Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
File: lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft (raw, json)
Hash identifier: z2bMAQRQp6j5OZ6OJiADsQ2Ogwh1PDaIV5G03Ak0B/8=
Subject key identifier: 14:76:ED:E8:10:8A:E1:1C:E9:DF:28:4E:8D:8F:2A:A0:C7:CF:9B:6C
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial: 019D9A070002D31D24290A6A874116F24E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
Manifest number: 159D
Signing time: Fri 17 Apr 2026 06:00:43 +0000
Manifest this update: Fri 17 Apr 2026 06:00:43 +0000
Manifest next update: Sat 18 Apr 2026 06:00:43 +0000
Files and hashes: 1: FitX3sWQ_iHXagZBIm2G09JUo5s.roa (hash: KV5mxaj5PQdSSjX+1QS/5L4FU+fN0JBB9CsJ5gF5o/o=)
2: GJmBjPFiuI9wpLlDRwS9mxb4F6E.roa (hash: EWYqSEaxsJwB3eARQDD/wcNEb9j/xhowyFxphGXlVm8=)
3: k7h4yqZemUb5b2bIFBvdTSgfzyw.roa (hash: Bx4UTl3NXqDp9MQ/LTWLZEsPj6vB0/E0amtRDWqvTIc=)
4: kCAsSIbvKF55PV7u3rulF5069fE.roa (hash: baPIhS+1QRBCYazJ9uYyJZTSmKcZ6uEAV6jyZHcT50U=)
5: lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl (hash: XCTUI7flPMVM3YOtYN5qSp7K4BFoOiEC/HBeos3Knuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:00:02:d3:1d:24:29:0a:6a:87:41:16:f2:4e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Validity
Not Before: Apr 17 06:00:43 2026 GMT
Not After : Apr 18 06:00:43 2026 GMT
Subject: CN=1476ede8108ae11ce9df284e8d8f2aa0c7cf9b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:f3:b0:13:d5:aa:9b:61:aa:0b:30:ee:70:
a7:69:5a:5d:ed:24:97:da:c0:9d:af:7c:9f:36:6c:
bc:72:9b:38:3a:76:37:ea:4b:f9:bd:4c:aa:f8:d1:
8c:8b:71:a3:31:d9:3a:b3:59:7f:f3:23:b9:60:37:
ec:78:17:f2:08:b3:98:e9:9f:1e:f4:b9:46:d5:f2:
d3:64:14:09:05:d3:9c:d0:60:b5:c3:bb:03:b0:ab:
3d:82:17:b3:9d:c4:c4:28:34:ba:db:f9:bb:7f:6b:
ef:44:cb:8a:19:09:14:72:25:6a:ca:9a:89:c6:67:
b3:5f:11:a6:ff:49:1f:1a:99:4a:f1:08:b5:bf:c7:
a9:a2:55:27:48:95:26:69:f7:c7:fe:a2:95:62:5d:
01:7a:84:59:68:67:b9:1e:d2:2f:7b:ce:3c:0c:b3:
36:3b:c8:b3:9a:7b:d2:4d:8a:bf:e1:07:f2:c8:f4:
b7:78:56:be:ef:2d:98:7d:c6:c9:cc:1a:0a:d0:77:
1d:7b:bf:53:b4:0d:bc:c1:eb:e9:f3:9f:e0:ec:ab:
69:e4:76:01:ea:86:d1:28:0a:ac:a9:76:da:0f:82:
a7:4c:fa:79:10:b6:8b:cf:10:e5:d7:38:fc:f9:f9:
41:c8:ce:6d:76:f8:6c:39:e6:a9:55:6a:97:45:7e:
ba:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:76:ED:E8:10:8A:E1:1C:E9:DF:28:4E:8D:8F:2A:A0:C7:CF:9B:6C
X509v3 Authority Key Identifier:
keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f5:fc:a6:de:d7:d0:08:40:d0:10:dc:f5:30:64:28:16:52:
a5:87:4a:f2:ee:8e:27:b4:65:68:26:6d:d3:4a:3c:55:25:5d:
6a:52:20:d9:48:27:8e:70:c2:13:67:02:19:3e:fb:5d:4f:2f:
dd:d7:5a:b4:03:5c:f2:c8:e5:9f:94:25:fe:f9:88:cd:f4:6e:
56:59:d0:52:3f:d0:93:f6:84:3d:89:ff:4c:0a:fc:7c:ff:6e:
f2:62:02:13:a6:57:63:bc:f1:eb:2a:db:39:2e:71:2b:69:09:
37:14:1d:33:2c:23:b2:00:41:2e:11:55:13:77:7f:e0:62:62:
10:cc:57:84:c7:17:21:79:2e:da:5f:27:e2:e8:64:3d:53:db:
04:50:18:60:72:da:f3:d8:6c:24:dc:cc:5a:ae:74:7e:08:d7:
bf:1f:86:b4:9f:d8:50:6a:db:c8:2c:2f:7e:31:06:ba:96:8d:
63:05:3e:f0:89:bf:9c:d4:2c:16:f6:07:45:1b:10:09:54:c1:
c1:b0:72:a7:52:ed:0e:68:3c:86:1c:72:fe:a7:a0:73:d4:44:
91:82:16:ef:cb:22:a6:35:0c:68:3a:5f:04:5f:d3:1a:34:83:
28:6a:a9:2b:c2:49:48:5f:17:16:34:94:0a:4a:44:1a:11:76:
a3:cb:02:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:41:25 2026 by rpki-client