Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
File: lQCCqFlGcix_wchk8PvYDcVNzSk.mft (raw, json)
Hash identifier: HxDYjLoOqlJi4aodYb0eGwJQtA2HB+s1ZvIBuRli73g=
Subject key identifier: 69:3A:31:46:8F:D0:6A:FA:14:90:4E:D0:80:8D:0A:55:61:B7:43:41
Authority key identifier: 95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
Certificate issuer: /CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Certificate serial: 019D3AF8D0C8E4FDD3145AF172B42FC9CB08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
Manifest number: 0AD1
Signing time: Sun 29 Mar 2026 19:01:18 +0000
Manifest this update: Sun 29 Mar 2026 19:01:18 +0000
Manifest next update: Mon 30 Mar 2026 19:01:18 +0000
Files and hashes: 1: 6Q3hJK7l5gtN_Lr_bBxFEB7LRps.roa (hash: iw8Ogmc/LXNOPuyk5RisCNNGw5P8+o4St4o7kNLdmFM=)
2: UcrjdhQUtMyXZBZ14yoz47DP1KQ.roa (hash: pwlq/+c8DXzCaRg9hbORmAoeOdAKmI0H3fOLHE09GyY=)
3: lQCCqFlGcix_wchk8PvYDcVNzSk.crl (hash: TZecMvAN2YtHdKPeWJCkmbltpMsgFvwLrPUNCTBQA3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:f8:d0:c8:e4:fd:d3:14:5a:f1:72:b4:2f:c9:cb:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Validity
Not Before: Mar 29 19:01:18 2026 GMT
Not After : Mar 30 19:01:18 2026 GMT
Subject: CN=693a31468fd06afa14904ed0808d0a5561b74341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:64:e8:66:e8:06:0a:03:1f:9f:7a:13:77:
2a:d2:c7:f9:05:74:dc:36:73:6d:b5:e2:76:fb:cf:
b6:b5:14:69:12:f8:30:b8:3e:80:5f:9c:db:cc:ea:
1d:94:27:38:38:a8:0a:f8:93:a6:4d:c2:69:d9:1a:
56:2c:ec:63:e5:d2:24:a5:ec:4e:07:e2:bc:34:74:
70:01:3c:4a:94:cd:a2:b8:30:d0:2e:79:9d:a3:88:
65:6e:1a:a6:ae:24:df:f8:0c:52:42:e2:19:86:05:
4d:c6:6b:10:64:7f:96:4e:1a:30:ef:7e:0d:2d:c9:
29:fe:2d:3e:76:b9:18:57:7f:92:e7:b8:4d:69:74:
95:98:25:ec:ce:d0:54:10:79:c0:c8:e5:e2:80:0a:
19:7b:a9:c9:83:43:af:15:62:d7:1e:20:95:b7:cb:
e1:ac:17:0f:00:1f:1c:eb:a5:0b:78:b7:0b:36:0d:
71:25:ae:d8:2a:2c:72:15:7d:37:8e:07:fa:56:00:
04:c1:bc:ff:34:ad:f3:fe:6b:ae:bd:d6:66:cf:a7:
41:c7:0b:b1:91:0c:04:2a:b3:54:ee:94:08:6e:e8:
0c:8a:19:40:f7:45:94:bb:c5:4f:c2:2e:75:3e:c2:
b3:b2:31:42:30:90:cd:7c:84:ec:ed:8f:88:39:08:
bf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3A:31:46:8F:D0:6A:FA:14:90:4E:D0:80:8D:0A:55:61:B7:43:41
X509v3 Authority Key Identifier:
keyid:95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:04:54:da:1b:28:a2:10:8a:ad:ac:25:61:4d:7c:16:d9:27:
53:8d:d2:c7:84:f2:fb:60:51:cb:e6:da:c4:b0:3b:4f:19:7e:
7b:a9:b9:b2:f5:bb:36:5c:86:e4:d2:8a:91:7f:c3:0a:03:f4:
ce:e2:78:7a:d2:ab:67:52:f5:83:59:84:b6:9a:68:06:1f:9f:
37:8b:e9:fc:34:20:0b:cf:f6:43:37:23:2e:24:2a:4d:b3:c2:
ac:3f:63:98:49:38:bd:5b:c0:e8:df:28:b5:df:25:00:69:9b:
03:d1:65:45:82:42:94:98:fe:7a:52:d5:3a:cc:fd:1d:c8:44:
7d:ad:00:35:79:d9:c7:8c:da:e9:49:f1:a3:6a:f1:bd:9d:c8:
90:3e:8f:41:4c:64:43:04:bd:fb:32:3c:9b:84:5d:9a:8f:66:
9e:f1:ab:9c:5f:3a:a6:56:1e:9b:5b:21:e8:7c:29:ad:dc:35:
50:49:d0:af:5f:88:93:d0:04:c1:25:f5:d3:61:1f:30:a2:d2:
90:8e:8c:cc:05:05:f7:56:3e:69:b3:13:e1:56:bb:a6:32:07:
eb:0b:9b:b0:63:5e:07:75:66:d6:69:3b:9f:8d:21:ea:8d:b2:
22:4b:f5:dc:79:61:40:71:50:d2:37:8e:dc:07:6c:af:e6:d2:
f6:12:f9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:26:18 2026 by rpki-client