Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
File: lQRT7UhedocGF6Dk9GdRRMMZLLI.mft (raw, json)
Hash identifier: 2ntMb3R9iJPQMAGip0lmjUAr/7AXoaBjg8iZ0xgq9/w=
Subject key identifier: 69:BD:A6:B4:5E:61:E2:FD:D1:16:A6:3D:5B:10:33:0E:19:23:99:86
Authority key identifier: 95:04:53:ED:48:5E:76:87:06:17:A0:E4:F4:67:51:44:C3:19:2C:B2
Certificate issuer: /CN=950453ed485e76870617a0e4f4675144c3192cb2
Certificate serial: 01A13635F05903E16B3FFF0FD1B2A4D04E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQRT7UhedocGF6Dk9GdRRMMZLLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
Manifest number: 01A4
Signing time: Tue 13 Oct 2026 17:01:06 +0000
Manifest this update: Tue 13 Oct 2026 17:01:06 +0000
Manifest next update: Wed 14 Oct 2026 17:01:06 +0000
Files and hashes: 1: Z4ZoaORQua51KCRsVg2IUhoDAXo.roa (hash: NCkzuayiCIk++QJTY6wsrqBuJEYrBZjGt9dXQEIDPoM=)
2: lQRT7UhedocGF6Dk9GdRRMMZLLI.crl (hash: WviS+y/PRJ3kRq7WYALEKy8/hdOu4nhPFeoLrDr1eSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQRT7UhedocGF6Dk9GdRRMMZLLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:35:f0:59:03:e1:6b:3f:ff:0f:d1:b2:a4:d0:4e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950453ed485e76870617a0e4f4675144c3192cb2
Validity
Not Before: Oct 13 17:01:06 2026 GMT
Not After : Oct 14 17:01:06 2026 GMT
Subject: CN=69bda6b45e61e2fdd116a63d5b10330e19239986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:7e:ca:2e:b7:c3:c2:e0:b9:f0:a6:98:55:
d1:47:f6:66:ce:88:a3:ca:d6:c7:7a:b0:33:b0:53:
2e:01:15:b5:80:b3:7d:c4:80:80:73:b8:44:e8:92:
f6:03:9a:2c:ea:52:0a:5c:31:9e:c6:c3:89:65:80:
64:fe:cc:c7:56:1f:ee:52:25:4c:fa:32:12:5c:0d:
c4:32:5d:51:62:32:e0:32:f1:c1:84:7f:88:26:5a:
74:d6:0f:b3:1a:d6:28:17:51:e9:9c:75:0b:e1:28:
62:4b:a8:81:88:b6:19:f8:8d:49:c4:7f:df:58:15:
c7:bb:0e:25:13:60:b7:71:ac:90:d6:60:a4:5a:fa:
2c:c7:13:80:07:38:f0:7a:c3:1e:70:e3:c9:1b:8e:
8c:52:45:12:27:34:37:87:c2:a6:9d:0b:94:23:bd:
3e:00:2d:55:19:4b:19:6d:6e:5b:3a:02:42:66:9a:
cf:25:f1:40:d1:cf:8b:d9:3c:45:51:52:e3:45:24:
49:b4:77:21:2d:4b:d2:5f:b0:bb:d3:49:70:54:b1:
90:c2:fb:e5:bf:b5:b3:b0:45:ba:cb:8d:3e:b2:37:
83:ff:06:d3:62:5f:2f:10:c6:cc:3e:a6:70:b0:8b:
01:41:93:48:ef:c7:fb:11:bc:61:6c:3a:47:e6:8e:
86:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BD:A6:B4:5E:61:E2:FD:D1:16:A6:3D:5B:10:33:0E:19:23:99:86
X509v3 Authority Key Identifier:
keyid:95:04:53:ED:48:5E:76:87:06:17:A0:E4:F4:67:51:44:C3:19:2C:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQRT7UhedocGF6Dk9GdRRMMZLLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d26a1c-1870-4821-bb8a-84f95d33e2c6/1/lQRT7UhedocGF6Dk9GdRRMMZLLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3f:81:e2:39:a1:06:91:dd:ce:2e:26:a3:c5:01:13:42:2f:
75:4a:6e:f4:37:c6:5f:cd:7f:12:2a:5f:6d:1e:d2:c4:0d:02:
69:5a:09:38:68:6d:4b:3b:90:fe:a4:ed:c3:a6:55:10:23:f1:
fc:a4:f3:ba:14:4d:75:6e:4a:36:99:f2:77:f9:92:ce:fd:68:
7a:d0:72:2d:46:00:00:ec:17:a5:39:0b:10:5e:3d:4a:51:85:
d5:55:35:63:64:c8:be:9c:c6:34:68:d1:f3:fd:04:20:93:c9:
d7:cd:ed:45:d9:43:c6:d6:e6:27:a1:13:eb:fb:7a:0d:0d:19:
d5:9f:3c:de:61:a3:79:df:34:78:08:26:92:db:5e:21:a4:c8:
ef:d6:25:4e:d0:03:2c:37:ff:c9:2e:20:2b:a8:d3:6c:ac:68:
5d:bc:e0:a5:59:61:4d:ae:54:9f:f2:4f:d8:c1:0e:34:95:99:
ca:2f:32:ff:bf:9d:62:cd:eb:a2:02:67:e1:72:2d:c4:18:94:
90:2b:60:65:9a:6a:be:cb:75:84:ea:88:85:95:26:c7:bc:16:
99:93:48:18:48:d3:fa:82:a7:67:05:f1:dd:89:e5:17:85:f5:
5b:bf:5d:32:ac:89:9a:c8:13:c2:f3:07:54:d4:26:1d:5e:8f:
cc:34:1e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:25:54 2026 by rpki-client