Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
File: lRUfu3HkGy0QY9OxEUGtoahEx_c.mft (raw, json)
Hash identifier: sCpFZDQCznq/tR+3ARalgkvFwJPEzuEbUkMyp7McwAA=
Subject key identifier: 1E:1C:FE:8D:E4:9B:D5:0C:91:06:94:C1:43:8C:F3:F6:74:EB:4F:D0
Authority key identifier: 95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
Certificate issuer: /CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Certificate serial: 019CAA21466798956A583EE5B66848AC93F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
Manifest number: 14BC
Signing time: Sun 01 Mar 2026 16:00:32 +0000
Manifest this update: Sun 01 Mar 2026 16:00:32 +0000
Manifest next update: Mon 02 Mar 2026 16:00:32 +0000
Files and hashes: 1: 43DpV7xrZKIPgR3LXQiPDkxuS6g.roa (hash: Pz+pBSh7qLUtOCsg2X6KXkUs5v6TAPEm46EKWek5QPQ=)
2: KXQ6A3de6ngkk1WG9cHu1Wh6z8U.asa (hash: 5ZyKxUcShckFXuyMs3UQFf3JSdmvQECqj6DhdV60Ytw=)
3: lRUfu3HkGy0QY9OxEUGtoahEx_c.crl (hash: oylFlelnr0/v8fr9EoOjNkRKGBh/UO6ODbn19PFakwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:46:67:98:95:6a:58:3e:e5:b6:68:48:ac:93:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Validity
Not Before: Mar 1 16:00:32 2026 GMT
Not After : Mar 2 16:00:32 2026 GMT
Subject: CN=1e1cfe8de49bd50c910694c1438cf3f674eb4fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4a:ef:88:15:06:9d:94:64:d3:6c:46:98:e1:
11:39:3f:11:42:a5:2a:93:f7:72:b1:47:04:7e:15:
77:90:7e:fa:5d:43:ba:2f:1f:f9:b6:2b:97:44:ef:
9a:5c:06:8d:fb:30:e3:55:f4:12:0a:c8:24:af:8f:
1c:82:3b:67:0a:df:78:96:23:bb:ff:b7:e5:e5:97:
3f:45:ee:09:e4:e5:f1:12:e7:6d:f7:0f:0f:3f:bf:
3e:27:a6:d0:d6:dc:ff:8a:c2:06:44:6f:ba:bc:2a:
d3:66:05:13:b5:15:44:d0:03:55:21:3f:2d:6b:b0:
d0:c4:92:80:ef:2e:6e:08:57:85:fb:04:7f:ec:1d:
7d:3d:ca:99:11:1c:11:2e:84:df:b7:4b:ac:47:b2:
67:fb:1c:e2:39:ab:81:98:cc:60:b2:12:e1:b1:bc:
94:a0:7b:cb:b4:13:b8:c3:d5:c3:9e:ab:75:ad:0a:
76:6b:a8:56:3b:91:93:c9:41:37:b0:fb:86:24:c6:
ee:85:1b:42:86:95:b9:08:3c:b2:3b:07:ef:35:4f:
c2:5e:c5:22:d5:73:2c:15:b1:c4:00:51:42:26:14:
31:e8:d6:23:49:0b:c5:d5:5c:67:18:71:9e:36:24:
3f:ff:e5:bd:96:b9:ec:a0:c5:cc:08:00:e3:d6:dd:
6e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1C:FE:8D:E4:9B:D5:0C:91:06:94:C1:43:8C:F3:F6:74:EB:4F:D0
X509v3 Authority Key Identifier:
keyid:95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:26:0f:7b:af:37:bd:c1:b5:ba:59:43:a2:0e:29:c3:7f:03:
9a:70:f4:c0:c0:f5:f4:5e:ae:2b:11:0e:25:36:82:3e:60:6d:
4b:d2:c4:8b:04:5e:73:a5:a6:3e:f4:37:11:0c:49:ad:5d:cc:
7c:ba:98:5a:9a:b2:ca:c0:9a:93:2d:69:99:5b:1c:71:f5:a8:
68:00:b2:8b:b7:09:03:56:72:d2:e8:8e:ec:ee:2f:e1:16:df:
07:1f:54:0e:bc:e7:a8:7b:5e:77:ac:ff:13:84:a0:06:fb:4f:
43:28:1d:dd:91:ab:f0:72:86:85:b7:85:6a:ba:10:36:c0:37:
83:be:ac:1c:fb:0a:2f:b3:71:71:ef:9d:f1:a2:80:db:94:0c:
1b:bc:24:2f:4f:7f:ff:6d:2c:49:e1:56:97:e4:16:c4:54:c5:
eb:ce:24:81:cd:f9:b2:21:17:e8:ea:0d:9a:61:e5:bc:52:f8:
7e:ee:ab:ad:b2:94:d7:33:30:9a:22:e6:ff:a3:ed:aa:5d:93:
e3:ed:36:43:5d:cf:d8:82:b2:12:33:3f:69:18:15:bf:00:4e:
04:94:ef:7a:95:fd:3b:9d:45:7c:33:d4:73:b5:14:0a:58:5a:
7d:7b:3c:f8:1a:f4:49:36:74:6c:1b:fa:23:1d:b2:5c:51:da:
cd:b1:65:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:24:27 2026 by rpki-client