
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
File: lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft (raw, json)
Hash identifier: Wf58p4ORMn++6WJie/OV5eSSyvcFxTNNmLyBSCijAAU=
Subject key identifier: 98:9E:EC:8A:08:CE:FB:DB:D5:EB:D7:38:BA:76:1C:93:51:57:3C:F8
Authority key identifier: 95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
Certificate issuer: /CN=951bb490e09df1467e4eec43d8f20484cee839fe
Certificate serial: 01A06CF04955E69DB492DA31ABDA6FBE1DD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
Manifest number: 0EBA
Signing time: Fri 04 Sep 2026 15:01:21 +0000
Manifest this update: Fri 04 Sep 2026 15:01:21 +0000
Manifest next update: Sat 05 Sep 2026 15:01:21 +0000
Files and hashes: 1: kE66fhDE4xBKZgP00aDSZ5wUo8Q.roa (hash: Xz3m7rpESDDSay6iugLcdgSAsdxY3IOPYIq5I7x/X5M=)
2: lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl (hash: JDqJp0hl4IYciRNyFL1IelkyXCxIHQjMu8OPoxt/sKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:f0:49:55:e6:9d:b4:92:da:31:ab:da:6f:be:1d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951bb490e09df1467e4eec43d8f20484cee839fe
Validity
Not Before: Sep 4 15:01:21 2026 GMT
Not After : Sep 5 15:01:21 2026 GMT
Subject: CN=989eec8a08cefbdbd5ebd738ba761c9351573cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:71:21:20:e8:4b:8c:21:a4:a1:d1:16:15:8a:
42:da:7a:35:6b:26:b3:dd:4a:66:cc:d4:db:1c:55:
5d:fe:12:86:ad:ed:1f:8c:15:e4:48:4d:0b:98:7c:
a3:60:1e:1a:46:63:d2:1b:89:a3:69:dd:68:d8:1c:
18:67:7a:a9:af:b4:53:e7:c7:17:fb:83:b6:49:d5:
5e:65:03:b4:39:45:4c:50:63:4e:a2:51:89:80:eb:
a1:08:ad:bc:55:d2:8d:f9:dd:67:71:57:45:8e:e5:
9a:4d:da:68:99:20:8c:5d:1e:57:85:e4:55:13:ff:
b9:29:22:97:6c:81:55:19:87:52:c5:67:00:4d:29:
64:ae:b3:02:a9:4c:83:48:92:f7:6f:76:a6:64:92:
e3:67:55:35:e0:95:16:96:94:a8:50:9a:5d:41:97:
f3:49:d1:7c:aa:ef:a6:7c:8b:94:f2:8f:3e:9b:e0:
cc:b6:0e:5e:fb:67:12:26:c7:c9:1b:88:38:66:4f:
30:61:a6:de:03:04:fb:25:d7:94:9e:8b:87:11:b0:
21:77:81:61:98:c6:be:1e:78:48:a7:45:b5:a1:98:
84:ca:fd:e0:54:26:21:da:1c:25:af:03:71:72:fe:
d1:27:21:66:16:c2:ab:92:61:bc:d8:42:15:f7:f2:
c9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9E:EC:8A:08:CE:FB:DB:D5:EB:D7:38:BA:76:1C:93:51:57:3C:F8
X509v3 Authority Key Identifier:
keyid:95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0d:a0:3a:2b:9e:08:d3:24:0f:94:72:84:0d:db:9a:f9:2c:
72:cc:8c:44:a6:9e:97:b9:52:71:cb:5c:82:9a:9d:ac:51:7f:
74:77:c9:5c:ea:c6:0d:f7:9e:46:2c:73:d5:5d:bf:aa:11:5b:
b1:f9:66:34:0f:38:14:ff:27:16:04:3a:f2:ca:bb:3a:9e:79:
d9:a5:7a:0e:75:f9:c3:58:5d:80:b8:53:3e:17:3a:f9:a0:63:
7d:b6:c2:dd:5b:1c:7f:92:f9:00:ed:5e:74:8d:b4:40:da:90:
8c:b8:30:50:d2:65:17:fe:7b:1e:2e:11:e7:d2:d6:f7:e2:59:
bf:53:7f:84:bc:8b:f3:4c:70:48:9a:56:a3:d5:29:d4:9b:ba:
c2:93:8c:3c:60:31:9d:45:56:43:b7:83:5c:8f:57:f0:c0:cd:
87:ed:d1:fd:dd:29:46:20:97:66:8d:c8:8c:40:4e:ac:b4:3f:
a0:24:34:f1:88:92:4b:72:74:a3:7f:4f:41:a6:65:34:32:2d:
11:45:3c:83:13:9c:af:62:57:1f:a6:24:6c:26:0b:be:22:ac:
5b:90:0b:7c:ef:0b:c6:7c:30:bf:27:9b:8a:14:6d:2a:9a:db:
90:a9:c5:88:9b:55:bc:ba:a0:90:cd:57:4e:e2:97:43:3b:3c:
b1:13:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:55:28 2026 by rpki-client