Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
File: LUFhUhEtrymCRCUnsPlE5IKFgy4.mft (raw, json)
Hash identifier: FBzpoR0RbuZYy32v9Ft2DpTaP3i9ChZeJpM298Lo3G4=
Subject key identifier: B4:7A:25:AF:E8:BC:62:18:DA:AE:98:7E:B1:0F:EE:C4:3C:DD:6E:8B
Authority key identifier: 2D:41:61:52:11:2D:AF:29:82:44:25:27:B0:F9:44:E4:82:85:83:2E
Certificate issuer: /CN=2d416152112daf2982442527b0f944e48285832e
Certificate serial: 019CACB495D3B8E2A4466BA9165B69E7086B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
Manifest number: 07CA
Signing time: Mon 02 Mar 2026 04:00:41 +0000
Manifest this update: Mon 02 Mar 2026 04:00:41 +0000
Manifest next update: Tue 03 Mar 2026 04:00:41 +0000
Files and hashes: 1: LUFhUhEtrymCRCUnsPlE5IKFgy4.crl (hash: 42BqqQGokWvFIzsIaZl9iwSj2MwEUI4OuJh/uz1JqNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:95:d3:b8:e2:a4:46:6b:a9:16:5b:69:e7:08:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d416152112daf2982442527b0f944e48285832e
Validity
Not Before: Mar 2 04:00:41 2026 GMT
Not After : Mar 3 04:00:41 2026 GMT
Subject: CN=b47a25afe8bc6218daae987eb10feec43cdd6e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:57:31:7b:53:a5:72:94:8d:4e:37:97:e6:
ca:db:da:19:91:49:bf:b7:a9:99:09:ea:e8:ab:48:
e1:8c:99:ef:d2:74:2b:1e:b0:2c:4a:6a:5c:36:ad:
e6:68:91:ee:fb:a2:39:31:44:a3:be:00:75:64:c0:
9d:fa:10:62:ef:7c:59:cf:f1:d1:c7:b1:55:2e:3a:
57:d0:a8:ab:da:02:dc:10:d1:86:f0:43:c4:72:ed:
f6:89:5c:3a:33:2f:d4:e8:dc:1f:95:46:20:2d:6c:
19:ac:1b:ca:df:06:e5:4e:2f:f9:0e:39:35:cd:e7:
df:3c:a0:16:cb:4c:b5:b0:b7:19:0d:85:b3:6c:11:
34:a6:80:69:c3:17:e0:e2:8d:7e:3c:de:e3:99:27:
a1:e8:b5:55:be:79:38:15:d9:7e:63:bb:c3:37:04:
07:7b:e3:c3:83:3d:8a:ab:0e:65:cf:70:9b:0d:c7:
b5:3b:dd:2d:80:42:07:d9:82:08:8d:44:e3:2a:46:
64:39:53:df:66:5a:a8:03:8d:92:b1:c0:22:ef:9c:
37:b9:58:e1:1b:f7:67:2d:49:03:61:b7:6a:71:ed:
ba:a9:a6:47:67:dc:7c:bb:95:44:d0:8b:d8:73:29:
02:da:67:5b:92:46:f5:23:a6:3d:88:34:3e:c2:00:
e7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7A:25:AF:E8:BC:62:18:DA:AE:98:7E:B1:0F:EE:C4:3C:DD:6E:8B
X509v3 Authority Key Identifier:
keyid:2D:41:61:52:11:2D:AF:29:82:44:25:27:B0:F9:44:E4:82:85:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ab:2d:e7:2b:29:52:8a:b5:b0:45:08:37:5a:db:56:a7:ae:
19:82:86:eb:29:9e:dd:d3:a7:72:72:47:f0:12:dc:52:86:89:
f3:8f:e0:5e:b5:9e:f8:d8:28:7b:d9:0d:74:96:7b:42:0e:84:
96:0b:8c:6c:b8:6e:08:64:66:b0:b0:7c:9e:d0:de:a0:c5:13:
af:63:4e:9e:b1:42:61:34:a7:6b:e6:ec:12:9c:f4:9d:11:d2:
02:d6:9b:0d:a4:11:d0:a4:e4:81:b2:73:b7:a0:0d:8f:b0:93:
ad:b9:94:d9:b0:9d:a8:7d:ba:ab:30:48:15:07:e0:cb:3c:60:
87:af:ea:ca:fa:37:97:42:41:09:7c:66:0c:4c:54:f7:b6:05:
e9:39:9c:91:b7:62:3a:7d:0f:e0:c5:60:0f:a6:e9:20:60:69:
61:61:c0:37:04:a4:cc:87:48:94:1b:ab:a6:40:6f:1e:42:0e:
32:04:0b:b5:48:9e:db:00:61:78:f9:c1:55:ae:3a:32:8d:57:
f5:bb:5c:da:be:fe:e3:7c:81:2f:1d:cc:05:08:33:41:12:ca:
b9:63:6e:fa:23:2e:c5:cb:1a:98:c0:32:83:97:fe:0e:8f:4b:
ef:c5:5b:0c:34:5a:bb:ca:43:f4:69:0a:03:e0:f1:cc:27:7f:
69:e5:c5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:27 2026 by rpki-client