Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
File: lQLYuCacawf4FKzwx-1ymz9LWYQ.mft (raw, json)
Hash identifier: d7YTo44gzq3OlBKLWgJd/dX9Rkg2nsJukAYRGGlPAqg=
Subject key identifier: 1A:C4:20:D8:8A:4D:93:98:D6:B2:47:8E:EE:13:D1:3D:24:B0:97:FC
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 019DF94CBC315809DAB648BC99937040F163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
Manifest number: 0ED7
Signing time: Tue 05 May 2026 18:00:48 +0000
Manifest this update: Tue 05 May 2026 18:00:48 +0000
Manifest next update: Wed 06 May 2026 18:00:48 +0000
Files and hashes: 1: 9RuEfPDy7NcEevxrr3brvJp9UCU.roa (hash: 0j6TPncrYZJxKRy7qi/uID511rndKgFVeAqO5t+E9Ok=)
2: Jy63By-FZQfSxze4pLedxCdRCZ0.roa (hash: jlnfFTI0k7/ojNNgBH9AiRYF9L1A99AIRcADl9339mo=)
3: WCsF66PA9S1TOale2_gjPHZiFEg.roa (hash: f4T960+J6F/ksqSdQ9f1iQQLFAEXYjALIzG45UEUz10=)
4: WYd4FngiyPvwOCF4MHu9edNzBbE.roa (hash: 0XbYqroAqzM7rgiJX5PGGwG8zSGtxAutxNMT5mAMC74=)
5: XdlGzRcUNVDEpnO9YL0X7aJRffs.roa (hash: RnuPqv8dWz+ZenQXL5WqtuXV26S9E5sAUavYLyGE+b0=)
6: lQLYuCacawf4FKzwx-1ymz9LWYQ.crl (hash: UZOqzUwF1zS7jeFFYfYHTmGqvXmWD25o2zOQh4rUrc8=)
7: lSgsM1Fln1OkfjXXb0nOQ5rH6yw.roa (hash: 8bA0ZtJ8C6uPRPwuJKR5tibqu47YSzRKxYwvJbXPPoo=)
8: rz6-rsbx5qAXWZK1lflQBq85gpA.roa (hash: xKQhmoOta01iFvpGrvDgJZEcGx54Mj2U+SALSwttG3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:4c:bc:31:58:09:da:b6:48:bc:99:93:70:40:f1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: May 5 18:00:48 2026 GMT
Not After : May 6 18:00:48 2026 GMT
Subject: CN=1ac420d88a4d9398d6b2478eee13d13d24b097fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:1b:20:aa:a0:2b:ec:1b:3c:79:16:0c:07:
53:38:ad:0d:5f:4f:ab:e1:d7:2f:66:ab:7d:84:bd:
c3:58:50:fc:62:2d:2c:92:d9:d2:3b:fa:fe:57:02:
88:be:a1:48:32:80:0c:e1:6b:58:c0:33:d8:98:8e:
b1:cb:8c:c8:03:73:da:9b:a5:ce:db:5d:43:be:09:
b0:a6:38:5f:58:af:76:af:bc:af:fd:7a:3c:c8:8c:
ca:df:45:88:55:64:d8:86:b4:4c:af:df:e6:09:73:
23:ac:d7:23:2f:cd:11:5b:56:76:55:dc:7c:b8:08:
59:f1:b3:26:3d:85:6a:49:eb:89:05:5d:76:ac:0b:
a3:22:79:a7:7b:e7:bc:0b:21:ff:9d:a2:90:42:7d:
ff:97:68:fd:04:1b:49:5f:0b:2d:4a:53:ce:b6:0d:
25:1a:c0:9f:f7:26:61:0d:87:c7:0f:2a:59:4f:68:
73:8f:1f:6d:14:2f:df:e2:2a:ba:46:dc:5b:d9:11:
09:da:6d:02:a0:db:20:36:bf:44:e5:3c:cb:60:eb:
a1:9c:b9:a9:56:57:ec:a8:33:b3:53:9b:97:d1:eb:
09:ca:74:8b:36:74:dd:3f:46:91:0d:e6:94:ad:d7:
2d:3a:cc:c5:61:24:e5:b7:f2:f5:06:7d:d7:92:82:
f3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C4:20:D8:8A:4D:93:98:D6:B2:47:8E:EE:13:D1:3D:24:B0:97:FC
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:83:41:1e:0b:70:2d:ed:dc:92:39:25:c8:ff:34:b3:8e:3b:
43:21:f6:04:c4:9c:e6:69:c1:73:d6:dd:16:4b:e1:a9:83:54:
bb:85:39:a8:f0:96:26:58:a3:a3:f9:3b:b3:ed:cc:67:26:72:
76:67:d1:3c:1e:8b:c7:52:e8:03:ef:f5:36:1f:cf:a3:39:5f:
3f:d8:f1:87:45:5a:d4:2b:50:90:3b:f8:7f:1c:23:57:20:a4:
29:4c:4a:7f:fc:21:e5:4d:0d:97:ce:8a:63:a7:a4:d9:07:86:
2a:3b:f3:86:43:99:67:24:74:55:15:8a:8e:75:97:d0:d2:8b:
69:95:1f:f6:2e:a6:25:48:86:b8:8b:95:1d:be:65:65:89:4f:
33:8f:d8:16:1d:37:59:e1:30:eb:be:bd:9b:33:31:61:c0:d9:
15:d8:59:6f:ed:cd:11:2b:f0:9a:4c:c1:83:8c:ad:28:36:5a:
33:4e:b3:27:71:df:fe:fd:e6:30:6c:17:2e:d3:59:df:77:ea:
c8:bc:4d:f0:f2:fe:25:49:0d:59:63:65:af:d8:6d:f0:ad:78:
d7:cc:27:31:fb:49:a8:23:31:29:19:ab:23:39:5f:e9:11:d5:
2d:17:a2:44:dd:c4:d3:d6:21:b6:e5:43:01:00:06:15:cc:a4:
c8:1b:0b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:20:25 2026 by rpki-client