Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json)
Hash identifier: jpbVOOW4OFv+EYoNeqm7evlp3ZQYrlpCQTif/3TSao0=
Subject key identifier: 7D:70:4C:74:7E:6D:AB:2F:99:E9:51:CE:66:4A:D1:11:D3:F5:82:B6
Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Certificate serial: 019D9998D993938F83480E06D13314D1FC6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
Manifest number: 0A38
Signing time: Fri 17 Apr 2026 04:00:24 +0000
Manifest this update: Fri 17 Apr 2026 04:00:24 +0000
Manifest next update: Sat 18 Apr 2026 04:00:24 +0000
Files and hashes: 1: DlYdZNTLvfx2OD11UfQRnD3hK2o.roa (hash: Yz+AdjCjCsAlEW+BjCHTyQFo7Owy/uvBTZnF71MgcBA=)
2: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: HddkTjYJ9PvQbPPApSRiEDYYhTGd+zboZsstcN05G+E=)
3: zw7G6rZ3OugQehoBP3QpVRIzHKs.roa (hash: Ywv0pQZLRrxCf8Y+ep3+4GqTg47V6bf1LboUdnUKZNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:d9:93:93:8f:83:48:0e:06:d1:33:14:d1:fc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Validity
Not Before: Apr 17 04:00:24 2026 GMT
Not After : Apr 18 04:00:24 2026 GMT
Subject: CN=7d704c747e6dab2f99e951ce664ad111d3f582b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:d7:e4:f4:a9:8d:52:03:93:cb:d4:ab:72:
d9:d1:d9:a7:ea:23:95:af:a8:db:78:0c:1d:2d:f8:
77:63:38:7d:66:3a:97:60:21:49:f3:56:64:d8:61:
29:77:09:39:f5:ac:c0:1b:8c:45:c6:79:3d:a5:32:
5f:7e:74:d7:43:48:a7:27:2e:47:e1:7d:76:2d:ff:
fe:b5:33:f1:5f:3a:37:3b:f3:c6:61:17:d2:65:81:
a6:c0:60:dd:80:8f:07:47:47:26:ee:ef:c7:c6:6c:
db:90:86:a6:64:89:12:91:fc:50:15:0d:02:13:ec:
f0:be:19:d1:e1:bd:31:85:a8:02:61:43:58:a2:38:
12:b7:f4:dd:b4:cd:b1:9e:7c:f0:4a:d7:6d:3e:53:
64:de:5c:8f:f0:d3:80:d8:ec:f8:2d:7a:53:08:65:
93:24:0d:5d:eb:a2:39:e0:2b:55:96:c8:98:33:b4:
70:5c:21:33:e8:25:3d:be:bb:a8:ea:02:44:8f:c5:
5e:b4:40:78:39:2e:e8:99:21:b8:5a:14:b8:51:91:
33:21:52:ea:be:ba:0b:ba:27:fb:9f:00:79:4d:35:
db:11:b5:2b:52:f5:6d:09:49:51:43:c7:ef:74:57:
57:a2:48:b1:01:db:91:9f:b0:5e:27:02:8d:85:cc:
16:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:70:4C:74:7E:6D:AB:2F:99:E9:51:CE:66:4A:D1:11:D3:F5:82:B6
X509v3 Authority Key Identifier:
keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:19:89:ed:a1:73:76:69:52:fe:f3:db:73:8c:3b:65:6b:1b:
2c:f9:05:f1:45:77:eb:9b:39:bf:8c:77:20:10:db:1c:4b:b5:
9f:f6:a3:a0:1a:2a:a0:7f:94:31:31:6d:18:8c:32:c3:7b:58:
49:b3:1f:5b:d7:6d:05:11:ca:b0:ab:f4:73:e6:8d:47:25:b8:
60:26:ef:69:57:0f:68:a5:57:7f:33:80:7f:81:98:ee:cc:2c:
2a:6a:77:90:fc:88:0c:e7:ac:81:1b:f1:f9:b7:cd:18:60:4c:
37:1b:04:a0:77:0e:49:f0:3b:b5:79:5e:67:c7:ca:26:f4:61:
ea:2d:17:54:4e:33:2d:51:23:16:00:30:10:a7:19:7a:d3:3f:
16:e9:82:23:12:02:a3:ca:e6:59:09:80:2f:a9:77:90:14:d0:
cc:7a:48:e3:d5:42:f8:ab:27:0d:38:20:4c:3c:d5:15:e4:7a:
1a:6e:e5:6a:07:73:93:a6:84:1c:81:31:ae:72:30:d4:51:78:
1e:e1:8a:09:bd:83:e1:14:1a:e3:b4:42:9c:0e:c5:c9:ce:fb:
b7:6a:6a:d8:f3:be:08:f1:7a:3e:db:9e:87:38:2d:bc:6b:5f:
eb:66:44:93:83:0d:9c:75:7a:cc:08:0d:9b:d4:5f:34:75:38:
28:89:ed:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:06 2026 by rpki-client