Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json)
Hash identifier: eAGiAlRncbqbIFe9ih25wz7Xctm6Kdufa32O/P6wJPM=
Subject key identifier: 60:64:7B:FC:A6:2B:8D:70:F0:38:79:0C:3E:23:B0:60:A5:50:6A:47
Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Certificate serial: 019FAABE3E068743D6DB8A148E46C7C7E3EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
Manifest number: 0B4A
Signing time: Tue 28 Jul 2026 22:00:21 +0000
Manifest this update: Tue 28 Jul 2026 22:00:21 +0000
Manifest next update: Wed 29 Jul 2026 22:00:21 +0000
Files and hashes: 1: DlYdZNTLvfx2OD11UfQRnD3hK2o.roa (hash: Yz+AdjCjCsAlEW+BjCHTyQFo7Owy/uvBTZnF71MgcBA=)
2: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: 5J0vPWToqFIUMgXFofyzoiAPVVY7y9R8OPx6V0U2Jps=)
3: zw7G6rZ3OugQehoBP3QpVRIzHKs.roa (hash: Ywv0pQZLRrxCf8Y+ep3+4GqTg47V6bf1LboUdnUKZNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:3e:06:87:43:d6:db:8a:14:8e:46:c7:c7:e3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Validity
Not Before: Jul 28 22:00:21 2026 GMT
Not After : Jul 29 22:00:21 2026 GMT
Subject: CN=60647bfca62b8d70f038790c3e23b060a5506a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:2d:2d:f0:fe:da:ee:18:1e:cf:22:84:5e:
b1:e1:50:78:60:02:98:6d:9b:c3:43:72:12:55:a0:
4d:b6:0b:2b:6b:11:cc:61:67:27:b1:16:c0:db:f4:
00:d3:16:85:f7:1e:c9:fa:57:60:55:3c:24:ce:36:
68:8e:d5:83:6c:72:a6:6d:98:d8:aa:49:98:0b:83:
cc:45:6d:74:a2:ed:78:4c:e9:2d:78:bb:8c:f1:eb:
22:53:34:4f:73:36:63:d8:56:5c:23:1a:11:72:4c:
aa:fd:20:68:fc:b0:40:b2:35:c8:b9:dd:bc:8a:9c:
3b:99:df:e3:c2:76:ae:f2:6d:69:c7:31:11:fe:1e:
b7:d8:30:ba:a9:2f:76:fd:ca:f0:8f:23:b1:01:32:
85:a6:9d:1d:2f:7f:a8:05:a2:a2:e5:5e:b8:68:32:
51:f9:07:87:49:2f:42:54:c2:e7:fe:97:bc:02:58:
04:c8:e9:bc:7f:d2:62:ff:a5:05:6d:89:12:4f:ae:
f2:9e:8e:94:1c:5a:96:47:b5:73:ec:fa:54:52:67:
df:0c:11:ca:49:f7:13:77:29:61:e3:c2:48:a7:e9:
0a:d1:64:92:d6:63:3e:76:6e:c0:91:43:6b:bd:9f:
b3:42:c1:50:41:a1:ed:b7:68:ff:a0:81:e7:b2:53:
50:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:64:7B:FC:A6:2B:8D:70:F0:38:79:0C:3E:23:B0:60:A5:50:6A:47
X509v3 Authority Key Identifier:
keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:da:f8:25:99:8b:02:34:e7:17:e1:a3:00:d7:d4:f6:49:94:
48:de:12:88:8f:98:71:f1:b3:cc:0d:e8:1b:ee:80:cc:92:70:
4c:d2:e7:56:92:2a:34:9f:44:54:8d:81:16:f2:46:37:16:8f:
ae:f7:44:e5:a6:da:84:19:32:55:2c:d8:04:d0:04:61:40:82:
7f:9c:35:aa:f5:0d:99:b2:5d:cf:cb:64:c5:ef:4c:4f:dd:d6:
b4:3a:86:b5:ed:7a:b6:1b:d0:ae:c3:c8:d8:c8:fe:d8:f3:83:
31:b8:6b:d6:46:e4:ad:1f:9c:51:f6:77:43:6e:c1:4e:8a:26:
50:4e:b9:64:67:6d:c4:ed:76:2f:bf:e8:67:12:45:14:ae:89:
44:a1:94:45:b9:8a:31:bd:15:16:47:70:46:95:f6:8a:13:c6:
c3:71:d2:76:e0:c9:9d:79:d8:1a:2b:cd:35:3f:35:e5:ab:3d:
c5:98:88:54:c0:9d:07:d3:db:57:54:e9:2b:3c:fe:c1:2d:9b:
3c:1d:f5:3c:7c:3f:25:e6:aa:cd:ff:14:ba:72:78:20:5c:e0:
9e:4d:46:73:a2:82:68:61:50:38:a0:48:8b:59:8f:bf:9c:4a:
82:3a:3c:26:2e:e5:8a:74:d5:2b:b0:8b:4d:f1:a1:d4:d5:40:
d6:d5:f7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:29:02 2026 by rpki-client