Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
File: lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft (raw, json)
Hash identifier: dTqErTdgaM60d4ufQpVii48YprpomFd+KgoOfNto480=
Subject key identifier: FD:7F:96:D7:F7:F1:59:04:39:F6:7E:4E:6F:0E:EA:C7:D7:90:8D:9C
Authority key identifier: 95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA
Certificate issuer: /CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
Certificate serial: 019FA82BD058826C82257C6C887B48D69167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
Manifest number: 01EF
Signing time: Tue 28 Jul 2026 10:01:11 +0000
Manifest this update: Tue 28 Jul 2026 10:01:11 +0000
Manifest next update: Wed 29 Jul 2026 10:01:11 +0000
Files and hashes: 1: 59LkX4aXBLUMkLAwAs9-rWbuAm8.asa (hash: Z213VKCdnM5+8ee00xrFiP1MjFtseCc8292AQptoZLA=)
2: lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl (hash: /K7zWdcDN0RXhzPV+yPIkYqFwkfXMpfjMO9/WSlKats=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:d0:58:82:6c:82:25:7c:6c:88:7b:48:d6:91:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
Validity
Not Before: Jul 28 10:01:11 2026 GMT
Not After : Jul 29 10:01:11 2026 GMT
Subject: CN=fd7f96d7f7f1590439f67e4e6f0eeac7d7908d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:e4:72:67:05:41:b2:12:88:2a:2f:a8:3f:
0a:32:e0:ee:18:a0:31:18:15:ae:41:a6:4b:e1:a4:
75:f2:f5:64:23:a5:cc:a9:78:3b:37:88:82:9d:ec:
dc:05:28:87:61:14:39:ac:4d:81:48:a1:b4:5c:99:
a3:b0:c4:c9:a2:ad:3e:44:e1:4e:a8:22:aa:87:9f:
4b:51:39:f0:ed:b6:4e:1b:e4:42:18:e3:e8:ca:b1:
3e:71:30:02:d7:1a:96:83:ff:84:27:52:1d:c0:62:
19:4a:fb:72:e5:48:43:61:48:85:08:4a:8f:2c:9c:
55:33:31:f2:d3:21:81:1b:c6:1f:1d:80:a1:0e:98:
2e:7c:92:8e:f9:fd:0b:a3:7b:46:38:15:2b:4e:cf:
5f:cb:28:f1:18:3f:68:4c:1f:a6:c3:79:96:d7:dc:
5e:e5:22:ba:5d:a3:5d:ac:6b:8b:e4:a1:69:3f:e2:
36:40:40:02:75:5a:ca:ef:43:6d:d1:dd:ac:38:e9:
eb:1c:76:33:17:50:2f:cf:f8:7d:13:61:85:e2:69:
0c:b4:ef:f4:34:99:99:8b:b4:c8:df:99:f6:45:2c:
52:8a:b5:a2:50:95:f1:13:c1:4f:53:39:f6:62:54:
46:c2:1d:5c:d4:13:00:aa:3f:2c:10:f7:d6:78:f0:
f2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7F:96:D7:F7:F1:59:04:39:F6:7E:4E:6F:0E:EA:C7:D7:90:8D:9C
X509v3 Authority Key Identifier:
keyid:95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:eb:74:a5:37:06:a4:59:17:61:21:ff:d8:7a:d5:02:5a:89:
1d:39:c1:7c:f6:24:a5:0d:ae:8f:14:4b:88:e3:de:84:d6:23:
13:da:96:0d:af:57:8d:ef:45:17:c8:e6:9f:71:81:65:85:89:
77:8d:90:45:49:e9:46:50:01:d2:f6:9f:69:fc:c4:69:16:f4:
c9:41:98:b9:98:2a:9a:18:e5:9d:07:1b:4a:2a:79:91:d1:90:
87:bd:f5:9c:0c:2a:b7:a0:ab:f7:e1:92:6d:7b:ee:af:39:e7:
12:68:5d:c2:c4:78:86:40:f2:03:da:e8:33:5a:e3:42:50:c1:
ab:23:8d:54:74:5a:f9:aa:81:39:ee:8d:48:65:57:c5:d8:c6:
39:f5:26:63:62:0d:e9:6d:3c:8f:68:31:33:f4:24:1a:40:57:
f1:90:f6:91:0e:c3:25:15:b3:22:50:f0:14:3d:7d:e6:fa:a7:
a4:cd:e9:50:35:b8:61:86:c3:6e:4b:51:e8:ea:0c:a4:fe:95:
c3:82:ff:2e:77:e5:90:ee:48:f6:d9:b5:93:21:03:2c:5b:f7:
79:81:aa:ef:7f:43:e7:e7:cc:c1:d0:ed:5d:cc:db:10:29:9c:
99:ec:74:2d:09:75:db:95:0c:8e:55:6c:f3:9f:18:ff:55:74:
1a:d7:6e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:48:04 2026 by rpki-client