Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
File: lQRT7UhedocGF6Dk9GdRRMMZLLI.mft (raw, json)
Hash identifier: CNWp9LCPX0ZPOdBCyWU6XACFo7lEBC5UMdCws3b4D1o=
Subject key identifier: CF:2E:0F:AB:09:82:AC:6B:AB:BC:E9:4B:1E:90:4B:F4:87:BB:51:14
Authority key identifier: 95:04:53:ED:48:5E:76:87:06:17:A0:E4:F4:67:51:44:C3:19:2C:B2
Certificate issuer: /CN=950453ed485e76870617a0e4f4675144c3192cb2
Certificate serial: 019E491FD9B29AF3221463FA4B5D00F5EE82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQRT7UhedocGF6Dk9GdRRMMZLLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
Manifest number: 1D
Signing time: Thu 21 May 2026 06:01:24 +0000
Manifest this update: Thu 21 May 2026 06:01:24 +0000
Manifest next update: Fri 22 May 2026 06:01:24 +0000
Files and hashes: 1: lQRT7UhedocGF6Dk9GdRRMMZLLI.crl (hash: fe0LGoFFSvcOYml1BVvFBSohpM4vOvOunctBFW5Y96I=)
2: vzCvsJOD_uIWGn5EN7k-vrcSiXA.roa (hash: PxNjc56uGjg5viTOwh/Wnu/9ehDdXvtZoR0adzNgjJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQRT7UhedocGF6Dk9GdRRMMZLLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:49:1f:d9:b2:9a:f3:22:14:63:fa:4b:5d:00:f5:ee:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950453ed485e76870617a0e4f4675144c3192cb2
Validity
Not Before: May 21 06:01:24 2026 GMT
Not After : May 22 06:01:24 2026 GMT
Subject: CN=cf2e0fab0982ac6babbce94b1e904bf487bb5114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c4:2a:e5:48:81:48:f4:34:72:e2:9b:d9:29:
74:3d:05:02:3d:d9:f0:25:b5:2a:67:97:dd:06:82:
22:36:78:fe:31:fb:64:80:60:96:af:50:9d:b4:9f:
2d:b0:f5:71:3b:0f:0c:04:d0:28:64:e0:e1:54:77:
24:4f:7e:19:58:3d:06:6a:74:c1:9a:04:5c:0b:6a:
9a:72:db:7f:69:e1:1a:2d:c0:ab:27:da:8a:35:ba:
7c:4c:dc:59:fa:19:12:c4:b9:86:15:3e:3c:79:85:
66:6c:4b:70:f2:ae:0f:88:18:1e:e4:b7:0b:05:f5:
78:98:95:d9:0e:a2:77:5e:49:49:24:6a:e0:20:08:
78:9f:2c:01:34:29:a5:40:85:db:c6:6c:3c:d7:6e:
33:ad:e9:ca:50:6b:e8:7b:3c:3f:ff:20:15:c1:c9:
2d:51:4a:df:cf:09:1f:0a:4e:cc:4a:06:fe:7d:b8:
41:21:f8:68:e6:93:cf:ce:bd:a4:b9:69:84:4b:d2:
f8:e9:46:d7:1a:0b:64:51:f1:9e:8d:ff:6f:ba:aa:
f0:08:27:99:a8:a2:b9:4a:2f:a0:f9:a7:d1:60:6e:
7c:78:ed:92:60:e3:82:a5:61:14:b6:00:7f:eb:cc:
4a:ac:97:f0:db:ad:18:0a:a3:ae:ab:8e:92:80:2c:
7f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2E:0F:AB:09:82:AC:6B:AB:BC:E9:4B:1E:90:4B:F4:87:BB:51:14
X509v3 Authority Key Identifier:
keyid:95:04:53:ED:48:5E:76:87:06:17:A0:E4:F4:67:51:44:C3:19:2C:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQRT7UhedocGF6Dk9GdRRMMZLLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:4f:d5:a5:eb:f1:8f:59:81:60:2f:ce:b5:2d:a2:b3:4e:30:
ce:e5:b8:74:cc:7c:46:47:7c:46:2f:c5:40:25:7e:2c:f8:5c:
06:6e:4f:0f:b7:dc:e5:48:87:52:31:e6:af:43:64:97:1d:b6:
e0:73:b6:00:87:7c:ba:1c:51:18:9d:68:11:87:01:73:d6:db:
1a:b5:08:a7:5a:6e:e8:58:f4:72:85:eb:70:c9:4f:ef:68:a3:
8d:17:2b:37:fb:71:99:9f:8a:f4:91:8f:35:01:1e:40:2e:c5:
ba:97:67:25:d7:cd:ae:b7:6a:e4:70:85:c9:d2:c4:5c:b7:a3:
ae:3b:de:8e:5c:a0:e4:3f:69:55:66:ff:53:41:c6:92:7d:d8:
5e:9f:33:a9:cb:66:fb:14:70:ae:ed:3b:b3:99:d0:eb:f6:7c:
ea:11:6d:02:e4:5c:1b:51:e7:cb:2e:d0:c9:91:d8:d2:24:87:
f9:42:77:21:19:63:74:73:c1:f5:5c:0d:c9:62:13:65:2a:04:
26:e3:e3:4a:8c:0f:bb:a4:02:f3:11:1d:71:49:fe:23:c0:72:
f7:49:54:e0:05:d1:72:45:30:91:b4:c4:29:d2:4b:49:dc:5a:
f1:d2:67:5f:33:8a:f7:be:d8:64:ff:b8:8c:db:1d:fe:9e:15:
34:d3:94:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5JH9mymvMiFGP6S10A9e6CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MDQ1M2VkNDg1ZTc2ODcwNjE3YTBlNGY0Njc1MTQ0YzMx
OTJjYjIwHhcNMjYwNTIxMDYwMTI0WhcNMjYwNTIyMDYwMTI0WjAzMTEwLwYDVQQD
EyhjZjJlMGZhYjA5ODJhYzZiYWJiY2U5NGIxZTkwNGJmNDg3YmI1MTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcQq5UiBSPQ0cuKb2Sl0PQUCPdnw
JbUqZ5fdBoIiNnj+MftkgGCWr1CdtJ8tsPVxOw8MBNAoZODhVHckT34ZWD0GanTB
mgRcC2qactt/aeEaLcCrJ9qKNbp8TNxZ+hkSxLmGFT48eYVmbEtw8q4PiBge5LcL
BfV4mJXZDqJ3XklJJGrgIAh4nywBNCmlQIXbxmw8124zrenKUGvoezw//yAVwckt
UUrfzwkfCk7MSgb+fbhBIfho5pPPzr2kuWmES9L46UbXGgtkUfGejf9vuqrwCCeZ
qKK5Si+g+afRYG58eO2SYOOCpWEUtgB/68xKrJfw260YCqOuq46SgCx/cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8uD6sJgqxrq7zpSx6QS/SHu1EUMB8GA1UdIwQY
MBaAFJUEU+1IXnaHBheg5PRnUUTDGSyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFFSVDdVaGVkb2NHRjZEazlHZFJSTU1aTExJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kMjZhMWMtMTg3MC00ODIxLWJiOGEt
ODRmOTVkMzNlMmM2LzEvbFFSVDdVaGVkb2NHRjZEazlHZFJSTU1aTExJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9kMjZhMWMtMTg3MC00ODIxLWJiOGEtODRmOTVkMzNlMmM2
LzEvbFFSVDdVaGVkb2NHRjZEazlHZFJSTU1aTExJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwk/Vpevx
j1mBYC/OtS2is04wzuW4dMx8Rkd8Ri/FQCV+LPhcBm5PD7fc5UiHUjHmr0Nklx22
4HO2AId8uhxRGJ1oEYcBc9bbGrUIp1pu6Fj0coXrcMlP72ijjRcrN/txmZ+K9JGP
NQEeQC7FupdnJdfNrrdq5HCFydLEXLejrjvejlyg5D9pVWb/U0HGkn3YXp8zqctm
+xRwru07s5nQ6/Z86hFtAuRcG1Hnyy7QyZHY0iSH+UJ3IRljdHPB9VwNyWITZSoE
JuPjSowPu6QC8xEdcUn+I8By90lU4AXRckUwkbTEKdJLSdxa8dJnXzOK977YZP+4
jNsd/p4VNNOUZA==
-----END CERTIFICATE-----
Generated at Thu May 21 14:10:48 2026 by rpki-client