Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
File: LubVYKCKAT8_4OZtra9v0Cvq9D8.mft (raw, json)
Hash identifier: 7+dprDgWQgedSpvQ/5tJMkep/iMP6vMrcwf+iUYrTGw=
Subject key identifier: E5:1B:5C:B2:E8:70:87:EB:ED:28:A5:43:BF:E9:F3:FA:38:36:5F:A5
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Certificate issuer: /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial: 01A0D7962A9E1AB6A73BD0549A85606546DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
Manifest number: 1AAE
Signing time: Fri 25 Sep 2026 08:02:17 +0000
Manifest this update: Fri 25 Sep 2026 08:02:17 +0000
Manifest next update: Sat 26 Sep 2026 08:02:17 +0000
Files and hashes: 1: LubVYKCKAT8_4OZtra9v0Cvq9D8.crl (hash: JkMkq0sSmU8f77k2NP4J348/HN/fQaFCKJH+d7icOGc=)
2: vQGqMk2tUWFQV3KWvNRVI4u6g8A.roa (hash: ETJTcUD8tj+bJ3F84d7NY+2CRj1SkXQZGuzA9XMRE3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:2a:9e:1a:b6:a7:3b:d0:54:9a:85:60:65:46:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Validity
Not Before: Sep 25 08:02:17 2026 GMT
Not After : Sep 26 08:02:17 2026 GMT
Subject: CN=e51b5cb2e87087ebed28a543bfe9f3fa38365fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:39:bc:31:e0:d6:9e:6f:ba:44:4f:c9:65:5e:
65:b3:f8:78:db:1f:49:aa:0d:75:bd:5b:e2:44:5a:
70:22:94:ef:82:61:99:27:aa:94:6d:9f:87:2e:09:
56:80:16:50:31:2e:5e:c3:ab:a8:85:73:d6:6c:56:
6a:ef:a8:a9:2b:a4:4b:97:b3:2c:00:da:f9:7a:ac:
d7:a6:d8:ed:0f:33:48:4e:19:3c:81:71:f2:ef:af:
fe:3b:eb:fd:de:d0:c6:7a:0e:0e:6c:e8:c7:29:c0:
6c:5c:2d:02:21:b8:5a:48:a5:84:52:83:57:b3:ea:
2f:60:c2:01:51:73:4b:32:32:7b:af:4c:5e:60:9e:
e6:cd:c3:a5:ed:df:0d:2b:54:34:75:30:44:55:bb:
76:d1:08:1a:da:ac:2e:44:52:da:e3:e8:a6:11:65:
12:2f:82:38:16:fc:66:2c:2f:13:59:19:46:b3:9b:
70:c6:d0:8e:d7:1c:1c:6b:e0:d4:30:ab:0f:77:c2:
08:22:23:fb:26:32:2f:b0:e0:3f:7e:c1:47:64:2f:
63:9d:cf:ea:c9:d1:49:c7:8c:44:fd:f0:6d:ba:12:
83:d4:96:f1:c9:45:d5:50:fe:c0:d1:2d:60:4b:13:
ce:0c:60:8d:00:d4:6e:78:7a:0e:96:8c:25:18:ce:
f7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1B:5C:B2:E8:70:87:EB:ED:28:A5:43:BF:E9:F3:FA:38:36:5F:A5
X509v3 Authority Key Identifier:
keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:aa:18:8f:39:47:16:ca:75:b4:94:d0:b3:f5:d3:25:d3:c1:
1b:b7:54:3a:1e:68:6f:ae:b5:5b:30:37:0f:fa:18:44:02:24:
24:1e:7f:c5:85:bf:63:41:b2:1c:88:dd:8a:5b:27:7b:d1:9f:
26:a3:17:c9:fb:7f:18:f2:47:f0:72:ae:93:66:a4:dd:28:35:
94:17:d4:6a:92:00:7c:37:2d:bd:17:d0:42:71:80:b1:d8:79:
19:31:6a:5f:5f:70:ab:75:83:d2:2b:21:14:7a:a3:38:e2:b3:
59:e4:8d:90:da:52:74:ec:a2:43:bf:b5:dd:9b:28:0f:fc:3d:
33:1a:78:9d:6d:91:47:ed:58:81:02:97:49:f0:79:90:ea:1e:
46:71:e5:ab:54:cc:10:b1:2e:17:dc:85:97:56:09:d2:01:e8:
9c:c6:a1:de:a0:2f:64:29:52:b3:7d:62:54:5b:6b:ee:7b:1d:
5c:6a:d0:eb:6e:eb:c7:b8:cf:71:2e:0c:10:23:f3:9c:03:91:
2c:9f:f4:0f:b8:61:92:4a:1d:17:c1:fb:d3:6c:33:3c:9f:b1:
a0:34:f6:c9:26:66:87:99:ec:b1:fd:12:fe:e0:3b:0d:8c:dc:
07:63:6a:38:e3:34:75:a2:a3:71:34:b2:77:a2:b0:c1:91:b6:
45:52:db:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:21:46 2026 by rpki-client