Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
File: lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft (raw, json)
Hash identifier: V1Nipa3mLfRAr6tzgwNGQTQg+OUPJ0krDI2i5GzE6y0=
Subject key identifier: D4:27:68:8D:FB:B7:91:16:1E:E8:6B:BA:40:5E:FD:75:C5:EB:7E:DA
Authority key identifier: 95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA
Certificate issuer: /CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
Certificate serial: 019D9CD20E7EA8C3CD10372D63C39B36E191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
Manifest number: E0
Signing time: Fri 17 Apr 2026 19:01:44 +0000
Manifest this update: Fri 17 Apr 2026 19:01:44 +0000
Manifest next update: Sat 18 Apr 2026 19:01:44 +0000
Files and hashes: 1: 59LkX4aXBLUMkLAwAs9-rWbuAm8.asa (hash: Z213VKCdnM5+8ee00xrFiP1MjFtseCc8292AQptoZLA=)
2: lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl (hash: 5PUyN4KmAq1sQx+wAZgJ9ogJA71Qgjpm8I6mxnc45us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d2:0e:7e:a8:c3:cd:10:37:2d:63:c3:9b:36:e1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
Validity
Not Before: Apr 17 19:01:44 2026 GMT
Not After : Apr 18 19:01:44 2026 GMT
Subject: CN=d427688dfbb791161ee86bba405efd75c5eb7eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8f:69:0f:f3:26:9c:0f:3e:ed:9b:3d:8c:65:
a9:fb:6d:f6:5c:c4:e9:e7:0c:4d:35:bb:c2:eb:8f:
dd:05:19:a0:c5:d5:43:14:8f:20:f0:c0:a0:0a:6a:
19:e9:41:64:29:27:68:4c:d4:34:56:d6:17:d6:ea:
fc:33:c3:83:db:0f:c7:cc:4b:bf:f8:bb:cf:d4:0c:
e2:85:20:9d:49:82:b5:45:8a:26:83:27:b5:d5:ac:
ac:0e:68:9c:08:16:79:84:ee:ff:03:a9:23:26:7c:
58:8e:a7:52:aa:11:db:3c:6d:6d:6a:08:7b:a0:46:
ec:e8:b2:4d:e0:ca:92:f9:7e:d9:41:64:b7:08:64:
e0:69:3e:5d:e1:c9:73:8f:bf:03:0d:d5:1e:ec:c9:
a8:7d:d7:2d:47:26:18:9c:5a:c5:52:a4:01:b0:6e:
3f:f2:e2:fa:f7:1a:30:32:8d:5a:5b:cc:e1:96:f0:
b3:68:3d:4c:c7:3a:31:f0:0e:9b:e2:af:47:51:8b:
9a:79:dd:9c:dc:21:92:cc:54:34:50:93:ef:c5:14:
64:01:2f:66:97:59:56:78:ad:de:ff:0f:4f:1c:08:
9a:fd:6f:81:bc:84:dc:ea:36:76:2f:c9:95:7d:64:
b5:36:a6:bf:9e:2a:9e:87:8c:63:02:16:1a:b0:5a:
30:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:27:68:8D:FB:B7:91:16:1E:E8:6B:BA:40:5E:FD:75:C5:EB:7E:DA
X509v3 Authority Key Identifier:
keyid:95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6a:8d:c7:b1:86:f3:48:65:9a:a8:bf:09:84:bf:e9:fd:5d:
9f:5f:a7:d9:fe:8e:fc:e0:a6:07:fb:04:b0:7c:8b:07:ad:42:
ee:b5:1d:3e:48:02:29:dc:88:09:b3:5b:b1:63:e6:6d:ea:96:
a7:0d:51:25:df:b1:6c:22:90:25:71:1f:e4:35:02:b7:9d:f1:
47:16:04:43:df:a3:8e:e2:a3:ec:3e:2a:53:4b:2d:b2:83:46:
62:e1:f9:38:36:44:87:ed:2e:cd:8b:2b:98:3f:b8:5f:13:4b:
c0:dc:ae:25:c5:1e:a9:d0:75:9e:11:6d:fa:80:66:25:81:16:
de:3a:8b:d1:7f:b7:61:41:db:73:76:c6:39:19:46:6d:93:63:
c8:94:b4:26:1a:5a:5d:33:12:bf:cd:bd:89:ec:68:46:14:71:
4d:97:14:73:9e:65:3e:13:19:72:7d:cd:7b:f4:68:23:6f:30:
fe:72:e3:51:08:9c:55:9b:bd:28:c0:dc:11:c7:88:de:1f:59:
70:92:06:a0:2e:29:9f:21:aa:eb:a6:1a:de:30:b1:d4:d3:30:
02:ff:dc:cf:dd:35:4f:72:24:86:22:5d:39:48:29:6a:44:63:
49:1a:65:c6:b1:17:7d:b5:b2:cc:84:a3:5b:a3:04:e9:cc:41:
59:5b:cb:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2c0g5+qMPNEDctY8ObNuGRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NGZjNGQ4ZGE1NzY1ZjA2ZDdjMjRlZTI3ZGFjMGFmMzQz
MWVkZmEwHhcNMjYwNDE3MTkwMTQ0WhcNMjYwNDE4MTkwMTQ0WjAzMTEwLwYDVQQD
EyhkNDI3Njg4ZGZiYjc5MTE2MWVlODZiYmE0MDVlZmQ3NWM1ZWI3ZWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY9pD/MmnA8+7Zs9jGWp+232XMTp
5wxNNbvC64/dBRmgxdVDFI8g8MCgCmoZ6UFkKSdoTNQ0VtYX1ur8M8OD2w/HzEu/
+LvP1AzihSCdSYK1RYomgye11aysDmicCBZ5hO7/A6kjJnxYjqdSqhHbPG1tagh7
oEbs6LJN4MqS+X7ZQWS3CGTgaT5d4clzj78DDdUe7MmofdctRyYYnFrFUqQBsG4/
8uL69xowMo1aW8zhlvCzaD1Mxzox8A6b4q9HUYuaed2c3CGSzFQ0UJPvxRRkAS9m
l1lWeK3e/w9PHAia/W+BvITc6jZ2L8mVfWS1Nqa/niqeh4xjAhYasFow4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQnaI37t5EWHuhrukBe/XXF637aMB8GA1UdIwQY
MBaAFJVPxNjaV2XwbXwk7ifawK80Me36MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFVfRTJOcFhaZkJ0ZkNUdUo5ckFyelF4N2ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yMWNlMDUtOWNjMi00NDUxLWJkMTkt
MDQwODQ0ZmE0MjM4LzEvbFVfRTJOcFhaZkJ0ZkNUdUo5ckFyelF4N2ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8yMWNlMDUtOWNjMi00NDUxLWJkMTktMDQwODQ0ZmE0MjM4
LzEvbFVfRTJOcFhaZkJ0ZkNUdUo5ckFyelF4N2ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmqNx7GG
80hlmqi/CYS/6f1dn1+n2f6O/OCmB/sEsHyLB61C7rUdPkgCKdyICbNbsWPmbeqW
pw1RJd+xbCKQJXEf5DUCt53xRxYEQ9+jjuKj7D4qU0stsoNGYuH5ODZEh+0uzYsr
mD+4XxNLwNyuJcUeqdB1nhFt+oBmJYEW3jqL0X+3YUHbc3bGORlGbZNjyJS0Jhpa
XTMSv829iexoRhRxTZcUc55lPhMZcn3Ne/RoI28w/nLjUQicVZu9KMDcEceI3h9Z
cJIGoC4pnyGq66Ya3jCx1NMwAv/cz901T3IkhiJdOUgpakRjSRplxrEXfbWyzISj
W6ME6cxBWVvLvA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:05:20 2026 by rpki-client