
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
File: lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft (raw, json)
Hash identifier: ebQsSZC6B/x1D4uLPfVwBvKhwCzMcrpUxtGum5yQhlQ=
Subject key identifier: F8:05:A6:AA:DF:6D:3F:9D:E5:E5:FB:4C:3C:45:5F:23:E6:7F:8A:02
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial: 019CAD5941FA33D798AB045B6BCA5DED89B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
Manifest number: 1522
Signing time: Mon 02 Mar 2026 07:00:33 +0000
Manifest this update: Mon 02 Mar 2026 07:00:33 +0000
Manifest next update: Tue 03 Mar 2026 07:00:33 +0000
Files and hashes: 1: 1-lKoU1yOKxnwsDuF3-ruK96PVNo.roa (hash: IOjO4sGW5jpY5sMRaf3CjBzP7+xSqwcjH//jisz2/A8=)
2: GJmBjPFiuI9wpLlDRwS9mxb4F6E.roa (hash: EWYqSEaxsJwB3eARQDD/wcNEb9j/xhowyFxphGXlVm8=)
3: Ht4mv8kp4i3crO6SB184ED4eteI.roa (hash: UhjKCPcDd1ersETNcFLEp5rKk3sifo5x89dtS1h38rA=)
4: kCAsSIbvKF55PV7u3rulF5069fE.roa (hash: baPIhS+1QRBCYazJ9uYyJZTSmKcZ6uEAV6jyZHcT50U=)
5: lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl (hash: h48ZXe1DNMGHzBqNjoZqzkG0nm24Xd3XAX7lf2ggOBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:41:fa:33:d7:98:ab:04:5b:6b:ca:5d:ed:89:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Validity
Not Before: Mar 2 07:00:33 2026 GMT
Not After : Mar 3 07:00:33 2026 GMT
Subject: CN=f805a6aadf6d3f9de5e5fb4c3c455f23e67f8a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f9:c3:02:19:af:b6:28:ed:67:86:0f:a8:59:
67:59:09:41:9e:2e:e0:dd:12:48:42:db:af:dd:75:
f0:69:1a:16:c7:e5:5b:7e:e9:f3:ca:91:ed:41:f6:
ce:da:8d:50:d1:c7:16:d2:44:13:56:85:99:33:e6:
99:6b:68:0e:23:0d:dc:3d:c7:1c:54:c4:9c:5c:8d:
f0:24:f2:d8:4f:0d:66:d5:a3:ac:ce:ab:a3:82:31:
81:85:f7:b8:57:0f:cb:df:5f:4b:13:03:0c:10:9a:
c4:4e:20:e4:f4:b2:ba:f6:a1:c4:b6:e1:43:5a:9c:
8c:57:4f:c7:13:48:82:1c:24:a3:30:a1:c5:11:f9:
3e:06:e4:c1:54:69:8c:89:62:0d:0c:79:29:41:23:
08:0c:db:4a:a9:72:04:2a:4d:f0:42:eb:e7:0d:40:
26:dd:e0:cd:85:e1:b0:db:4a:aa:71:b4:a5:da:33:
55:43:91:22:25:35:19:22:f4:5b:6c:e7:07:e4:b9:
9b:53:05:4f:e7:01:01:a0:bb:0e:61:e3:47:e0:b9:
32:77:4a:d1:4d:c0:fa:eb:1c:80:92:90:40:b1:ba:
2b:06:2b:40:c9:59:dd:5b:73:2a:8b:79:81:78:f2:
f6:6a:35:f6:d5:89:de:bc:9c:7d:e8:d7:8a:65:30:
9b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:05:A6:AA:DF:6D:3F:9D:E5:E5:FB:4C:3C:45:5F:23:E6:7F:8A:02
X509v3 Authority Key Identifier:
keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d4:95:11:e1:cb:54:d7:95:92:1c:f2:bc:e0:0c:ef:a2:c4:
39:de:ff:ce:14:dd:74:34:b0:42:19:18:9f:f2:29:74:68:5b:
04:b7:13:dd:46:6a:bc:eb:d8:3d:ce:1d:ae:61:05:fe:e0:c8:
ea:5c:9a:57:f8:60:74:b1:2b:89:f6:81:0f:aa:3c:f6:97:f0:
b7:1d:31:53:73:0c:ab:d9:54:0b:3c:6c:b6:0c:7c:ca:bd:cd:
2b:bc:17:bb:cc:d2:fa:c4:25:35:48:71:d5:de:00:0f:35:b7:
67:bb:86:21:f5:8d:7c:df:01:ca:5d:3b:e0:e7:5e:eb:04:4c:
a3:11:c8:23:b8:cb:bb:43:08:26:37:1f:f7:5e:eb:46:3d:97:
d4:9a:50:36:f7:a7:99:f0:5c:58:fb:b7:b4:62:f5:ec:40:47:
45:40:ea:03:a1:cc:86:ea:5d:b5:f3:ef:b4:f1:82:d0:bf:c9:
43:6f:4f:7b:c6:95:90:82:cc:43:bf:0a:12:b4:f7:8e:8b:68:
72:bd:84:bf:4d:c2:74:a0:18:af:95:4d:54:28:26:37:aa:94:
34:6a:08:20:c6:73:66:c8:67:ad:0c:9f:1c:22:8e:33:bf:94:
a1:fd:67:63:96:05:14:f5:5d:85:d9:c8:63:09:8d:f7:49:f2:
ea:44:32:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:23 2026 by rpki-client