Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
File: lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft (raw, json)
Hash identifier: HMGOHKTfZT+U/sping+QUGcWIMFNYnCevmerYAKPy6Q=
Subject key identifier: CC:92:4D:B8:63:C4:19:77:94:01:70:F1:89:3A:77:74:13:1C:CC:EF
Authority key identifier: 95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
Certificate issuer: /CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Certificate serial: 019ED4D0096201959D5FBDBEF078A29A1F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
Manifest number: 07AF
Signing time: Wed 17 Jun 2026 09:01:04 +0000
Manifest this update: Wed 17 Jun 2026 09:01:04 +0000
Manifest next update: Thu 18 Jun 2026 09:01:04 +0000
Files and hashes: 1: McifzUNxziI8WsCXgZeHNz10iWQ.roa (hash: 1R6rZYh+m87Flh7dOcMYHRsZeD59VMaEbBnj6Shuhfs=)
2: lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl (hash: fHO5BBoZjVsGrg88t+P6Qd3QVFcuKJI5+2RYXiu86D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:d0:09:62:01:95:9d:5f:bd:be:f0:78:a2:9a:1f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Validity
Not Before: Jun 17 09:01:04 2026 GMT
Not After : Jun 18 09:01:04 2026 GMT
Subject: CN=cc924db863c41977940170f1893a7774131cccef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2c:c2:8d:f4:c7:58:d7:b1:62:1e:2a:ea:ef:
d8:22:1b:37:f4:85:1f:90:e3:e4:d4:e4:55:fc:80:
a9:4a:bb:28:c3:64:e7:b0:ba:90:9b:63:44:f8:66:
db:a1:bd:95:d8:76:88:9a:1b:3e:47:f3:06:22:1c:
9b:27:79:ba:43:6a:c1:49:75:ee:12:3c:08:aa:61:
ce:eb:0b:25:b4:42:6d:23:ec:a7:c6:f9:3f:5b:a2:
17:69:d3:f0:1f:00:9b:03:8a:d3:a1:73:54:88:80:
0d:35:8d:b8:7d:67:a2:0e:30:09:89:51:e0:0c:88:
6c:fd:2c:25:9a:57:ff:70:ad:1d:fb:35:d1:dc:da:
02:4c:d8:19:b1:30:ee:b5:82:e2:ac:3f:54:55:f5:
5d:58:9b:8c:a1:41:9d:07:31:5f:14:83:1a:85:a0:
4b:73:ba:6e:a5:78:e7:d7:20:82:5c:d6:d8:f8:58:
84:13:8e:e4:31:4b:d0:30:24:b6:29:9f:f9:0c:13:
2d:4a:4b:b2:8f:00:a9:c9:40:5d:4d:71:4e:16:e0:
35:6b:eb:c8:52:31:96:6f:27:de:a3:ed:b1:5a:be:
a7:37:0a:b3:35:98:72:34:e4:4c:87:07:cf:a5:e5:
2e:c2:c9:0b:c5:3c:9c:e1:bd:fa:ab:ee:89:fe:99:
59:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:92:4D:B8:63:C4:19:77:94:01:70:F1:89:3A:77:74:13:1C:CC:EF
X509v3 Authority Key Identifier:
keyid:95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:90:92:e4:83:26:f1:3e:47:df:ee:e1:be:41:4b:4e:4e:4d:
d4:5a:a9:62:31:60:3a:66:17:87:7d:74:56:6d:b2:51:08:f2:
23:4d:46:0b:b8:3b:8f:9d:03:4c:d6:f7:c8:7a:e1:e9:8d:d8:
64:9c:36:ef:9c:e3:39:1b:bc:9f:60:68:ea:bd:75:35:bb:65:
aa:f4:ad:1d:3d:7d:57:93:99:56:cc:49:1d:5c:ff:f1:73:53:
75:88:2a:17:b7:ab:3b:0b:f3:f5:cd:fc:2e:d2:83:8b:0a:b2:
0e:1f:0e:c2:6f:75:4b:75:c1:8e:3c:a6:3a:de:60:a1:8b:f8:
03:80:23:9b:3a:53:9f:44:cd:6e:b8:54:09:e5:3f:16:85:6e:
5f:bb:56:c0:83:b9:c3:48:a7:9c:91:00:85:70:40:62:ee:48:
d4:ae:43:81:5b:09:16:50:d1:83:61:83:53:5f:98:48:01:3f:
79:8f:14:46:36:29:30:95:ea:d8:a5:4b:82:fe:5a:89:b7:f0:
23:ac:14:82:cb:75:ef:c9:e7:12:e0:16:ac:ec:88:6a:e6:bb:
ac:c3:33:13:e7:38:c3:71:22:06:b2:bc:14:02:0e:78:1a:b1:
85:b0:d3:21:a0:c9:ca:43:7d:61:24:09:c0:24:da:7d:7c:47:
22:eb:b1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:10:05 2026 by rpki-client