Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json)
Hash identifier: Dp7nRV7VU79DdNzXvB1xH+CBGtKh7y7GCg/PYjP0ByI=
Subject key identifier: 97:59:0F:5F:AC:CC:F0:08:4C:FF:5A:A5:82:53:2E:A7:E5:99:42:40
Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Certificate serial: 019CAA21BE54D5286BBD79FC0088A4D29C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
Manifest number: 09BC
Signing time: Sun 01 Mar 2026 16:01:04 +0000
Manifest this update: Sun 01 Mar 2026 16:01:04 +0000
Manifest next update: Mon 02 Mar 2026 16:01:04 +0000
Files and hashes: 1: DlYdZNTLvfx2OD11UfQRnD3hK2o.roa (hash: Yz+AdjCjCsAlEW+BjCHTyQFo7Owy/uvBTZnF71MgcBA=)
2: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: a3e5cF8Mah2jLbtlKVspZzN0x5NQEYft9sSsAepLCJI=)
3: zw7G6rZ3OugQehoBP3QpVRIzHKs.roa (hash: Ywv0pQZLRrxCf8Y+ep3+4GqTg47V6bf1LboUdnUKZNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:be:54:d5:28:6b:bd:79:fc:00:88:a4:d2:9c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Validity
Not Before: Mar 1 16:01:04 2026 GMT
Not After : Mar 2 16:01:04 2026 GMT
Subject: CN=97590f5facccf0084cff5aa582532ea7e5994240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2f:79:7c:39:1b:ed:41:ec:fc:c4:75:5a:03:
4f:71:c0:1c:d0:4e:f5:8b:1c:96:8f:23:2d:35:c5:
25:96:8c:ec:62:84:8a:a8:4d:89:30:4e:71:b5:c2:
6e:26:ef:a8:a2:d8:40:4f:b8:eb:53:46:bd:bd:9c:
e0:b7:38:5e:f3:66:50:e7:56:13:bb:6a:37:22:ec:
c8:7a:da:7f:a2:20:57:be:b1:e5:df:aa:da:8a:be:
fa:b6:33:5b:cb:e1:0a:16:aa:4d:c5:69:19:8f:11:
39:e0:8d:ce:e8:bf:39:1a:48:0b:1d:da:eb:b5:44:
c7:b4:68:0f:d4:22:ec:37:33:73:e7:e7:ba:0c:98:
26:01:f6:a7:c6:43:10:ad:a0:8c:f7:9a:e6:1f:5e:
d2:f2:6e:26:78:5f:4f:6d:64:73:ae:f5:90:bc:33:
19:03:dc:74:8a:84:29:8c:53:d3:76:ec:56:0f:44:
07:87:0b:76:fc:d6:10:d3:d2:e1:a5:f5:30:35:78:
0b:30:59:16:d4:59:22:0a:8d:a1:9a:83:f2:2d:60:
9d:f7:2e:3b:f3:99:f0:a4:14:1f:33:36:d0:52:e8:
fe:3f:5a:c9:25:ac:c4:07:0b:f0:31:fb:a2:f3:4f:
e7:1f:5a:a7:de:20:7d:a0:b4:8b:4e:d8:6b:fd:ab:
c8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:59:0F:5F:AC:CC:F0:08:4C:FF:5A:A5:82:53:2E:A7:E5:99:42:40
X509v3 Authority Key Identifier:
keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:bb:f3:57:b6:c8:58:f8:db:39:c8:c7:1e:cf:88:d4:ac:f6:
63:48:36:90:9d:ea:21:d5:f8:98:b1:53:22:49:2d:71:3b:b9:
4b:9d:14:a3:c9:b0:56:b8:00:0e:f5:cb:8f:58:fe:0c:c4:72:
68:37:b1:d1:f2:ee:76:99:2b:f3:9c:9a:23:fc:33:87:8a:4f:
88:97:76:fb:e2:c5:ea:27:55:78:08:71:7d:3a:eb:b9:c8:9a:
e0:d5:85:7b:b2:31:aa:c5:31:ea:5e:2d:ae:b5:cb:f7:ad:33:
71:85:ee:0a:8a:cc:7d:59:7f:97:81:a1:cc:19:8f:cd:96:67:
07:ca:a8:47:cc:67:56:cc:6b:6b:5d:b7:c2:24:36:ff:1a:ff:
08:5e:e2:5b:a3:c5:31:94:9c:2f:a4:91:5b:79:c2:af:57:b7:
28:c2:dd:38:01:87:e0:2b:a6:48:73:33:9b:f2:4a:ca:03:43:
6b:65:79:ba:48:7e:b9:dd:1d:c9:63:81:d2:f7:19:1e:87:5a:
ae:62:e8:5d:45:a7:4b:c6:26:00:05:63:d8:f9:4e:a5:0c:2b:
ab:38:ea:4e:17:8f:81:5e:fa:4a:b4:41:e9:45:42:f9:2d:ed:
b2:ea:30:31:d9:42:6c:66:39:5e:25:de:10:b8:fb:ea:70:f1:
5b:f9:2a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:27 2026 by rpki-client