Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
File: lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft (raw, json)
Hash identifier: xhjU79FP9i0MkaboKcJXGtVtj5n36su+oisxo9D1Azo=
Subject key identifier: F1:22:D3:47:6D:CD:3B:6B:8F:1A:B7:B3:1B:BB:96:0B:74:FD:62:92
Authority key identifier: 95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
Certificate issuer: /CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Certificate serial: 019CAA8FE57AC844B76CA1F9AD4D191E46EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
Manifest number: 0690
Signing time: Sun 01 Mar 2026 18:01:22 +0000
Manifest this update: Sun 01 Mar 2026 18:01:22 +0000
Manifest next update: Mon 02 Mar 2026 18:01:22 +0000
Files and hashes: 1: McifzUNxziI8WsCXgZeHNz10iWQ.roa (hash: 1R6rZYh+m87Flh7dOcMYHRsZeD59VMaEbBnj6Shuhfs=)
2: lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl (hash: RrYmWPBxiFYYdOa62PcQ2GZZ7BsMzdwG65rtGVZM0NQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:e5:7a:c8:44:b7:6c:a1:f9:ad:4d:19:1e:46:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Validity
Not Before: Mar 1 18:01:22 2026 GMT
Not After : Mar 2 18:01:22 2026 GMT
Subject: CN=f122d3476dcd3b6b8f1ab7b31bbb960b74fd6292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4a:76:dc:d8:13:14:e7:08:ec:96:5e:18:c0:
21:46:12:81:7d:90:4f:0e:5b:a6:9f:3b:da:44:c8:
bf:7a:a5:07:ea:6e:de:f0:93:4b:ef:81:6c:d6:e8:
32:6e:28:ed:27:55:8a:b1:ae:51:75:84:b6:fa:ee:
e8:5a:62:fe:6a:8e:b3:6e:94:2f:ab:25:4b:af:50:
86:7a:b3:ed:50:41:23:10:23:d4:91:05:a3:68:92:
1d:37:c4:68:73:04:4d:2f:21:19:80:58:b3:d6:f3:
7c:4d:cd:3a:63:03:54:10:b5:dc:27:05:3d:34:08:
ca:05:52:89:47:1a:f7:fe:22:68:9c:f8:df:c4:fc:
28:d5:f7:8c:4f:79:80:23:62:19:1f:8d:11:4a:70:
0c:73:12:6f:76:71:cd:a7:39:30:49:23:21:be:fb:
75:34:e8:6e:35:c8:30:35:ad:c2:27:31:f4:20:96:
ff:fa:e9:89:51:e2:43:14:a1:60:06:2a:50:f7:a3:
6a:d4:39:84:1a:9d:a4:17:5f:89:ea:74:a5:1b:3b:
56:75:97:c1:f8:0b:4a:52:8a:4f:6b:86:63:91:7a:
84:17:77:69:11:d2:48:eb:18:55:0f:58:9c:90:17:
41:f2:24:df:4e:39:69:4d:d2:b6:e8:b6:29:34:36:
d7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:22:D3:47:6D:CD:3B:6B:8F:1A:B7:B3:1B:BB:96:0B:74:FD:62:92
X509v3 Authority Key Identifier:
keyid:95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:fc:68:f6:02:05:e0:5c:0a:3b:e6:e4:25:37:e2:5a:51:39:
ff:ba:40:ff:e3:ce:33:2a:9f:ab:c8:dc:a5:e7:93:14:c7:f0:
00:a8:04:d5:33:88:6a:38:c2:79:9a:b0:0f:0c:0b:0a:c6:39:
f6:4a:9b:dc:cf:e8:a8:28:fe:35:bd:31:bd:03:ae:08:ea:40:
a5:60:93:ce:fb:f9:aa:50:97:15:f0:a8:19:67:21:b4:49:e1:
66:cb:c5:eb:af:94:bf:32:61:fc:cd:83:4e:88:78:9b:1f:c4:
17:7a:fa:89:78:33:6c:2b:eb:6a:61:28:b8:f3:c3:9d:da:08:
11:55:87:62:45:b0:8c:c3:d1:ee:65:0d:f7:59:45:9c:b4:91:
8f:3e:09:ee:b6:aa:77:c4:a6:99:13:3a:94:2d:32:ef:61:e1:
77:72:e8:ee:4f:b2:13:a8:4d:50:49:1d:ad:fa:2f:1d:a7:a3:
49:dc:f1:35:96:9d:cb:c6:7a:ec:3c:8a:7e:fa:06:f4:ad:db:
55:e1:63:be:e7:16:93:c9:88:c4:28:46:bc:3e:af:58:10:a0:
f4:53:3c:10:4a:21:8a:73:a0:ba:30:d0:99:26:62:ad:56:3c:
9d:15:8f:41:27:c7:a0:50:81:98:e7:6d:59:ae:8c:73:fb:17:
b0:6a:97:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:51 2026 by rpki-client