Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
File: lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft (raw, json)
Hash identifier: t39wxrp/fQ0BQF8rP3BMCuv9zD9AL2NUZlpkw+wFQ6A=
Subject key identifier: FE:CB:83:59:AE:23:E6:67:EE:F8:0C:DC:19:95:68:FE:83:EF:2E:60
Authority key identifier: 95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA
Certificate issuer: /CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
Certificate serial: 019CA8D818A7892EEAA431B233BA5FF7EAF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
Manifest number: 60
Signing time: Sun 01 Mar 2026 10:01:00 +0000
Manifest this update: Sun 01 Mar 2026 10:01:00 +0000
Manifest next update: Mon 02 Mar 2026 10:01:00 +0000
Files and hashes: 1: lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl (hash: z3T9EsZEuOA2CdJaBxz91QgiWQhzAszvR52Sgvi9qEw=)
2: xtHXPk4W92n0LCAl91mK293p0b0.asa (hash: kh969yxtGkOu/TJNHd1FmXb6qdM0IeUvqQnojIlQfB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:18:a7:89:2e:ea:a4:31:b2:33:ba:5f:f7:ea:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
Validity
Not Before: Mar 1 10:01:00 2026 GMT
Not After : Mar 2 10:01:00 2026 GMT
Subject: CN=fecb8359ae23e667eef80cdc199568fe83ef2e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:62:65:bf:b7:54:18:0c:3a:bd:bb:b4:2b:ba:
c7:12:11:ac:4e:73:6e:1f:d6:9a:eb:7e:a4:eb:8f:
85:ab:37:29:0b:7f:78:98:59:63:c7:72:52:03:34:
f2:a3:36:cb:bb:71:e8:88:32:c2:28:0d:d4:1d:b9:
4e:2c:83:8a:7d:ba:61:6c:2a:db:fb:b8:d2:e1:b7:
a6:63:a4:19:aa:89:d2:ed:3d:94:8c:05:c6:78:2e:
3c:e4:37:a0:12:2e:22:48:2b:ac:74:d0:7f:b5:31:
c3:2d:be:4e:ae:61:6c:84:6b:3e:6c:0c:75:02:c3:
a1:14:32:a5:42:56:96:de:e7:9e:88:f3:74:88:d0:
db:ae:ee:31:46:50:5c:a1:f5:96:1e:5b:c8:d2:6d:
d2:85:e8:9c:35:e7:f0:f7:06:da:18:d7:f1:c0:98:
a3:f5:29:48:73:99:f5:95:d0:4f:00:ea:86:bd:f2:
85:72:9c:7d:d8:93:9a:da:91:ba:1c:ec:f1:d9:b1:
2a:8f:ce:42:6b:b3:9c:23:2a:b3:6a:84:7a:77:3c:
c0:ad:67:ec:7c:07:7b:39:9f:c0:13:9e:31:48:07:
7a:5d:d8:50:b7:03:22:79:6b:bb:7f:e7:e6:9f:df:
8d:a8:bb:85:b3:4b:e4:5e:80:11:26:23:da:66:3f:
37:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CB:83:59:AE:23:E6:67:EE:F8:0C:DC:19:95:68:FE:83:EF:2E:60
X509v3 Authority Key Identifier:
keyid:95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4d:44:5a:b3:52:90:56:80:d5:9b:61:89:98:a8:76:3b:e6:
26:17:26:8c:19:30:60:6c:b7:f7:50:d0:a3:36:6a:82:9d:7d:
ef:60:16:b6:a4:c3:67:ab:70:f1:47:31:05:51:c8:75:93:e8:
ed:bb:0d:c8:14:db:d9:8e:70:a1:1e:07:2d:3d:27:43:92:32:
64:37:c2:f6:a0:94:40:3f:70:b7:f9:8b:3c:21:17:e1:8b:a6:
10:67:fe:2d:6e:89:cb:51:66:36:48:e7:03:6d:37:1d:2b:55:
e7:3f:15:38:70:c6:51:0d:f6:2a:69:58:00:28:41:b0:c4:35:
17:fb:16:84:35:c4:67:31:95:5b:06:59:e1:94:68:45:42:23:
3c:9f:d5:83:27:ff:75:74:3e:70:ae:0e:1e:5b:58:3d:d2:2d:
48:dd:4b:7a:de:4d:44:44:25:c3:e3:af:cf:93:8a:9a:80:72:
24:10:71:f4:76:1f:28:34:11:90:63:63:21:e3:90:b3:49:31:
24:b5:07:61:74:8e:3f:56:5d:8c:92:94:28:9c:9a:be:35:c2:
b8:5d:d8:63:7c:1c:ca:a6:01:f3:61:df:8d:7c:ee:d7:04:66:
26:da:71:10:ef:e8:23:6e:5b:31:98:ee:0a:75:3f:98:14:7e:
ac:40:54:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:23:25 2026 by rpki-client