Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
File: 01QLUY11--_WFr_ZTPBf0lukiLY.mft (raw, json)
Hash identifier: tZtUUoVUByII+EcI+rNdhuJnb9pqS9E/CtiFqgfDG4g=
Subject key identifier: BB:E1:69:A2:0F:4B:91:3E:48:91:58:D2:B9:E2:96:25:98:C2:7D:BD
Authority key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
Certificate issuer: /CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Certificate serial: 01A0C3D741D5E66566CE07A53BD1DC502738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 12:00:59 +0000
Manifest this update: Mon 21 Sep 2026 12:00:59 +0000
Manifest next update: Tue 22 Sep 2026 12:00:59 +0000
Files and hashes: 1: 01QLUY11--_WFr_ZTPBf0lukiLY.crl (hash: EhZsTrEbQDlqpP6CVYIDP/qxEmMhB5h1FzztcK/g4aY=)
2: uXxyOPGVnASS7u5ky0_kq_0zUmQ.roa (hash: 83RawsrluXe18GC2cGOGUx568BZVRaon+KIyn+++hqw=)
3: z4dC7BchYgJeEJVK0u1hQk0LX9w.roa (hash: eWL2mFtDMtr2WhkRkhhO2F6MQbo7HgvI3DvROQrIYRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:41:d5:e6:65:66:ce:07:a5:3b:d1:dc:50:27:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Validity
Not Before: Sep 21 12:00:59 2026 GMT
Not After : Sep 22 12:00:59 2026 GMT
Subject: CN=bbe169a20f4b913e489158d2b9e2962598c27dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:13:63:7d:3e:d3:e0:d8:15:e3:09:1f:38:
92:43:03:39:32:19:97:0a:f5:41:4b:62:21:50:bf:
cf:d8:57:43:8a:dd:1c:fe:bc:87:2f:5e:bc:7b:fa:
a8:45:06:b3:27:b6:b9:58:f5:f7:e8:56:a0:0a:f0:
0a:11:4a:95:51:b7:f1:f2:d0:98:7f:01:7a:c6:d8:
6b:a6:57:54:67:08:cf:0a:49:ac:e3:53:f7:03:d4:
ef:29:3a:a1:79:d8:32:19:f6:bb:24:e1:42:d9:53:
f2:6f:bc:d9:3a:f3:ad:56:25:a9:3a:1b:df:65:af:
86:be:16:e0:3a:90:7c:17:e3:d2:8d:e9:a9:62:84:
7f:c6:0c:60:e5:f8:3b:09:ed:58:d2:17:cf:5a:9a:
64:e8:09:b3:78:8f:91:62:2c:5c:bd:f0:34:24:9c:
b8:88:b9:75:ed:08:fa:95:5d:eb:8b:1d:8f:57:15:
a2:6b:e2:23:2d:e1:39:51:23:f6:f4:27:39:00:04:
4e:98:72:ef:49:66:58:ad:1c:92:08:d8:2e:b6:c9:
53:b3:51:51:22:84:a5:22:11:ab:b2:c8:8f:1e:2b:
3c:04:53:e7:12:d5:88:eb:2b:47:47:8c:bc:d3:70:
66:8e:1e:4b:a2:ac:9e:ba:81:90:e0:aa:b7:fb:95:
03:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E1:69:A2:0F:4B:91:3E:48:91:58:D2:B9:E2:96:25:98:C2:7D:BD
X509v3 Authority Key Identifier:
keyid:D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5d:3c:d3:5a:2f:35:20:70:cb:7d:79:4b:47:d2:49:38:9f:
bb:f5:fa:5b:1a:7d:91:82:c5:da:8b:0c:db:46:5e:d8:67:af:
c6:46:ca:8c:dd:88:52:d9:75:6b:90:1a:a0:cb:89:fd:50:b3:
36:3d:12:9a:d9:f6:87:6d:b1:5e:47:f0:4b:91:e1:a3:6f:cb:
77:6d:d0:5b:dc:ae:1f:1f:3d:c0:25:39:33:3e:cd:7c:c1:46:
38:07:24:82:14:cb:2b:55:8f:39:67:1e:57:ca:15:f2:8c:e8:
79:07:85:f1:17:d0:66:77:a1:ad:4b:0d:bd:a9:6e:39:0b:0e:
8b:e2:be:c2:dd:f7:08:3d:56:ae:2c:1d:a9:17:c3:0d:8d:fe:
e8:cb:35:38:5d:1a:f2:6c:7e:c9:41:90:15:d0:31:93:c1:95:
ce:96:00:13:7a:9c:d6:f3:02:0e:93:15:d1:a9:77:21:19:20:
51:55:2d:c5:53:7a:8f:56:b5:b1:f6:a9:0f:04:69:c5:f6:18:
98:4c:e6:78:26:34:8f:9e:0d:38:ed:8a:ff:30:d9:1f:27:fa:
63:67:8d:1c:af:16:50:44:11:54:9b:aa:ae:cd:50:e5:3e:eb:
e6:c6:0f:39:72:d4:21:cb:c4:e7:16:be:36:1d:ab:37:c0:0e:
97:ee:4d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:40:03 2026 by rpki-client