Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
File: lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft (raw, json)
Hash identifier: 17TtFU5VKsTH7bFAeSVc2/43VH2dc72jDBd+NfEtfnc=
Subject key identifier: 7E:95:CD:C5:78:04:47:E7:39:90:1F:1B:7D:F2:02:49:AD:4B:2B:C1
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial: 019FA93E879B34A6CC9D472FDBADE4713161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
Manifest number: 16AE
Signing time: Tue 28 Jul 2026 15:01:15 +0000
Manifest this update: Tue 28 Jul 2026 15:01:15 +0000
Manifest next update: Wed 29 Jul 2026 15:01:15 +0000
Files and hashes: 1: FitX3sWQ_iHXagZBIm2G09JUo5s.roa (hash: KV5mxaj5PQdSSjX+1QS/5L4FU+fN0JBB9CsJ5gF5o/o=)
2: GJmBjPFiuI9wpLlDRwS9mxb4F6E.roa (hash: EWYqSEaxsJwB3eARQDD/wcNEb9j/xhowyFxphGXlVm8=)
3: k7h4yqZemUb5b2bIFBvdTSgfzyw.roa (hash: Bx4UTl3NXqDp9MQ/LTWLZEsPj6vB0/E0amtRDWqvTIc=)
4: kCAsSIbvKF55PV7u3rulF5069fE.roa (hash: baPIhS+1QRBCYazJ9uYyJZTSmKcZ6uEAV6jyZHcT50U=)
5: lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl (hash: 0f1oOhNEl0V1tOOW8TZmYBhF5rW90f7uOS9n8VH5xjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:87:9b:34:a6:cc:9d:47:2f:db:ad:e4:71:31:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Validity
Not Before: Jul 28 15:01:15 2026 GMT
Not After : Jul 29 15:01:15 2026 GMT
Subject: CN=7e95cdc5780447e739901f1b7df20249ad4b2bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:df:ab:f9:9a:1d:a9:ef:9d:32:cb:ec:63:16:
f9:84:6e:53:54:5d:f9:08:21:47:ba:cc:ed:c5:45:
0c:c5:1e:d8:8e:01:e0:5e:4f:47:b6:cc:09:e7:d8:
4d:ba:09:91:19:e2:60:aa:37:e8:d7:86:5c:e7:78:
3a:fb:e5:cf:f7:9d:4b:68:54:9f:9e:45:4a:d4:2f:
69:fe:3c:29:3c:51:b6:bd:e9:e0:3b:74:bd:b5:74:
3e:e6:93:9f:89:b6:18:32:87:bc:5d:2a:11:33:52:
5d:94:5b:a5:3d:b5:ac:86:ec:5e:73:f6:3d:4b:30:
73:a3:51:4b:68:71:86:ec:bd:98:4b:18:2f:e4:0f:
c6:8d:86:31:d4:4b:bd:ad:77:0a:02:b9:5f:b6:2d:
45:b5:b2:fc:6a:eb:0f:33:07:f9:63:b5:79:ae:d9:
97:62:ca:c6:ad:f2:a9:3f:8b:45:89:28:86:38:e5:
a0:db:a8:e9:35:21:af:1d:f0:58:bb:9e:78:10:4c:
f1:e2:6d:50:8f:23:29:56:3e:54:55:2c:af:42:86:
a8:2d:28:b0:56:38:21:cb:cd:f8:13:e6:65:bd:db:
7b:67:26:65:85:c2:1f:64:ce:d3:ac:14:e3:4d:23:
82:1f:aa:af:96:e7:65:42:3f:1b:ca:94:7b:43:2d:
03:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:95:CD:C5:78:04:47:E7:39:90:1F:1B:7D:F2:02:49:AD:4B:2B:C1
X509v3 Authority Key Identifier:
keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7a:2b:66:5f:11:77:fd:40:c4:59:89:49:30:a1:eb:d5:08:
d3:e1:6c:8a:84:c1:8f:94:d6:46:ad:e7:99:74:6b:a0:54:3d:
4c:87:04:68:90:26:0d:fd:7e:ad:44:89:2f:ee:9e:04:9c:2d:
0a:c2:87:85:e2:22:9f:ff:0d:92:41:1b:3c:e2:8f:f3:20:eb:
b0:c8:a5:f3:5e:99:05:47:86:e2:12:e4:20:3e:f9:ee:4c:52:
f9:c8:47:e0:fa:4f:00:2d:0b:1c:10:41:b1:ba:95:f8:5e:d7:
d0:31:29:91:c4:b0:56:23:73:91:29:e6:09:41:9c:16:98:4d:
d3:e7:74:e7:6e:56:11:c6:ed:8f:8e:31:b1:bf:56:72:7f:94:
60:4e:7e:93:b4:de:69:a1:b5:47:09:44:89:25:7e:b7:38:e8:
51:a3:89:7a:f4:18:12:c8:94:f4:d3:bf:9c:13:43:5e:4c:5c:
c3:85:b4:16:5b:87:cc:36:20:fc:f0:cd:52:a3:53:cf:2f:de:
58:ff:79:5e:50:f9:fb:b8:68:12:9b:94:d8:9f:08:11:bf:82:
4e:4c:ae:3d:53:cb:4b:78:9e:2b:ac:8b:ad:55:57:8f:cf:3c:
fc:82:d0:a2:05:6d:a2:cc:bd:5d:fb:f6:23:fb:2c:a2:e4:da:
24:52:89:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:57:43 2026 by rpki-client