Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.mft
File: lqOP7q6QPbyyj_kzPgQ15-lIi0s.mft (raw, json)
Hash identifier: PgbRBeB1+MooBYF36h9VZCZM9vXgkvB5rQBx3Pkc4RA=
Subject key identifier: B8:85:3F:BB:F5:8E:90:48:A7:1C:41:40:CA:67:A4:40:CD:51:D6:96
Authority key identifier: 96:A3:8F:EE:AE:90:3D:BC:B2:8F:F9:33:3E:04:35:E7:E9:48:8B:4B
Certificate issuer: /CN=96a38feeae903dbcb28ff9333e0435e7e9488b4b
Certificate serial: 01A17DE14044C8446A6D72B76FEA868AB4F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqOP7q6QPbyyj_kzPgQ15-lIi0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.mft
Manifest number: 013F
Signing time: Tue 27 Oct 2026 15:01:16 +0000
Manifest this update: Tue 27 Oct 2026 15:01:16 +0000
Manifest next update: Wed 28 Oct 2026 15:01:16 +0000
Files and hashes: 1: ItN4mW12iVyH6BrYFKfPQy7lr08.roa (hash: /6ILhaZ9nnrQCe2x3LhpJcOwVGQyxXtUIIDXznVVDPA=)
2: lqOP7q6QPbyyj_kzPgQ15-lIi0s.crl (hash: WKXtKbizHEvB5tFGBvikYrM0DsjcKKvYv7Ej3IcMgiE=)
3: qSB-Fr5on66jEvQLa_-E0yx5agQ.roa (hash: /d6onL0LuXW1jRb8TBZIzkovZYA/Bhrij6W7usA00vo=)
4: yR4cNbVarjz8LFgC6lYaD_f6Y4M.roa (hash: QiANg/lT9BhVA0Gyjnvg/6FNpwOrRHBchB0Jd5cbcxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqOP7q6QPbyyj_kzPgQ15-lIi0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:40:44:c8:44:6a:6d:72:b7:6f:ea:86:8a:b4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a38feeae903dbcb28ff9333e0435e7e9488b4b
Validity
Not Before: Oct 27 15:01:16 2026 GMT
Not After : Oct 28 15:01:16 2026 GMT
Subject: CN=b8853fbbf58e9048a71c4140ca67a440cd51d696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:32:5b:1e:74:c3:07:e5:f8:1b:51:07:5e:7d:
df:94:fa:24:ad:71:72:62:0c:dd:94:aa:37:50:81:
97:a3:f1:7f:5f:0f:31:62:c2:63:9b:1f:97:2f:5a:
e4:81:0a:c7:d0:9d:86:65:8f:07:0f:47:9c:7d:6c:
46:47:97:5c:55:2a:88:c7:73:eb:62:4e:96:52:c3:
13:1f:80:c1:f5:44:d9:00:75:8b:90:4d:7e:71:59:
10:21:0f:f7:73:da:f7:dc:66:f2:1a:d0:3c:d4:61:
c8:18:5f:a7:dd:ca:50:f6:07:a3:48:ea:ea:e2:81:
d6:5b:57:ba:de:1c:f1:cd:18:df:36:d3:37:4c:41:
a5:5a:91:b9:84:09:05:6d:bc:00:05:5d:00:24:cf:
b5:43:0c:3a:bc:36:d9:7b:09:6a:3b:a5:f4:00:32:
14:1f:d5:b8:bc:22:3b:80:6a:a7:62:9f:6f:04:9e:
09:6b:db:28:bd:92:cb:d9:43:40:70:cb:63:c6:60:
74:47:64:13:c7:7b:9c:98:b3:94:b6:3b:3b:88:a1:
80:7e:8d:ee:74:32:f3:af:e4:43:f9:9c:f8:d7:8b:
b3:8a:b5:b3:ec:47:7a:24:cc:fb:9a:71:7a:d1:dc:
f9:8e:38:32:22:61:a0:f8:20:aa:22:a0:0f:76:4f:
b4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:85:3F:BB:F5:8E:90:48:A7:1C:41:40:CA:67:A4:40:CD:51:D6:96
X509v3 Authority Key Identifier:
keyid:96:A3:8F:EE:AE:90:3D:BC:B2:8F:F9:33:3E:04:35:E7:E9:48:8B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqOP7q6QPbyyj_kzPgQ15-lIi0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:22:b0:2b:fd:9d:65:e7:21:53:00:c0:21:81:14:ec:69:f4:
f6:6f:6f:6f:ca:6d:08:28:4d:66:f5:2e:6d:8a:1e:97:bd:13:
6f:09:75:b9:1b:e3:a8:b5:40:30:7c:7e:41:5d:e9:ae:e4:63:
f9:1a:75:a7:d9:8a:de:10:9f:62:23:d8:a6:f4:f4:e7:30:7c:
af:ad:36:4f:b8:30:e7:b5:25:f0:10:0e:21:2f:22:f3:75:c6:
8a:5b:3d:11:51:2d:45:b6:1c:fd:bc:31:23:17:0f:a2:61:98:
e0:01:fd:43:52:11:68:c7:0e:67:34:29:46:d6:5d:09:ed:37:
bb:b3:4f:22:e8:d9:9a:db:d6:f0:8b:a3:74:d3:da:e5:08:dd:
71:c1:8a:76:25:c4:3a:f3:4e:9f:a8:ad:12:c2:9a:51:6b:c9:
17:9f:22:06:2f:d0:fc:90:7a:b4:ac:15:44:55:96:0e:06:04:
af:16:61:99:b6:4a:00:fb:16:10:16:88:ca:04:aa:af:3f:88:
29:74:b7:75:bf:26:6f:28:51:b3:7a:14:f9:db:e4:09:aa:a6:
c9:69:52:21:3a:e3:68:e9:a4:be:37:34:c2:75:05:43:31:52:
c9:6d:09:86:18:df:e9:41:f2:ef:eb:a3:b1:fb:b6:5f:23:26:
ac:a0:b8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:32:36 2026 by rpki-client