Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
File: lRUfu3HkGy0QY9OxEUGtoahEx_c.mft (raw, json)
Hash identifier: aEFHsvBUB/5U5XgQ1rMIaIWe4XG3hmQHLV/9+x+9k1c=
Subject key identifier: 4D:DC:A0:C6:19:AC:E1:2B:91:67:3D:DA:19:36:06:B3:15:C0:D4:58
Authority key identifier: 95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
Certificate issuer: /CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Certificate serial: 01A0C6A0D48C460E3A6220C1E70B1CC83599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
Manifest number: 16DD
Signing time: Tue 22 Sep 2026 01:00:23 +0000
Manifest this update: Tue 22 Sep 2026 01:00:23 +0000
Manifest next update: Wed 23 Sep 2026 01:00:23 +0000
Files and hashes: 1: 43DpV7xrZKIPgR3LXQiPDkxuS6g.roa (hash: Pz+pBSh7qLUtOCsg2X6KXkUs5v6TAPEm46EKWek5QPQ=)
2: KXQ6A3de6ngkk1WG9cHu1Wh6z8U.asa (hash: 5ZyKxUcShckFXuyMs3UQFf3JSdmvQECqj6DhdV60Ytw=)
3: lRUfu3HkGy0QY9OxEUGtoahEx_c.crl (hash: FreQdShzuazLVnZtHzAV2OV4WoUy6dkuy9mSWQuH/Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a0:d4:8c:46:0e:3a:62:20:c1:e7:0b:1c:c8:35:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Validity
Not Before: Sep 22 01:00:23 2026 GMT
Not After : Sep 23 01:00:23 2026 GMT
Subject: CN=4ddca0c619ace12b91673dda193606b315c0d458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1a:b8:f8:4f:58:07:bd:5a:a6:be:e1:aa:9e:
4e:5a:75:49:cb:37:e3:f3:da:57:e0:42:d1:d8:ea:
a0:23:4a:78:3c:ec:70:62:a9:2e:cf:ce:f5:4f:ec:
fd:40:17:54:ca:30:dc:33:36:b2:d9:e6:91:bc:34:
d7:c5:ea:49:cb:39:58:89:47:ae:1a:5d:17:b1:3c:
9e:8a:1d:7e:3e:be:75:47:15:a2:97:80:c3:0d:8b:
ea:28:38:3a:ba:8c:20:44:d2:b3:32:38:70:78:f9:
82:dd:e3:21:0f:20:5c:d4:23:af:0c:1f:1a:f3:8f:
ff:15:4f:0f:cb:97:fa:f3:fa:e1:ec:85:c3:f6:73:
31:2d:9d:8b:5a:64:fb:8f:91:0e:10:8b:56:ab:fa:
8e:42:54:5c:78:38:6e:4c:4e:fa:9f:da:48:b7:20:
15:69:f7:cb:be:9b:96:6f:d9:6f:b2:64:5d:11:af:
26:a5:7d:6e:b8:79:e3:16:5a:97:a4:ab:fb:df:fa:
33:7d:c4:78:05:ed:50:8d:5c:03:dd:5e:bb:c7:d1:
7f:50:24:be:6d:f4:79:6f:91:90:3c:a0:38:d6:59:
ce:8e:bd:46:62:20:a8:48:db:61:0e:5d:1d:07:92:
12:b1:5e:e6:a5:74:7b:0d:b9:64:9c:5c:f3:9e:ce:
3c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DC:A0:C6:19:AC:E1:2B:91:67:3D:DA:19:36:06:B3:15:C0:D4:58
X509v3 Authority Key Identifier:
keyid:95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:66:7b:fe:5a:27:3c:e1:bf:99:f0:e4:5e:ca:00:bf:9f:e2:
d7:f9:9f:51:a9:d9:a8:3d:46:5e:05:55:d3:80:24:b3:2f:81:
af:f4:2c:32:03:13:1e:20:25:9a:32:81:3a:aa:3a:4d:8b:ca:
38:6d:4a:30:3c:ac:48:51:ce:4a:32:80:6c:dc:5d:bb:3d:39:
1f:0f:53:4a:3a:b2:8f:12:52:96:c7:ff:fe:11:ed:7d:71:02:
db:05:b7:e3:fa:65:ac:df:2b:2c:4e:d4:11:ff:62:61:c2:b3:
ad:7d:0a:a2:59:28:1a:bd:7c:95:dd:fe:05:89:3d:9b:0b:fc:
cf:a6:24:8a:27:e7:92:95:7d:db:9e:4c:55:5f:f4:23:ec:43:
97:05:39:56:a8:7d:f4:02:05:8f:cc:f2:45:04:1e:5c:31:7e:
5e:e0:f6:78:10:60:7c:98:2a:c5:d7:01:82:38:f8:de:94:fb:
a3:5d:6c:3f:41:04:fd:db:5f:3b:02:00:2c:08:0f:4c:a9:2f:
83:e5:b2:7f:c9:35:c8:6b:fb:87:4b:c6:ed:bd:7d:7d:ac:5f:
3d:ab:a2:9a:7b:c7:c6:90:5f:43:47:c8:bc:b7:95:aa:f8:9a:
2c:66:47:70:ad:4d:85:83:ad:c8:87:d0:3a:d9:4c:62:29:af:
bd:4c:53:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:00:47 2026 by rpki-client