Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
File: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft (raw, json)
Hash identifier: C+LdNcXzZO0cUrnFtdFO39P+yMjVhNZrv52eOwfMpaE=
Subject key identifier: 24:4F:F4:91:FE:B4:86:A5:2A:86:F8:18:FB:22:B6:6B:E4:E6:80:48
Authority key identifier: D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
Certificate issuer: /CN=d0baab9bd8c69d07b6501147543df74270a33a21
Certificate serial: 019F189EA77F69B1A5CBD2978D204F92C8DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 13:01:18 +0000
Manifest this update: Tue 30 Jun 2026 13:01:18 +0000
Manifest next update: Wed 01 Jul 2026 13:01:18 +0000
Files and hashes: 1: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl (hash: Zv2oc/IU7bh6Puxnm0AvsYvdXwV3p0+QBqId8xrrFuI=)
2: 5s6XKsomdWNWDCdDfvlwJ_bv16M.roa (hash: 2MYOlX42yAcrFD0bmpi2VtXwK7LzEOj6ivS2Lm4VbdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:a7:7f:69:b1:a5:cb:d2:97:8d:20:4f:92:c8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0baab9bd8c69d07b6501147543df74270a33a21
Validity
Not Before: Jun 30 13:01:18 2026 GMT
Not After : Jul 1 13:01:18 2026 GMT
Subject: CN=244ff491feb486a52a86f818fb22b66be4e68048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9a:c9:e6:e0:38:ac:bd:30:a1:1d:9d:34:50:
11:6e:8a:f1:78:25:1e:d7:43:3e:1e:f4:23:1e:1e:
23:bf:ca:6e:c7:c3:eb:49:a5:1c:a4:af:f5:d9:3b:
d2:b9:32:82:c4:1c:fa:b6:2b:d8:fd:c8:e4:b2:df:
06:b0:7b:01:63:8d:14:00:48:87:95:21:62:33:71:
a6:58:dd:36:1d:c6:58:53:ce:60:9e:cc:21:87:f1:
e8:1b:ab:cb:04:07:13:e8:8e:eb:79:ba:35:46:bc:
50:89:3f:e7:d2:d5:4b:0a:be:d1:2e:03:09:84:6f:
99:3b:78:53:12:30:33:f7:e7:bf:1c:85:57:e5:00:
67:2c:3a:57:ba:27:75:57:61:6e:eb:28:fc:d8:b6:
28:7b:b6:ba:9b:4a:08:dd:17:de:0f:dc:e0:39:fb:
02:ac:8b:b0:8a:08:44:97:76:29:6e:30:42:0d:8d:
fd:37:b0:44:94:68:33:52:69:22:19:90:d4:68:65:
3c:fb:43:14:fd:a2:af:f0:a2:85:ec:5b:65:60:36:
22:2b:09:5b:49:a3:68:68:3e:bf:31:7b:3b:b0:98:
a7:7d:1e:f8:b8:03:53:a2:9b:01:2f:2f:86:d9:f4:
85:bb:5f:3a:04:88:a5:19:bd:68:64:6c:57:e7:e6:
1a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4F:F4:91:FE:B4:86:A5:2A:86:F8:18:FB:22:B6:6B:E4:E6:80:48
X509v3 Authority Key Identifier:
keyid:D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:1d:d9:37:97:ef:b8:ce:91:eb:b9:5e:d2:b2:9e:44:e3:2b:
45:40:6e:8b:c1:e4:fa:4a:dd:1d:6d:b0:81:d1:43:46:9e:70:
14:50:65:bb:b1:2f:e8:be:72:34:2c:20:98:01:e5:3c:6f:4d:
40:aa:9a:14:6a:db:f0:8c:5f:88:fc:6e:ac:d3:0c:47:7c:7a:
c1:64:f5:80:08:da:a8:3d:a1:e9:73:4c:9d:df:3e:71:87:cf:
b5:95:2e:06:aa:1e:6f:f3:43:28:e9:21:fa:2d:d9:73:8b:59:
ec:23:f5:a3:1b:20:fc:58:f7:cc:06:fd:72:f0:f9:61:4e:73:
37:e8:bf:b6:f8:67:f5:74:d4:ac:cf:0e:cb:b0:08:4a:16:65:
7f:ec:3b:df:86:3a:21:6b:61:f9:39:21:fb:f3:78:b8:5b:2a:
55:9a:44:16:ab:e1:43:bd:76:34:78:af:fb:d0:69:17:d6:23:
ea:9e:b2:fe:2b:e6:43:43:af:cd:12:53:e5:eb:da:09:cb:c4:
81:8a:06:2d:bd:3b:24:e9:1e:4f:db:7c:27:a7:e2:de:47:99:
39:d9:d1:2f:c9:d1:af:f6:d3:6c:54:f9:98:57:7b:d2:00:25:
15:99:87:90:6f:30:6f:dd:3b:9f:75:c9:f2:29:96:b0:09:d7:
0c:47:8d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:49 2026 by rpki-client