Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
File: LubVYKCKAT8_4OZtra9v0Cvq9D8.mft (raw, json)
Hash identifier: K0ZqUEvul/1TYFJxZq0lJ3mlvzpJ+TJLyp0FEp3pXP4=
Subject key identifier: 42:2C:8D:1D:11:BF:26:0A:A2:1B:E2:5B:40:5A:67:4E:CD:E8:98:3E
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Certificate issuer: /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial: 019FAA50F6D68D6118D18ED7324487F395E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
Manifest number: 1A12
Signing time: Tue 28 Jul 2026 20:01:00 +0000
Manifest this update: Tue 28 Jul 2026 20:01:00 +0000
Manifest next update: Wed 29 Jul 2026 20:01:00 +0000
Files and hashes: 1: LubVYKCKAT8_4OZtra9v0Cvq9D8.crl (hash: G+pxy5nIQGWsMCMv4ti8sKHWCnOFxEnYZrcUV9KssdM=)
2: vQGqMk2tUWFQV3KWvNRVI4u6g8A.roa (hash: ETJTcUD8tj+bJ3F84d7NY+2CRj1SkXQZGuzA9XMRE3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:f6:d6:8d:61:18:d1:8e:d7:32:44:87:f3:95:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Validity
Not Before: Jul 28 20:01:00 2026 GMT
Not After : Jul 29 20:01:00 2026 GMT
Subject: CN=422c8d1d11bf260aa21be25b405a674ecde8983e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f5:40:5c:56:59:e5:10:91:71:e5:1a:c1:cd:
b4:b1:d4:d9:a1:d0:12:7b:12:37:ed:05:0d:81:00:
e0:71:1c:99:90:31:60:db:35:8f:40:58:5d:03:42:
32:c9:57:06:5f:b5:7e:0e:b4:66:66:d2:70:b6:e7:
7f:32:68:6a:ce:c2:af:0b:a2:99:68:82:4a:d7:a3:
d3:0d:5e:5f:dd:cb:c4:52:39:a3:ae:22:f2:04:23:
78:3d:7a:c2:15:58:9f:ff:45:47:98:0d:1d:38:fb:
7d:81:e3:76:de:d2:3b:80:15:e5:69:63:a6:97:8d:
58:fa:b0:d7:9d:36:2a:7c:47:ed:c9:b4:16:93:c4:
85:27:51:ed:92:6f:fd:26:4e:7b:83:53:9d:3a:ca:
11:cf:c5:6f:27:85:38:cf:bd:27:b6:00:69:6e:e0:
b4:cd:94:54:12:b6:c6:a4:81:36:fd:41:7b:31:8e:
c8:93:5f:66:54:8c:1a:31:e4:b5:1c:3e:aa:be:56:
ea:b7:b8:42:18:01:34:8c:a9:c3:83:19:4e:a8:de:
29:76:f1:09:7a:4c:30:28:fd:14:54:f7:7a:b6:3f:
81:75:7f:cb:95:e4:71:7e:82:a8:fd:3c:23:0a:ea:
05:4c:4a:54:18:17:a1:af:cb:49:e8:14:51:54:5d:
45:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2C:8D:1D:11:BF:26:0A:A2:1B:E2:5B:40:5A:67:4E:CD:E8:98:3E
X509v3 Authority Key Identifier:
keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:11:6f:49:d1:45:7d:4b:56:28:04:84:69:f3:23:01:ea:54:
b2:9b:0d:4d:42:64:e6:85:04:4b:44:9f:8e:03:78:76:28:8f:
e2:9a:4d:b9:98:aa:b6:02:6c:eb:21:29:9f:79:d8:f1:e4:2e:
96:84:5c:a6:9e:2a:ea:64:2e:18:6c:fb:bc:d2:c8:13:43:f6:
13:fd:50:65:a0:3f:8c:fa:4b:a9:94:2e:85:57:c9:e3:16:f7:
40:78:e8:6b:fd:26:0c:41:8a:ff:af:6c:1b:ef:2f:36:2e:a8:
58:ef:c2:b1:fe:0a:1c:d9:ed:7f:d3:90:9a:0f:50:ee:bd:e2:
16:10:cf:8a:06:d5:5e:ee:37:53:43:0f:60:83:d0:f3:0f:20:
f3:8d:2a:1d:8e:5a:87:92:1b:19:a3:b9:54:03:00:8d:85:69:
bb:50:5f:2b:31:7d:91:56:f8:fd:57:48:39:84:8d:b2:37:33:
54:fd:eb:11:a8:89:df:4b:6d:ed:55:8f:70:b7:39:01:3f:d1:
b2:5a:78:57:28:82:9d:58:4d:97:7e:5d:12:68:3d:32:0d:e1:
38:26:d1:c2:16:69:0d:e9:3e:97:64:c2:fb:13:b6:f0:b2:b6:
cd:be:f9:2b:f6:a5:1a:17:98:ca:cc:21:ec:68:a3:7e:ce:cb:
7e:c2:19:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:00:24 2026 by rpki-client