Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
File: lUqTUetm2NhiTiDRafdmty9YrMA.mft (raw, json)
Hash identifier: W54UjnFArMcimz7oWyUXRndQywIh9+Y+YAM0fYGoyS4=
Subject key identifier: 83:F8:20:49:7C:FA:34:90:72:0C:78:9C:3C:26:9E:01:FC:18:27:FF
Authority key identifier: 95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
Certificate issuer: /CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Certificate serial: 019EC0A3D97C6AC4D861EAD33EC609D6C671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
Manifest number: 0512
Signing time: Sat 13 Jun 2026 11:00:23 +0000
Manifest this update: Sat 13 Jun 2026 11:00:23 +0000
Manifest next update: Sun 14 Jun 2026 11:00:23 +0000
Files and hashes: 1: Cqp-7RFmWIRhPlRItz8b7WniVM8.roa (hash: WN3y68b5/hiQoqHDZtfcy65p4h2IyPgin5+Be6vlaV0=)
2: lUqTUetm2NhiTiDRafdmty9YrMA.crl (hash: WJZ8rfCk2fpVGALpmO/C48t3wQyyFrpZu2x25a3QHSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:d9:7c:6a:c4:d8:61:ea:d3:3e:c6:09:d6:c6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Validity
Not Before: Jun 13 11:00:23 2026 GMT
Not After : Jun 14 11:00:23 2026 GMT
Subject: CN=83f820497cfa3490720c789c3c269e01fc1827ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:af:15:70:75:da:05:d4:6e:85:53:5b:9e:c9:
b1:3f:b7:27:2c:f6:a3:ba:c9:a6:aa:e7:51:20:94:
81:8f:2e:3b:d5:9b:58:9a:77:41:4e:2e:ab:61:f3:
33:ab:1d:02:12:3c:81:4b:25:14:41:b6:f2:e1:10:
94:fa:2b:8e:3f:43:14:9f:ee:12:20:31:e8:a6:57:
2e:82:c6:02:fe:0c:28:ad:24:5e:8a:cb:02:33:82:
fe:03:c3:49:bc:ba:7a:51:7b:94:69:22:fc:9b:d6:
7a:0d:83:70:27:6d:90:b7:b4:4d:be:ef:28:73:00:
9a:9b:ca:96:6b:11:9a:10:c0:3d:bb:1e:39:54:be:
a4:b2:bd:f0:69:b1:00:f9:6c:ca:79:ff:ce:89:fa:
c0:fc:67:b3:ed:22:87:59:13:b3:f7:30:95:7b:60:
dd:f3:4a:06:ea:63:6b:b4:f7:c7:f2:eb:57:2d:0e:
3d:5f:f7:d0:6d:71:85:eb:f3:15:cf:3f:28:b2:c1:
83:43:90:d8:09:b9:9e:79:7d:b9:6d:e5:a8:4b:06:
59:45:33:d0:99:c7:45:82:d4:d8:42:7e:7b:70:03:
ef:c8:d9:47:a4:9a:40:48:e8:49:d0:91:04:91:03:
c2:96:39:af:e1:a5:9c:c2:92:cf:44:2f:ac:de:3a:
4c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F8:20:49:7C:FA:34:90:72:0C:78:9C:3C:26:9E:01:FC:18:27:FF
X509v3 Authority Key Identifier:
keyid:95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b7:9c:07:3e:d8:05:e1:5f:88:39:78:6b:3a:b7:d1:ef:fb:
eb:8d:a9:9f:07:66:dc:23:4e:80:d7:c1:0e:ae:44:a3:f7:ed:
3f:be:6f:e9:a8:99:1c:6c:67:bb:fa:62:71:13:63:b5:c7:9a:
26:1f:d9:fc:72:6f:04:bd:72:39:f0:54:ea:26:d0:b8:8c:e3:
bf:a0:09:4f:89:6f:53:ff:dd:65:f4:e4:70:47:ea:cd:c0:71:
2a:2f:b9:dd:f9:a9:65:94:03:a5:e3:a2:f7:7f:be:73:cc:64:
c1:31:db:4e:4e:7e:29:aa:bf:4c:65:2d:88:6a:cb:00:f3:d7:
c5:07:6e:15:3e:ef:71:db:1e:9d:28:2d:92:1c:86:9a:29:1a:
19:a3:26:bd:01:35:b9:15:4a:82:0e:e7:55:8f:db:4b:7f:70:
78:0d:a8:f2:09:71:78:6b:05:fb:cc:3e:25:d6:6d:5c:f8:b6:
49:09:00:91:40:45:f0:c2:95:8f:2b:a1:83:f0:bb:bc:d2:46:
a4:c5:f1:18:46:63:a3:5d:1e:22:ff:21:a3:46:0d:8b:35:7e:
28:10:5a:30:ed:54:4f:ed:cb:4f:19:9e:a6:16:62:8a:2b:09:
d1:22:9f:00:38:96:84:e5:6b:28:f3:eb:47:ee:fc:2e:00:d8:
51:97:bd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:56:29 2026 by rpki-client