Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json)
Hash identifier: CDNfDuDAfaaAdhLfH/dV3panf27Lib5unVDzMVK9arw=
Subject key identifier: 7D:D7:99:04:AB:CD:A3:5C:79:28:9C:4C:74:4E:57:D2:D4:B2:AF:1A
Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Certificate serial: 019F841F1B3073C0607167405DFD7F33214D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
Manifest number: 0B36
Signing time: Tue 21 Jul 2026 10:00:58 +0000
Manifest this update: Tue 21 Jul 2026 10:00:58 +0000
Manifest next update: Wed 22 Jul 2026 10:00:58 +0000
Files and hashes: 1: DlYdZNTLvfx2OD11UfQRnD3hK2o.roa (hash: Yz+AdjCjCsAlEW+BjCHTyQFo7Owy/uvBTZnF71MgcBA=)
2: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: D38GmZH2EkGR9Lw6vhb/hrzA5mGA6DyWEJxQEIo6y8E=)
3: zw7G6rZ3OugQehoBP3QpVRIzHKs.roa (hash: Ywv0pQZLRrxCf8Y+ep3+4GqTg47V6bf1LboUdnUKZNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:1f:1b:30:73:c0:60:71:67:40:5d:fd:7f:33:21:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Validity
Not Before: Jul 21 10:00:58 2026 GMT
Not After : Jul 22 10:00:58 2026 GMT
Subject: CN=7dd79904abcda35c79289c4c744e57d2d4b2af1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ef:ff:4b:1e:cf:ee:e7:b5:79:35:45:29:48:
c3:4f:f9:ce:4e:be:f0:e6:8a:51:b3:f9:0c:05:dd:
f4:cf:08:6c:9c:32:51:7f:d7:a6:0e:5b:9e:a9:b2:
07:64:0f:3f:6d:3c:42:b3:da:39:cd:07:bf:92:d0:
dc:b7:6b:b6:9d:68:7c:c6:c4:a7:43:ee:d0:c8:c5:
90:b9:81:20:ba:ac:17:14:ba:1f:d0:76:99:61:2b:
4f:5e:d6:72:72:32:23:cc:b7:ca:d2:ed:24:33:22:
e9:08:02:e2:69:1c:83:16:50:de:a1:ae:f6:4e:a5:
c0:79:a8:ab:50:cc:d5:de:6a:b1:46:06:34:a5:33:
6f:0c:c6:c1:f0:6d:2a:bb:ea:3b:d6:7a:71:c6:2a:
86:62:4c:0c:fb:8c:ae:61:82:93:bb:eb:65:ab:6b:
f1:de:e9:6f:b4:4d:ed:84:a4:06:51:ac:1e:4a:a3:
15:09:b0:17:18:7b:75:22:b9:c6:35:18:d7:97:ee:
dd:f7:23:fe:0c:2e:35:5d:16:c5:54:4a:a3:0c:b5:
27:b5:1a:21:17:08:9b:b4:cf:ff:96:f2:86:8f:93:
f9:e5:58:b3:d6:a6:3f:a9:3e:a2:52:19:31:16:44:
8c:8a:12:ed:df:d0:32:e3:a2:f5:3e:1f:c4:e7:01:
f4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D7:99:04:AB:CD:A3:5C:79:28:9C:4C:74:4E:57:D2:D4:B2:AF:1A
X509v3 Authority Key Identifier:
keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:28:5f:28:31:d8:cf:ce:1a:cf:0c:ff:6b:38:13:fd:ce:c6:
20:48:c5:59:6d:e1:ea:f9:40:ca:77:7f:68:e4:e5:b5:1d:dd:
68:be:a7:73:8a:b0:14:ac:35:cc:e3:43:06:0f:01:67:81:16:
bc:37:74:e3:20:68:a6:f5:db:99:55:87:50:16:a0:df:6c:77:
3a:5b:b0:53:a3:b8:87:c3:85:87:f1:93:3d:c9:67:4e:ff:54:
7b:95:82:f5:b3:89:1a:9b:1c:86:70:51:a0:a2:f2:69:5f:cc:
1c:7b:47:44:b7:dc:bc:7f:b0:ce:a6:88:c7:0e:05:81:94:38:
83:03:bd:94:53:16:6c:71:d7:95:dc:c1:a8:4a:ba:00:26:be:
72:19:7e:ae:cc:0d:76:85:42:02:44:08:56:5f:3f:87:69:50:
ba:b5:03:a7:31:73:8b:91:a6:e1:92:24:bc:46:a9:52:77:21:
bc:11:6c:6e:4c:fb:ee:63:16:7d:86:01:cf:4c:a2:b3:42:42:
73:99:e4:b6:7b:e8:11:ee:2d:98:e8:f0:fc:54:97:f6:ca:bd:
d4:ec:2e:18:5b:16:66:eb:79:9d:9d:dc:df:12:6d:da:27:f2:
78:2e:ad:cb:73:e8:04:ac:17:43:5f:52:11:dc:e1:f1:db:39:
f1:55:e8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:43:51 2026 by rpki-client