Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json)
Hash identifier: DrriOJDDSHDZLZRdqOBAG3jhmuyY9/FTrAFcwK42pLw=
Subject key identifier: FF:91:2B:9E:BC:5E:1E:D1:4E:2F:95:44:A3:E0:39:D2:4B:ED:43:A4
Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Certificate serial: 019EBF23C1AF0EF24E6C04E46B7338291431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
Manifest number: 0AD0
Signing time: Sat 13 Jun 2026 04:00:51 +0000
Manifest this update: Sat 13 Jun 2026 04:00:51 +0000
Manifest next update: Sun 14 Jun 2026 04:00:51 +0000
Files and hashes: 1: DlYdZNTLvfx2OD11UfQRnD3hK2o.roa (hash: Yz+AdjCjCsAlEW+BjCHTyQFo7Owy/uvBTZnF71MgcBA=)
2: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: 8PR0wkxS43cSHoIT7ptrybjtJzRCsfg9RurKH2mnNvo=)
3: zw7G6rZ3OugQehoBP3QpVRIzHKs.roa (hash: Ywv0pQZLRrxCf8Y+ep3+4GqTg47V6bf1LboUdnUKZNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:c1:af:0e:f2:4e:6c:04:e4:6b:73:38:29:14:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Validity
Not Before: Jun 13 04:00:51 2026 GMT
Not After : Jun 14 04:00:51 2026 GMT
Subject: CN=ff912b9ebc5e1ed14e2f9544a3e039d24bed43a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:05:ec:af:3d:69:3f:13:84:1d:05:2c:43:83:
39:6d:12:d5:27:89:d1:f9:f9:6d:a6:30:54:3b:70:
ac:35:88:4e:f9:e4:9e:d0:87:18:d9:25:95:23:8a:
8b:52:91:5f:c3:fb:95:5d:34:32:68:df:4f:77:80:
53:cc:fc:46:34:e8:33:6f:a2:05:37:2b:43:c5:35:
7a:04:0e:8b:2e:0e:4a:e4:56:cc:a8:b9:a0:7e:23:
69:4d:1b:8b:a6:ff:10:f4:93:4e:b8:23:78:8b:bd:
0a:89:27:b6:52:1b:60:57:5f:e6:cb:d9:10:a2:6d:
55:a2:e5:a2:82:19:bd:e6:47:cd:c8:29:3f:bf:2d:
b7:f3:d9:be:e2:c8:fd:fb:d1:66:69:6b:fe:9a:25:
e9:e4:6e:ec:43:45:9a:27:01:bc:ea:f1:dd:88:14:
4a:b0:b2:2a:8e:be:29:0d:60:25:8f:4f:28:4e:9c:
28:3d:a0:5a:7f:1d:72:c0:e1:11:43:5d:3a:ec:d0:
bf:41:65:af:6a:15:1d:da:02:ea:56:5e:03:89:18:
c1:0b:8e:72:97:0b:37:3e:20:13:5f:73:06:10:b5:
ec:46:78:a0:5c:44:5b:68:86:bc:49:e8:a6:35:be:
64:87:18:d6:29:07:f4:0a:9a:ac:21:8b:0e:ac:46:
75:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:91:2B:9E:BC:5E:1E:D1:4E:2F:95:44:A3:E0:39:D2:4B:ED:43:A4
X509v3 Authority Key Identifier:
keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e7:66:d6:be:9a:b2:9f:23:4d:97:ac:71:58:ae:a3:f1:d1:
e1:a1:d7:12:96:80:da:24:94:6a:9e:75:1e:24:25:41:3b:50:
d6:12:e2:31:d1:7c:cf:4d:fb:3c:85:e4:c1:b8:25:d8:5e:db:
ed:37:d4:23:59:cd:8b:f1:85:90:bd:fe:e9:65:cb:e1:71:55:
e8:e1:e8:7e:30:3f:40:06:79:9f:ff:c3:21:3d:99:cd:6a:e9:
8d:6f:55:5a:71:66:55:94:b8:20:b3:e0:cc:dd:f2:44:d1:10:
2d:49:69:38:79:69:6d:3e:6d:e1:2d:93:1d:9a:74:d9:1a:a2:
c3:cf:a4:e7:2e:c7:05:26:e4:dc:f8:c1:65:a2:81:d3:3e:dc:
da:45:52:3e:a6:5f:1f:f5:bc:ed:87:bd:09:21:85:b6:ec:21:
e7:7a:40:96:42:31:bf:7d:96:55:74:45:05:64:0f:c3:5f:ba:
79:ed:bd:b3:e7:9e:82:24:7c:74:52:78:4d:84:c5:67:67:ac:
c0:fc:10:de:a9:04:5c:ce:cf:61:6d:37:94:a9:1b:43:a4:b6:
1a:45:ec:83:4f:3f:11:02:aa:a8:2a:a6:0d:56:d3:9f:fd:2a:
58:18:4a:1a:60:f3:9b:cf:e8:f6:d6:3b:50:61:7b:3a:de:af:
49:8d:5e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:49:07 2026 by rpki-client