Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
File: lQCCqFlGcix_wchk8PvYDcVNzSk.mft (raw, json)
Hash identifier: pT0fz9NCrGg0NI3G7jX6TconRJH9s518NIsWFM7m/ck=
Subject key identifier: CD:AD:C3:A1:68:64:11:1A:33:23:52:07:40:B5:ED:CA:69:EC:9B:5E
Authority key identifier: 95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
Certificate issuer: /CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Certificate serial: 019E4F214DA828730E25296114511B9699A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
Manifest number: 0B60
Signing time: Fri 22 May 2026 10:00:42 +0000
Manifest this update: Fri 22 May 2026 10:00:42 +0000
Manifest next update: Sat 23 May 2026 10:00:42 +0000
Files and hashes: 1: 6Q3hJK7l5gtN_Lr_bBxFEB7LRps.roa (hash: iw8Ogmc/LXNOPuyk5RisCNNGw5P8+o4St4o7kNLdmFM=)
2: UcrjdhQUtMyXZBZ14yoz47DP1KQ.roa (hash: pwlq/+c8DXzCaRg9hbORmAoeOdAKmI0H3fOLHE09GyY=)
3: lQCCqFlGcix_wchk8PvYDcVNzSk.crl (hash: wLif7i0xgZKmdKvQpqIdq7oBlXJc8ihfP3czMwhYf/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:21:4d:a8:28:73:0e:25:29:61:14:51:1b:96:99:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Validity
Not Before: May 22 10:00:42 2026 GMT
Not After : May 23 10:00:42 2026 GMT
Subject: CN=cdadc3a16864111a3323520740b5edca69ec9b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0b:21:e9:9d:70:b6:59:65:cd:d1:ea:8d:aa:
99:4b:39:23:27:93:5f:13:93:24:9b:d4:b0:77:be:
2f:1b:6e:09:3d:55:77:54:c9:8f:aa:d1:6e:ef:4b:
86:5e:7d:dd:9e:4c:20:03:01:85:44:7a:fd:53:5b:
72:b2:75:a4:62:9a:01:be:d3:c6:69:6d:78:ef:3c:
b3:89:e6:1d:0b:fa:12:2a:39:70:a2:87:85:fc:56:
e7:c5:40:0b:37:73:43:00:a2:6a:8c:22:04:97:ba:
04:ac:5f:dc:21:3e:58:b0:49:b1:d1:2f:18:f4:46:
7f:67:98:f8:51:ad:c1:b1:63:b5:39:f5:18:d6:87:
cf:a6:0d:65:b9:c0:45:f8:4d:fa:40:dc:cd:33:4d:
11:6e:0f:ba:67:a3:56:ef:49:c3:c1:99:f0:7d:e1:
3b:4f:67:07:bf:53:42:08:8f:bb:f8:2e:05:fe:5f:
19:b0:b6:ff:95:99:5f:81:28:1d:30:64:2b:fd:30:
73:ae:00:be:a1:0c:5c:ca:9b:65:cb:c8:4a:dd:aa:
7c:c0:6c:de:2b:f7:84:64:54:a4:c9:a0:6e:e2:25:
a5:d5:96:d8:96:dc:e1:ce:43:78:47:88:16:b5:e3:
c1:f5:18:35:31:24:9d:9d:c0:7b:02:b0:d7:8d:36:
ef:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AD:C3:A1:68:64:11:1A:33:23:52:07:40:B5:ED:CA:69:EC:9B:5E
X509v3 Authority Key Identifier:
keyid:95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:1e:23:4f:0b:18:f2:28:27:92:5f:ea:d9:73:e7:a4:2f:fc:
50:e0:e9:85:57:79:d2:07:ed:ab:f1:d8:27:61:5f:74:68:b1:
d6:b3:eb:e3:06:57:f7:a3:78:22:dc:b1:0d:60:c3:a8:6b:78:
cb:b1:96:4f:b6:0d:53:e7:79:7f:61:0a:5f:46:c5:f1:05:1f:
44:e5:d0:aa:37:2e:bf:06:2b:67:b5:53:49:58:fb:0c:5a:41:
2a:24:ae:41:88:0b:64:15:02:ae:1d:68:16:d3:22:d4:86:70:
85:80:08:f2:fd:3a:8c:64:a6:06:02:c2:62:10:6e:bc:29:e1:
de:ce:6c:54:ee:64:34:93:88:69:51:b0:ff:f1:fc:a6:80:46:
53:22:83:27:5b:d3:6b:77:68:85:44:d4:7d:46:d6:e0:e4:f6:
98:91:75:67:bd:04:2f:c4:2c:68:dd:75:f6:9f:8c:84:01:bf:
e6:55:b2:35:e4:1d:43:7e:60:1b:4f:c2:4c:dd:b7:34:f1:df:
3b:e4:93:ac:1a:e6:cd:a1:16:80:f4:be:cb:5c:74:b0:6e:82:
12:79:a7:e9:06:28:1a:ee:64:1c:48:39:e8:7a:75:8b:68:4e:
59:c7:ea:bc:f0:4f:2f:54:a2:96:26:32:c3:96:16:0e:bd:c4:
2a:52:42:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5PIU2oKHMOJSlhFFEblpmlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MDA4MmE4NTk0NjcyMmM3ZmMxYzg2NGYwZmJkODBkYzU0
ZGNkMjkwHhcNMjYwNTIyMTAwMDQyWhcNMjYwNTIzMTAwMDQyWjAzMTEwLwYDVQQD
EyhjZGFkYzNhMTY4NjQxMTFhMzMyMzUyMDc0MGI1ZWRjYTY5ZWM5YjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgsh6Z1wtlllzdHqjaqZSzkjJ5Nf
E5Mkm9Swd74vG24JPVV3VMmPqtFu70uGXn3dnkwgAwGFRHr9U1tysnWkYpoBvtPG
aW147zyzieYdC/oSKjlwooeF/FbnxUALN3NDAKJqjCIEl7oErF/cIT5YsEmx0S8Y
9EZ/Z5j4Ua3BsWO1OfUY1ofPpg1lucBF+E36QNzNM00Rbg+6Z6NW70nDwZnwfeE7
T2cHv1NCCI+7+C4F/l8ZsLb/lZlfgSgdMGQr/TBzrgC+oQxcyptly8hK3ap8wGze
K/eEZFSkyaBu4iWl1ZbYltzhzkN4R4gWtePB9Rg1MSSdncB7ArDXjTbvzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2tw6FoZBEaMyNSB0C17cpp7JteMB8GA1UdIwQY
MBaAFJUAgqhZRnIsf8HIZPD72A3FTc0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFFDQ3FGbEdjaXhfd2NoazhQdllEY1ZOelNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zNGU0MGYtZTFkMi00ZDI5LTg5YzUt
YzY5YTdmMDNlMThmLzEvbFFDQ3FGbEdjaXhfd2NoazhQdllEY1ZOelNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8zNGU0MGYtZTFkMi00ZDI5LTg5YzUtYzY5YTdmMDNlMThm
LzEvbFFDQ3FGbEdjaXhfd2NoazhQdllEY1ZOelNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvx4jTwsY
8ignkl/q2XPnpC/8UODphVd50gftq/HYJ2FfdGix1rPr4wZX96N4ItyxDWDDqGt4
y7GWT7YNU+d5f2EKX0bF8QUfROXQqjcuvwYrZ7VTSVj7DFpBKiSuQYgLZBUCrh1o
FtMi1IZwhYAI8v06jGSmBgLCYhBuvCnh3s5sVO5kNJOIaVGw//H8poBGUyKDJ1vT
a3dohUTUfUbW4OT2mJF1Z70EL8QsaN119p+MhAG/5lWyNeQdQ35gG0/CTN23NPHf
O+STrBrmzaEWgPS+y1x0sG6CEnmn6QYoGu5kHEg56Hp1i2hOWcfqvPBPL1SiliYy
w5YWDr3EKlJCLQ==
-----END CERTIFICATE-----
Generated at Fri May 22 15:09:51 2026 by rpki-client