Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
File: lo-QT-7x95FiuCGaikg7hY9UC_o.mft (raw, json)
Hash identifier: sZ69soUr+zsiQQ8uTXmPlFycSUDjiwv+bduz9S/2JPw=
Subject key identifier: 62:95:18:F6:AC:95:E5:7B:D5:83:E4:7D:8A:00:3A:4D:CF:B6:0C:E8
Authority key identifier: 96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA
Certificate issuer: /CN=968f904feef1f79162b8219a8a483b858f540bfa
Certificate serial: 019D38656ECEBBCF89DD3929DF2A7E62EC82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:01:04 +0000
Manifest this update: Sun 29 Mar 2026 07:01:04 +0000
Manifest next update: Mon 30 Mar 2026 07:01:04 +0000
Files and hashes: 1: lo-QT-7x95FiuCGaikg7hY9UC_o.crl (hash: 70auBunySVKVxtyWybCm8VcKa8UKgSA1UQlAY8pryzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:6e:ce:bb:cf:89:dd:39:29:df:2a:7e:62:ec:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968f904feef1f79162b8219a8a483b858f540bfa
Validity
Not Before: Mar 29 07:01:04 2026 GMT
Not After : Mar 30 07:01:04 2026 GMT
Subject: CN=629518f6ac95e57bd583e47d8a003a4dcfb60ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e7:96:69:b2:89:b7:83:31:fa:9a:fc:bd:da:
98:f5:82:5e:15:ec:37:76:9d:c4:79:e7:b9:a8:59:
ca:e6:6e:56:3e:c3:c1:ef:e8:b8:aa:df:19:f6:60:
fb:44:71:61:dc:bd:7a:ee:36:98:32:e9:f2:e3:c0:
dc:46:63:66:2b:0d:14:84:23:7c:51:1a:48:57:2a:
e8:c8:bd:25:f6:4e:0e:5f:0b:5e:03:45:de:bd:16:
0e:43:1a:e6:05:64:c4:f5:a4:db:78:5e:33:b9:85:
ce:8d:f8:92:79:49:98:c9:99:e1:ab:e6:8c:af:62:
c5:40:5d:8b:fa:66:e4:32:6d:42:ad:33:68:07:84:
5f:d4:6b:e5:c3:85:01:4c:1c:a1:8e:91:8e:98:b4:
0a:05:64:c6:08:a3:53:8a:46:ab:99:d2:73:dc:19:
c5:41:8f:6c:fb:60:c3:9f:ea:f1:c1:2c:97:bf:0d:
07:79:4c:93:e8:3f:dd:ff:4f:bb:a6:81:79:96:84:
c6:0b:cd:b2:f7:a7:08:57:91:95:55:12:47:d2:42:
b6:df:ee:2d:e8:fa:e3:dd:fe:82:ec:04:26:e4:b2:
71:6e:91:6b:58:f0:0a:d6:e4:e6:28:53:a0:19:fa:
b6:21:d9:f3:8f:db:87:11:91:80:ad:3a:63:2d:18:
14:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:95:18:F6:AC:95:E5:7B:D5:83:E4:7D:8A:00:3A:4D:CF:B6:0C:E8
X509v3 Authority Key Identifier:
keyid:96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f3:92:08:72:c2:27:51:f9:7d:15:04:c7:0a:52:41:9f:9a:
9e:f9:bc:6b:84:98:a6:23:48:b2:45:b4:6f:3d:da:22:dc:ad:
82:58:80:67:9b:de:a9:41:e9:9d:8a:48:27:90:cf:81:97:81:
c8:87:5b:61:d5:0d:9c:fe:d4:2b:87:9f:dd:9a:56:76:37:79:
47:2b:05:65:7a:ba:d0:6a:35:6b:64:03:f8:4b:cc:9e:2e:ba:
76:2e:73:e1:bf:25:45:83:2b:7a:f0:60:8c:11:7c:de:01:aa:
74:1b:62:d1:19:5c:aa:dd:a6:03:1d:df:be:3a:72:8c:b1:35:
83:fc:58:0a:29:b7:c4:34:a1:a6:77:d1:31:49:be:58:b6:a8:
78:a1:1e:cd:20:a2:77:b5:77:17:e6:19:38:e7:d8:c0:e4:ed:
26:99:61:06:3b:e1:9f:bc:6c:cc:22:6a:0c:d2:df:f2:12:5d:
82:2e:cf:bb:ff:a9:9a:c7:4b:3e:3d:1a:b5:4b:47:6f:7f:60:
94:36:cc:f5:bf:7f:90:a2:e7:67:fa:e1:40:e8:2a:98:22:f4:
66:34:56:7e:27:38:c4:5d:b2:e9:f4:90:26:f6:a7:0e:b5:71:
6c:7d:19:ef:62:75:f7:83:2d:7f:49:1d:54:e5:eb:9a:4a:25:
43:2b:a3:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZW7Ou8+J3Tkp3yp+YuyCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2OGY5MDRmZWVmMWY3OTE2MmI4MjE5YThhNDgzYjg1OGY1
NDBiZmEwHhcNMjYwMzI5MDcwMTA0WhcNMjYwMzMwMDcwMTA0WjAzMTEwLwYDVQQD
Eyg2Mjk1MThmNmFjOTVlNTdiZDU4M2U0N2Q4YTAwM2E0ZGNmYjYwY2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOeWabKJt4Mx+pr8vdqY9YJeFew3
dp3Eeee5qFnK5m5WPsPB7+i4qt8Z9mD7RHFh3L167jaYMuny48DcRmNmKw0UhCN8
URpIVyroyL0l9k4OXwteA0XevRYOQxrmBWTE9aTbeF4zuYXOjfiSeUmYyZnhq+aM
r2LFQF2L+mbkMm1CrTNoB4Rf1Gvlw4UBTByhjpGOmLQKBWTGCKNTikarmdJz3BnF
QY9s+2DDn+rxwSyXvw0HeUyT6D/d/0+7poF5loTGC82y96cIV5GVVRJH0kK23+4t
6Prj3f6C7AQm5LJxbpFrWPAK1uTmKFOgGfq2Idnzj9uHEZGArTpjLRgUUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKVGPasleV71YPkfYoAOk3PtgzoMB8GA1UdIwQY
MBaAFJaPkE/u8feRYrghmopIO4WPVAv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG8tUVQtN3g5NUZpdUNHYWlrZzdoWTlVQ19vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kZGRmM2QtZTg4Ny00MjczLWJiN2It
NjgxZmEwZDk5ODIxLzEvbG8tUVQtN3g5NUZpdUNHYWlrZzdoWTlVQ19vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9kZGRmM2QtZTg4Ny00MjczLWJiN2ItNjgxZmEwZDk5ODIx
LzEvbG8tUVQtN3g5NUZpdUNHYWlrZzdoWTlVQ19vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/OSCHLC
J1H5fRUExwpSQZ+anvm8a4SYpiNIskW0bz3aItytgliAZ5veqUHpnYpIJ5DPgZeB
yIdbYdUNnP7UK4ef3ZpWdjd5RysFZXq60Go1a2QD+EvMni66di5z4b8lRYMrevBg
jBF83gGqdBti0Rlcqt2mAx3fvjpyjLE1g/xYCim3xDShpnfRMUm+WLaoeKEezSCi
d7V3F+YZOOfYwOTtJplhBjvhn7xszCJqDNLf8hJdgi7Pu/+pmsdLPj0atUtHb39g
lDbM9b9/kKLnZ/rhQOgqmCL0ZjRWfic4xF2y6fSQJvanDrVxbH0Z72J194Mtf0kd
VOXrmkolQyujRA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:52 2026 by rpki-client