Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
File: UFbHUIQP5cAQOn9RAix87qj-lps.mft (raw, json)
Hash identifier: u3VQRsTFictZpBjMno+ksionD0bmLSG30sJBWMlpLc0=
Subject key identifier: EB:E3:B6:C0:DE:A7:2C:C8:7E:F7:32:65:A7:97:D4:AD:00:A1:37:89
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Certificate issuer: /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial: 019EB7D7DCAEB24CEFDC133C6AA521DB8E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
Manifest number: 1955
Signing time: Thu 11 Jun 2026 18:00:37 +0000
Manifest this update: Thu 11 Jun 2026 18:00:37 +0000
Manifest next update: Fri 12 Jun 2026 18:00:37 +0000
Files and hashes: 1: 3pROUsGuo7256asAZirwtFY6aCY.roa (hash: ceI+qtS5lvi6YoUYDhE0QVXLVsFmdB8++Mmxjm4VsCg=)
2: 4MWEzdPSupDJZ_Gz5zFt8fSfRP8.roa (hash: fzAcdI2YeHgptFoCa+cHCUdnXZqAYdQFW10Ox2+xnFU=)
3: UFbHUIQP5cAQOn9RAix87qj-lps.crl (hash: 1lN4uMMBqMSHANO3QS2ha6pCDtFEY4JkE3Pmc96/r9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d7:dc:ae:b2:4c:ef:dc:13:3c:6a:a5:21:db:8e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Validity
Not Before: Jun 11 18:00:37 2026 GMT
Not After : Jun 12 18:00:37 2026 GMT
Subject: CN=ebe3b6c0dea72cc87ef73265a797d4ad00a13789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:64:69:f4:70:35:10:36:a0:27:63:7c:06:78:
56:15:b3:e3:77:35:ab:e3:66:42:3a:9c:d2:4c:0a:
8f:55:51:f1:ce:2c:4e:15:69:11:f8:58:b7:d6:c8:
b7:71:49:ea:dd:89:d4:e4:49:c3:68:1e:88:00:51:
ce:e6:21:1e:60:6d:7a:62:19:78:d9:e0:17:e6:cc:
ca:1b:09:85:0b:3c:cf:bb:bf:f9:42:6d:2f:a8:aa:
6b:27:6e:c7:c0:91:da:04:dc:09:a3:ea:9d:da:32:
c0:d2:fb:14:0e:2c:6b:a7:43:5a:6e:80:08:ff:36:
8b:22:87:97:ad:30:79:fd:57:d2:27:6a:1d:76:f5:
98:06:07:9d:98:1a:27:0d:8d:b1:6a:3e:98:fe:c6:
86:86:38:9b:25:67:13:7c:99:f2:ba:0b:0d:07:37:
cb:a5:bc:e3:da:2f:12:87:23:38:47:7c:49:15:3f:
47:ed:1b:19:c5:c5:90:ea:8b:5c:9e:14:21:06:08:
d1:95:ab:18:5f:7d:92:32:b4:3a:7d:17:65:9f:70:
88:65:e6:bd:fb:ea:42:57:0c:17:8e:c5:b2:f3:e3:
3e:db:08:b3:3f:77:88:4f:4a:40:a9:bc:04:00:7a:
54:28:9c:07:74:81:67:0a:ce:03:c5:e6:05:70:43:
c0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E3:B6:C0:DE:A7:2C:C8:7E:F7:32:65:A7:97:D4:AD:00:A1:37:89
X509v3 Authority Key Identifier:
keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0f:93:e2:98:a5:62:08:06:0f:c8:5b:3e:02:94:66:a7:52:
d7:43:18:b0:43:95:f3:5e:b1:48:9c:01:31:af:56:dc:c1:48:
75:cc:7a:cc:7b:b5:d6:a1:db:25:3d:53:5a:6e:3e:92:2b:ef:
72:16:49:3a:8c:2b:02:c6:2b:c3:2e:dc:1d:0e:0a:b7:f8:49:
1b:74:8c:eb:e3:43:67:f8:a9:37:4c:63:7b:50:63:a3:72:f6:
55:a8:25:0f:b5:19:44:09:c5:de:4a:0a:e9:e6:15:30:d7:d9:
ca:30:15:97:7c:a7:df:47:5d:a2:0e:b3:2d:ad:ce:0f:9d:97:
3a:7b:15:ec:fb:59:c5:79:18:f7:4f:8f:3a:06:e3:f0:68:2c:
10:b8:b7:b9:cd:fa:8e:4f:3b:ba:60:72:02:1d:d6:da:d0:f5:
fd:d1:de:29:5b:0f:6a:3d:9d:b0:6d:e4:84:ab:dc:c6:fc:fc:
a3:f8:3b:cb:93:88:f7:a4:ff:56:bd:36:d7:d2:5b:5f:4b:5f:
69:c2:d2:16:b6:f1:cf:86:0d:6b:35:80:5b:89:d7:45:d2:24:
db:2c:62:67:9a:6e:3b:6a:73:47:7c:e5:85:7c:34:c4:fb:24:
7a:ad:8f:92:db:84:12:c0:78:27:51:9c:1b:22:a8:ed:fb:dd:
3b:43:a7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:33 2026 by rpki-client