
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/00aea9-b0af-4a74-be6a-41e91a54a275/1/LUuu4_cib9zqPiKIu-eZlm11_rM.mft
File: LUuu4_cib9zqPiKIu-eZlm11_rM.mft (raw, json)
Hash identifier: XTzASU/Y2wL3UFMCBZIAd98pG3Ycnyrfo1CHfyQRjog=
Subject key identifier: 9B:2A:87:5D:4B:0C:04:A1:5F:87:7B:87:6D:63:9D:A9:0F:5B:AA:8F
Authority key identifier: 2D:4B:AE:E3:F7:22:6F:DC:EA:3E:22:88:BB:E7:99:96:6D:75:FE:B3
Certificate issuer: /CN=2d4baee3f7226fdcea3e2288bbe799966d75feb3
Certificate serial: 019D37F761C86E1923E012140E6BF29D873A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUuu4_cib9zqPiKIu-eZlm11_rM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/00aea9-b0af-4a74-be6a-41e91a54a275/1/LUuu4_cib9zqPiKIu-eZlm11_rM.mft
Manifest number: 8B
Signing time: Sun 29 Mar 2026 05:00:52 +0000
Manifest this update: Sun 29 Mar 2026 05:00:52 +0000
Manifest next update: Mon 30 Mar 2026 05:00:52 +0000
Files and hashes: 1: LUuu4_cib9zqPiKIu-eZlm11_rM.crl (hash: xFSGXJEit+I1G9LSEJoGMz/i4vsUI6hr+qCUPy0ECX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/00aea9-b0af-4a74-be6a-41e91a54a275/1/LUuu4_cib9zqPiKIu-eZlm11_rM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/00aea9-b0af-4a74-be6a-41e91a54a275/1/LUuu4_cib9zqPiKIu-eZlm11_rM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUuu4_cib9zqPiKIu-eZlm11_rM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:61:c8:6e:19:23:e0:12:14:0e:6b:f2:9d:87:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4baee3f7226fdcea3e2288bbe799966d75feb3
Validity
Not Before: Mar 29 05:00:52 2026 GMT
Not After : Mar 30 05:00:52 2026 GMT
Subject: CN=9b2a875d4b0c04a15f877b876d639da90f5baa8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:88:10:48:7d:d8:e8:4d:d0:5e:90:57:c1:19:
29:0c:d1:41:d0:f7:a8:7b:f0:82:b2:66:d7:41:fc:
a7:68:02:66:f3:27:5b:0b:14:32:a8:3f:ce:6d:42:
f7:d2:63:e9:df:55:2a:bc:4d:17:bd:2c:c8:8e:98:
35:d9:36:af:40:b5:0d:d2:05:e5:ba:b3:6d:9b:d5:
38:9f:31:af:27:40:be:88:28:02:d7:b8:47:c6:0d:
e2:bb:47:f6:1a:38:47:06:ef:76:86:20:9d:ea:14:
55:11:19:39:d9:59:65:72:62:72:37:56:e3:4f:54:
30:76:13:d0:bd:47:ba:77:a6:d6:81:09:18:7d:1f:
67:06:a4:05:e8:e6:a4:65:49:0d:cb:c0:4a:70:df:
7b:58:98:88:d4:4a:ca:4f:64:8c:a4:0c:1a:f6:d2:
33:69:13:f1:6f:5a:d4:8a:54:c9:45:99:60:4a:15:
04:e6:ad:92:83:71:e1:3b:d4:ae:cf:b1:cb:75:52:
3f:88:f1:c5:14:aa:78:47:ca:82:92:34:c3:62:e0:
79:0e:6d:22:67:86:80:ad:bc:92:18:cc:20:bb:4c:
30:ea:6e:9e:a2:04:c8:c5:cb:42:06:f6:ad:c4:66:
ef:ca:a0:25:bd:0e:e3:7a:1b:22:17:6b:f1:5c:88:
76:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2A:87:5D:4B:0C:04:A1:5F:87:7B:87:6D:63:9D:A9:0F:5B:AA:8F
X509v3 Authority Key Identifier:
keyid:2D:4B:AE:E3:F7:22:6F:DC:EA:3E:22:88:BB:E7:99:96:6D:75:FE:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUuu4_cib9zqPiKIu-eZlm11_rM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/00aea9-b0af-4a74-be6a-41e91a54a275/1/LUuu4_cib9zqPiKIu-eZlm11_rM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/00aea9-b0af-4a74-be6a-41e91a54a275/1/LUuu4_cib9zqPiKIu-eZlm11_rM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d3:f1:ab:0b:99:f4:43:05:f1:be:de:4e:0d:aa:50:4f:c4:
e7:3b:a9:4f:c5:a0:d8:44:37:ac:5c:26:ba:29:f2:a2:e0:03:
b3:9c:ce:22:a7:46:7e:d0:31:a5:91:f1:8e:1c:32:4f:c8:9a:
20:c8:ec:e0:29:04:2e:ed:d2:c6:94:dc:5d:e6:38:ed:9c:80:
e4:73:8c:7e:0b:79:a7:04:9f:a6:70:ac:fb:3f:7f:f2:ea:67:
24:f7:6f:69:4e:f5:56:d4:18:f7:f8:f2:85:47:17:6d:a4:b1:
de:72:77:34:7b:24:53:99:b6:7d:de:51:5a:61:3c:d0:c3:ad:
c4:db:e6:31:48:66:7e:fe:23:87:9f:df:b4:86:50:cb:b6:94:
e3:a4:ce:50:40:b5:88:5a:a5:97:33:5c:2f:2e:d0:75:93:81:
c7:b1:44:bd:fd:62:7f:e8:9c:00:c3:e6:81:47:65:cc:d7:c4:
87:4c:96:4f:3d:a0:48:6e:3d:2a:9e:16:f6:25:36:b2:fc:0d:
91:01:d0:fe:a4:e3:ee:9d:b2:30:9d:1b:36:f5:f4:94:17:0f:
19:68:c8:04:53:e9:6d:c8:46:ac:1f:db:0c:68:04:45:64:35:
a2:2b:14:01:df:0c:dc:6c:b6:49:5c:be:e9:53:7b:48:11:f4:
52:0a:57:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:12 2026 by rpki-client