Jy63By-FZQfSxze4pLedxCdRCZ0.roa (hash: jlnfFTI0k7/ojNNgBH9AiRYF9L1A99AIRcADl9339mo=)
3: WCsF66PA9S1TOale2_gjPHZiFEg.roa (hash: f4T960+J6F/ksqSdQ9f1iQQLFAEXYjALIzG45UEUz10=)
4: WYd4FngiyPvwOCF4MHu9edNzBbE.roa (hash: 0XbYqroAqzM7rgiJX5PGGwG8zSGtxAutxNMT5mAMC74=)
5: XdlGzRcUNVDEpnO9YL0X7aJRffs.roa (hash: RnuPqv8dWz+ZenQXL5WqtuXV26S9E5sAUavYLyGE+b0=)
6: lQLYuCacawf4FKzwx-1ymz9LWYQ.crl (hash: HBa22gVm8uJlF6y3irGajCUlc5X7qJZSU+DOyGm23tI=)
7: lSgsM1Fln1OkfjXXb0nOQ5rH6yw.roa (hash: 8bA0ZtJ8C6uPRPwuJKR5tibqu47YSzRKxYwvJbXPPoo=)
8: rz6-rsbx5qAXWZK1lflQBq85gpA.roa (hash: xKQhmoOta01iFvpGrvDgJZEcGx54Mj2U+SALSwttG3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ca:b8:23:fe:32:41:e2:37:7b:66:38:ce:c4:f0:fd:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Aug 4 03:01:33 2026 GMT
Not After : Aug 5 03:01:33 2026 GMT
Subject: CN=0657c3ad070c37d677e67fd81fb8fb42f492abcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:16:4a:00:98:29:43:a2:3b:ce:d9:9b:5e:63:
55:24:dd:84:f7:e3:52:89:6a:ce:3c:d6:2f:cb:ec:
04:a7:94:ab:f3:45:e7:2e:12:ca:db:ba:a8:87:b9:
c1:7f:82:46:5c:47:e2:01:b8:68:2a:70:d8:c8:89:
b7:b1:d3:49:fc:ad:db:32:0b:3e:18:42:ba:90:b4:
ae:f6:9a:b7:d5:bd:cf:ba:c6:7c:9e:8a:be:8f:42:
38:56:dd:25:29:50:cb:9b:e4:1f:cf:f6:cd:1c:2c:
5c:7c:bd:2c:fa:04:56:ee:25:56:07:78:d6:eb:9a:
a8:03:3a:2e:27:35:9b:cc:62:a4:69:da:3b:3a:b8:
f8:4c:7a:c2:2c:32:ff:59:36:ca:2d:e1:42:62:86:
f2:76:4c:3d:e5:f1:34:c3:e8:13:5e:d1:be:b3:aa:
c9:01:b1:53:fc:b5:d9:87:27:92:8f:40:3a:79:67:
cb:d8:47:fa:f3:7d:7b:7e:3a:5a:82:91:a2:3f:5a:
b2:b2:82:7e:94:03:51:ae:f7:7d:24:48:8e:f3:27:
82:35:9f:07:75:25:0d:45:b8:f7:fb:53:b5:39:f3:
50:87:82:c8:57:d4:c5:ec:ec:b2:e8:3f:a1:3d:65:
75:0c:bc:f4:30:cc:43:cf:0f:5a:41:3f:7b:b3:8d:
73:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:57:C3:AD:07:0C:37:D6:77:E6:7F:D8:1F:B8:FB:42:F4:92:AB:CB
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d2:57:99:0d:0b:99:bd:a6:47:e0:fc:f6:7d:d2:0e:27:b0:
a7:05:f3:b5:e4:4d:98:05:34:bb:dc:ce:06:3b:80:ca:ce:a4:
c7:8a:a5:28:3f:50:cf:15:a2:d6:29:52:97:a1:6f:bb:d6:ec:
3e:8a:24:79:d6:29:8a:cf:7a:bc:37:43:98:5f:a9:84:57:d7:
a3:a6:f9:83:2f:4d:b4:5a:c4:8f:5b:46:66:d5:7c:aa:ed:94:
85:8e:6d:6e:b7:93:2e:d8:39:5e:53:da:16:23:a6:5b:80:89:
de:4b:54:e8:4a:b6:c0:fc:82:43:c8:a8:58:af:9d:37:1b:f8:
2e:f9:1a:72:d5:fe:37:d0:dc:45:c5:9c:0d:96:1d:d4:52:b8:
00:2c:f2:d1:f9:84:bb:c4:7b:3c:02:58:49:fc:e6:8c:ec:94:
e6:6d:f2:98:59:af:d9:56:e9:3a:82:2a:45:62:c8:a8:ff:f4:
4e:56:bd:d5:4f:32:4f:cf:6f:f1:3b:58:a2:e2:8d:db:c7:47:
4c:14:17:24:9b:36:9e:c5:51:9d:39:95:ec:23:2b:50:56:e7:
4d:8c:43:74:8f:10:5e:55:d5:72:33:c8:52:5d:f5:60:27:6e:
9b:9f:ea:a6:eb:06:dc:ee:5b:a0:18:55:00:d3:de:bb:47:d7:
26:c3:82:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 08:46:59 2026 by rpki-client