Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
File: lUqTUetm2NhiTiDRafdmty9YrMA.mft (raw, json)
Hash identifier: 4EzUqToJjZwZtn1fnyLu4lezubY4rwyAJRlbGT93Knw=
Subject key identifier: 1C:19:C3:E5:7D:A0:8C:69:40:00:15:04:74:EE:2F:48:5C:FC:85:B4
Authority key identifier: 95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
Certificate issuer: /CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Certificate serial: 01A0C632BEFF4F7DC27FEE935B9756FFB223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
Manifest number: 061E
Signing time: Mon 21 Sep 2026 23:00:09 +0000
Manifest this update: Mon 21 Sep 2026 23:00:09 +0000
Manifest next update: Tue 22 Sep 2026 23:00:09 +0000
Files and hashes: 1: Cqp-7RFmWIRhPlRItz8b7WniVM8.roa (hash: WN3y68b5/hiQoqHDZtfcy65p4h2IyPgin5+Be6vlaV0=)
2: lUqTUetm2NhiTiDRafdmty9YrMA.crl (hash: 9DvNi9FvKGBhPA2XnHR21YBhi9xgNNvOLlpgPz1AjGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:32:be:ff:4f:7d:c2:7f:ee:93:5b:97:56:ff:b2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Validity
Not Before: Sep 21 23:00:09 2026 GMT
Not After : Sep 22 23:00:09 2026 GMT
Subject: CN=1c19c3e57da08c694000150474ee2f485cfc85b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cd:a5:97:b9:e7:0a:cb:6b:f8:11:45:29:a2:
d0:80:77:b3:20:85:6b:fc:78:55:61:f6:eb:b6:22:
cd:b2:f3:d7:c1:ef:62:3d:fd:5d:ca:e9:78:11:83:
1e:84:3e:c0:78:da:c0:69:b6:89:7b:cd:53:98:f9:
e8:c5:3c:3e:04:db:62:04:a5:e4:68:bb:49:bb:44:
c9:4e:89:54:11:61:17:79:b7:d8:50:22:ec:75:bc:
99:9a:a9:b3:35:0b:0c:d2:3a:2d:25:db:9d:14:46:
1d:3b:ee:ec:22:f1:11:d3:de:c0:24:e0:59:bf:09:
5d:e3:64:7f:fb:d0:d9:5d:b6:94:66:5f:6f:36:a7:
eb:02:d2:6d:bd:92:a5:c1:c1:ea:6f:cd:0c:80:86:
5f:54:1e:e7:17:ab:33:88:a7:11:34:d0:0c:df:6f:
cd:61:43:dc:fa:5e:d6:05:16:42:ab:04:55:b8:d2:
c3:bb:b7:c2:0f:6d:50:6e:cf:25:50:3d:ae:1f:d6:
2e:3f:aa:92:bc:0c:a2:f6:e2:91:da:84:fd:14:26:
68:00:70:a4:a5:dd:7a:4a:5c:0a:5c:84:5e:f6:17:
c2:fa:c8:c3:4e:7a:68:b0:e4:e5:2e:ec:46:c8:46:
07:c7:5e:9a:70:a7:4a:28:37:d2:e3:86:ea:f7:b2:
e3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:19:C3:E5:7D:A0:8C:69:40:00:15:04:74:EE:2F:48:5C:FC:85:B4
X509v3 Authority Key Identifier:
keyid:95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:98:ef:d7:b5:90:1c:c2:c4:a0:a1:07:a0:2a:68:36:16:11:
13:cb:28:26:d8:98:b5:1a:cd:85:6f:f9:77:13:02:b8:ed:aa:
45:17:51:79:0d:3d:25:3f:e5:8b:ff:05:4a:9b:2c:0b:3b:f5:
03:35:59:f9:7f:04:6a:aa:a0:60:9b:0c:20:67:05:11:4f:af:
bd:1b:de:36:3d:df:4e:f7:31:69:bb:6f:d0:75:4b:bc:31:6f:
0b:88:7f:c6:be:5a:49:5c:8b:2a:25:ce:de:7a:4d:b5:d1:3f:
c8:e8:e7:0d:a3:4a:50:38:1d:76:21:87:2a:e6:b9:04:62:f4:
85:d6:f0:a6:30:c0:75:c6:bd:76:16:d2:d9:4c:99:c8:06:f0:
f8:70:2f:4a:cf:be:45:95:30:9d:90:ef:fd:0f:da:dd:6b:12:
ea:cb:91:41:32:45:59:5d:77:2a:8e:df:bf:5f:66:c8:f4:3c:
e0:09:45:35:84:cd:c5:26:5f:bc:81:6f:3d:c3:cd:d2:48:65:
17:cd:96:93:e1:11:c7:7c:17:89:ff:0c:70:56:ae:a0:78:1e:
d2:f1:37:d7:da:7c:14:72:88:ea:e3:e7:a1:e6:e4:65:ae:ae:
35:60:91:42:f5:87:bd:d0:d5:cc:83:c9:c8:ff:12:0e:0c:f7:
56:99:91:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:01:24 2026 by rpki-client