Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json)
Hash identifier: d6QADSGomWJq/IzhcLVJamp410Rd/uysU5DRXpxTRW8=
Subject key identifier: 75:98:AB:42:CB:0F:AC:9B:88:D5:42:E3:10:97:71:30:A1:8B:AD:83
Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Certificate serial: 019CAC0FDAAA22693B7A502A4CE9D89C4731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
Manifest number: 09BD
Signing time: Mon 02 Mar 2026 01:00:45 +0000
Manifest this update: Mon 02 Mar 2026 01:00:45 +0000
Manifest next update: Tue 03 Mar 2026 01:00:45 +0000
Files and hashes: 1: DlYdZNTLvfx2OD11UfQRnD3hK2o.roa (hash: Yz+AdjCjCsAlEW+BjCHTyQFo7Owy/uvBTZnF71MgcBA=)
2: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: dG5BeDQydu37n3ISoRXw7dSSP6vessCPhvSMAx4Tpfw=)
3: zw7G6rZ3OugQehoBP3QpVRIzHKs.roa (hash: Ywv0pQZLRrxCf8Y+ep3+4GqTg47V6bf1LboUdnUKZNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:da:aa:22:69:3b:7a:50:2a:4c:e9:d8:9c:47:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Validity
Not Before: Mar 2 01:00:45 2026 GMT
Not After : Mar 3 01:00:45 2026 GMT
Subject: CN=7598ab42cb0fac9b88d542e310977130a18bad83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b8:4c:7e:fe:4c:69:31:6f:21:bc:3d:c6:bb:
aa:59:9e:29:19:da:81:71:74:3d:48:8d:04:52:04:
3a:e9:d2:6a:96:d8:7d:df:35:67:83:8f:5f:15:1a:
d5:39:ef:62:ef:84:57:a8:43:60:f6:6c:6a:2f:d5:
16:0d:12:7c:9c:ca:91:a4:73:bd:35:f2:fe:53:53:
9f:07:c1:68:0e:73:99:58:bf:09:25:d2:6b:63:07:
33:3c:94:00:31:95:84:12:8e:c9:dc:ce:7b:e6:8f:
f5:00:48:c5:3e:1a:63:50:6f:18:e1:b4:5c:61:09:
38:ea:cc:8f:01:68:27:e6:f9:2a:f4:eb:92:26:51:
ee:34:bc:9b:c0:41:38:93:e2:ed:9c:41:04:c9:0e:
c7:a2:bc:31:ce:db:93:62:53:58:8e:7c:2b:9d:4b:
2a:81:0a:fb:13:d2:74:f0:cd:69:ae:46:c9:68:96:
cd:27:ab:c9:4b:77:3d:c8:7b:1e:e9:1b:63:c9:ad:
e7:b0:5b:bc:c0:88:25:d1:5b:e2:a0:de:a2:e6:80:
6a:98:e0:cc:0a:7f:a9:91:22:3d:69:5f:57:4a:6f:
83:fb:38:7d:ff:d6:7b:0a:56:4b:ab:c6:9a:ae:c5:
51:a8:47:71:65:c0:2a:55:bd:28:e7:90:e8:1d:d2:
05:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:98:AB:42:CB:0F:AC:9B:88:D5:42:E3:10:97:71:30:A1:8B:AD:83
X509v3 Authority Key Identifier:
keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5f:0e:fe:a1:40:83:e9:42:29:80:65:50:68:ea:c1:32:4d:
e0:e9:d9:da:5c:a5:a0:5b:af:f2:d8:1f:81:8d:c8:0e:0c:ce:
56:68:fc:d8:a6:ba:d3:e2:b5:02:0d:5e:07:63:c3:33:ba:f5:
31:9a:ab:44:df:2f:2b:1d:ce:a9:7b:cf:bc:30:be:ad:75:91:
26:50:e4:ef:e8:5f:a9:f8:f9:7f:34:16:a8:ae:64:7d:e5:39:
50:78:14:e8:9c:04:02:0d:5a:bc:df:12:6e:04:cd:b4:58:e3:
39:72:fb:82:41:f5:08:5f:c7:ea:31:26:ab:e0:29:bf:14:5b:
db:42:2d:5c:6c:38:71:a9:70:a1:09:ed:f7:cd:ac:a8:a0:00:
a5:7f:69:84:24:b8:48:01:52:58:5d:35:4c:33:6f:23:ba:4a:
f6:e4:b3:3e:a9:45:d6:05:e4:69:cd:67:da:d6:ad:98:12:c3:
e2:14:b4:ba:28:b5:ab:61:9c:61:bf:1f:96:e4:cf:20:33:4d:
3a:a5:34:2f:01:bd:53:b8:26:78:ac:b1:55:47:a6:42:45:74:
c7:f6:4a:89:c4:5d:a8:d7:47:2a:37:19:9e:fa:06:f7:7c:0c:
4b:d4:bc:04:cd:8e:1c:d9:f9:ec:f8:a6:46:c1:7f:04:9c:53:
f9:86:f6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:24 2026 by rpki-client