Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
File: 01QLUY11--_WFr_ZTPBf0lukiLY.mft (raw, json)
Hash identifier: ng/XpMwTKTnT7o0vUs7h0dBWxuaknG72tePtO3UlM/c=
Subject key identifier: 0A:2E:F6:01:CD:15:C0:50:73:3F:79:1F:34:8C:0C:06:0E:33:A5:A1
Authority key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
Certificate issuer: /CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Certificate serial: 019FA9E2C0F345B997DD49C42971CBE58DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 18:00:37 +0000
Manifest this update: Tue 28 Jul 2026 18:00:37 +0000
Manifest next update: Wed 29 Jul 2026 18:00:37 +0000
Files and hashes: 1: 01QLUY11--_WFr_ZTPBf0lukiLY.crl (hash: x8FNrA3Z42jIPHSyL8vnU9En8+y52dP4XOn8wJahobw=)
2: uXxyOPGVnASS7u5ky0_kq_0zUmQ.roa (hash: 83RawsrluXe18GC2cGOGUx568BZVRaon+KIyn+++hqw=)
3: z4dC7BchYgJeEJVK0u1hQk0LX9w.roa (hash: eWL2mFtDMtr2WhkRkhhO2F6MQbo7HgvI3DvROQrIYRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:c0:f3:45:b9:97:dd:49:c4:29:71:cb:e5:8d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Validity
Not Before: Jul 28 18:00:37 2026 GMT
Not After : Jul 29 18:00:37 2026 GMT
Subject: CN=0a2ef601cd15c050733f791f348c0c060e33a5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:27:58:94:66:27:1f:83:f7:b6:70:63:30:63:
db:2d:3f:ac:42:ae:c3:39:c0:a4:c3:a4:0c:19:55:
b9:61:d2:bd:e2:f1:0d:4d:db:91:38:90:23:3a:63:
db:b3:7a:33:06:44:5c:e1:7a:8d:c1:47:29:77:5f:
c8:17:9e:bf:98:ed:8b:a2:46:bb:68:fd:dd:c0:f0:
32:05:58:86:a6:02:6c:df:02:c5:ae:56:69:ad:7f:
54:b1:28:f0:cf:fe:69:17:51:ad:72:d9:cd:b0:bd:
c4:ee:60:48:94:dc:f6:b5:eb:ed:16:c2:05:0e:df:
9c:d7:b2:ef:1d:53:f0:ea:22:57:9e:a7:95:64:76:
44:0a:d2:9e:5d:74:2f:99:ed:fb:94:97:62:c3:eb:
f9:f5:af:bd:51:08:f5:ce:04:12:b9:16:8c:78:df:
cb:46:a7:f7:57:ee:c2:8f:ea:f7:1a:33:78:7d:8a:
5d:12:cb:0b:26:66:5e:46:23:50:62:b3:2b:f4:97:
46:37:e1:1a:16:1a:6d:66:3c:63:26:80:17:27:fa:
de:4e:54:9b:3f:99:31:99:1b:ae:7c:d9:97:28:88:
83:fd:44:99:75:9d:9a:50:25:48:a6:e0:36:22:b6:
8e:96:22:e4:2f:a7:12:af:2a:74:1e:5f:d5:1e:fd:
3f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2E:F6:01:CD:15:C0:50:73:3F:79:1F:34:8C:0C:06:0E:33:A5:A1
X509v3 Authority Key Identifier:
keyid:D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:47:c9:20:f2:53:87:08:27:c5:f0:54:11:39:7a:a2:3a:5e:
c1:79:76:92:1e:b8:f8:f9:0c:c7:92:bb:0a:a7:51:8f:be:59:
db:ff:d0:dd:00:95:6f:fa:03:77:18:b7:e5:59:9e:d8:55:03:
43:41:d0:67:83:58:d2:4d:7e:ce:f9:11:6d:b5:1d:c0:2d:a4:
01:5e:e2:e1:47:2b:52:33:ab:dd:39:aa:6a:b4:14:c8:16:16:
1c:49:3f:e0:6e:10:cb:cf:89:9a:b7:13:7d:60:7a:83:00:7f:
9f:fa:88:a3:95:6c:74:6c:41:d5:bd:a1:f5:55:6c:d5:3c:75:
d7:6b:00:11:42:27:5c:58:e1:12:bb:53:47:cc:0e:7e:85:df:
0b:f3:42:72:d1:70:cb:22:1c:4a:f6:83:8f:f2:d4:a9:a6:8c:
44:e3:59:a9:aa:1e:e8:9b:59:c8:d0:7d:af:33:cf:8b:0d:bd:
04:9e:95:08:e2:3d:ae:9b:e8:eb:bd:ec:cf:96:30:2c:8a:99:
58:ce:fc:08:08:46:88:46:90:8a:a4:23:5e:67:dd:0e:ed:81:
b6:c9:11:8b:c2:83:bc:3f:8c:3c:ea:13:9e:02:69:6c:c8:ba:
c3:07:57:dd:93:7a:18:7f:90:ae:ad:c4:71:db:08:87:75:d9:
cf:d0:3c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:52:26 2026 by rpki-client