Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
File: lQCCqFlGcix_wchk8PvYDcVNzSk.mft (raw, json)
Hash identifier: F7eC1a3y42UgW3sV8aztOt9hXXdsWbozRJoExcrlzY8=
Subject key identifier: 2B:B4:58:7D:0B:6F:A4:D8:C9:CA:3F:F4:72:53:63:6B:5B:24:8F:40
Authority key identifier: 95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
Certificate issuer: /CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Certificate serial: 019F36E0D1C21C228EE28D5A4A164B60AB65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
Manifest number: 0BD8
Signing time: Mon 06 Jul 2026 10:02:11 +0000
Manifest this update: Mon 06 Jul 2026 10:02:11 +0000
Manifest next update: Tue 07 Jul 2026 10:02:11 +0000
Files and hashes: 1: 6Q3hJK7l5gtN_Lr_bBxFEB7LRps.roa (hash: iw8Ogmc/LXNOPuyk5RisCNNGw5P8+o4St4o7kNLdmFM=)
2: UcrjdhQUtMyXZBZ14yoz47DP1KQ.roa (hash: pwlq/+c8DXzCaRg9hbORmAoeOdAKmI0H3fOLHE09GyY=)
3: lQCCqFlGcix_wchk8PvYDcVNzSk.crl (hash: Gq85ETaQ8FqJcLzFTlzErWdIOew9eeVRa/grO/vE6sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 10:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:e0:d1:c2:1c:22:8e:e2:8d:5a:4a:16:4b:60:ab:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Validity
Not Before: Jul 6 10:02:11 2026 GMT
Not After : Jul 7 10:02:11 2026 GMT
Subject: CN=2bb4587d0b6fa4d8c9ca3ff47253636b5b248f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:45:6e:d9:37:7d:37:78:2f:4e:c1:5a:d8:a9:
61:d1:11:55:34:23:8f:2d:63:e6:44:23:b4:f2:3c:
1b:40:9e:7d:c6:08:6f:0d:a5:90:df:00:ed:2b:30:
33:5e:e0:09:9c:a5:f8:33:8e:c8:22:6d:1b:fa:c3:
e3:62:dc:ad:f8:4e:66:55:fd:9a:88:81:54:c4:7e:
f7:50:e1:1f:70:78:69:d7:4c:9f:be:5a:74:bb:95:
a0:bd:01:4c:60:65:db:7b:a9:82:dc:0a:1d:36:95:
c8:95:4a:d3:98:c6:06:ad:04:2a:70:b7:91:32:37:
81:62:6b:41:9d:d2:41:99:be:5b:3b:ff:61:4e:d7:
0a:31:24:0d:91:b6:2e:a0:fb:a3:bf:92:62:c3:5d:
93:54:60:44:e1:5e:84:37:1b:97:9a:93:23:ec:27:
c0:d1:cb:51:83:36:eb:00:75:12:fd:af:9d:a5:f6:
97:fc:9e:62:a8:95:c1:c2:38:d0:df:8d:18:34:08:
17:97:8b:f6:e4:38:12:cd:4c:ff:4a:ff:af:8b:1e:
6c:31:80:7f:6a:96:02:eb:64:c1:7b:70:a6:90:89:
af:7f:9e:f7:f6:3b:13:eb:d2:32:d8:e3:a6:db:9a:
6c:7e:ec:68:74:bd:cb:af:9f:c3:34:c1:f4:fb:9b:
a3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B4:58:7D:0B:6F:A4:D8:C9:CA:3F:F4:72:53:63:6B:5B:24:8F:40
X509v3 Authority Key Identifier:
keyid:95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a3:31:41:1b:70:36:af:ae:1f:8a:8b:93:58:4a:42:ee:83:
32:69:ff:f6:fb:ee:1a:25:82:a3:16:53:cb:92:81:77:0b:b2:
aa:e8:41:20:3a:46:e5:6c:6b:7a:49:ce:99:22:e5:06:ac:7c:
d8:0a:58:8f:fd:59:fa:ec:8d:15:58:8c:26:cc:44:8b:bc:f2:
b6:24:9b:7f:b1:e1:fa:38:91:af:ed:55:6e:25:9f:f1:e6:27:
74:4a:03:8d:50:15:ba:c8:eb:4c:42:c1:65:8c:0c:9b:70:b3:
7e:f6:94:e0:33:1b:61:3d:66:35:f2:40:93:82:a3:47:e5:ea:
4e:c3:f4:5b:cd:c2:eb:85:8c:fc:0e:4d:3d:3c:d1:82:91:1e:
27:43:04:e0:68:18:05:b5:1e:48:3f:72:35:a5:29:d5:06:a1:
5d:84:59:3b:a4:3f:57:c6:c6:18:0f:87:97:11:32:6a:c6:b5:
50:4b:c9:c8:7d:ba:d6:31:33:4d:a3:78:2c:6e:a7:71:eb:7c:
7d:b9:01:2a:49:ce:5f:12:77:7c:52:ba:cb:8e:21:11:bc:4f:
66:ab:c0:1d:e6:c9:b6:9d:ae:7a:08:52:2d:dc:7e:3f:a9:d3:
af:49:5c:a3:fd:43:05:d0:50:72:74:dd:52:fd:ce:13:07:92:
1b:5a:74:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:06:29 2026 by rpki-client