Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
File: LubVYKCKAT8_4OZtra9v0Cvq9D8.mft (raw, json)
Hash identifier: qgB3f8vk0gydPFohlgBR2Ws/gmr3H6UQ+BpXCFFaJH8=
Subject key identifier: B2:C4:60:D4:38:4C:84:C7:12:83:E0:C9:63:DD:9D:39:0F:51:C1:2F
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Certificate issuer: /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial: 01A12C8DB1F8EC4B77A0EDC2E3388D2A1BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
Manifest number: 1ADA
Signing time: Sun 11 Oct 2026 20:00:45 +0000
Manifest this update: Sun 11 Oct 2026 20:00:45 +0000
Manifest next update: Mon 12 Oct 2026 20:00:45 +0000
Files and hashes: 1: LubVYKCKAT8_4OZtra9v0Cvq9D8.crl (hash: 5gjhpbhBDJ7MYZO8m3wukP1gHXjyoezbC/IY0jAmCwo=)
2: vQGqMk2tUWFQV3KWvNRVI4u6g8A.roa (hash: ETJTcUD8tj+bJ3F84d7NY+2CRj1SkXQZGuzA9XMRE3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:8d:b1:f8:ec:4b:77:a0:ed:c2:e3:38:8d:2a:1b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Validity
Not Before: Oct 11 20:00:45 2026 GMT
Not After : Oct 12 20:00:45 2026 GMT
Subject: CN=b2c460d4384c84c71283e0c963dd9d390f51c12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bc:d4:1e:33:e5:e9:d7:df:2e:dd:92:fa:c5:
f3:91:ac:79:74:43:fd:3f:4c:27:be:9d:b1:69:09:
27:3a:71:a7:f3:89:1b:1f:48:92:85:7d:27:b9:e5:
0d:91:2f:05:d3:65:58:e4:08:50:53:92:39:33:b0:
3f:08:87:df:90:17:4d:81:b7:31:4e:1e:ca:0c:53:
57:86:0c:5f:b2:45:38:e1:fd:3d:0d:e9:87:fd:97:
00:f9:90:ba:e0:1f:80:0e:21:4c:bd:80:24:14:5c:
af:fd:7a:f6:7d:76:1a:51:af:12:80:7f:cd:3a:95:
be:67:d1:41:46:dd:9e:09:cb:e9:70:1e:9e:0c:1a:
2c:b5:85:6b:58:6d:fb:bb:1d:f1:83:f8:27:e1:46:
47:4c:78:72:05:fc:4c:19:25:6a:9c:d5:ad:d2:fa:
89:31:22:82:d1:57:d9:47:04:e8:e6:08:d7:59:a1:
24:34:4d:7d:ef:c8:53:b6:83:29:c3:e0:4b:b3:4a:
b4:a0:f6:94:1c:9a:99:47:64:9f:6f:de:b0:f3:33:
46:6d:eb:95:09:eb:0d:64:a4:3a:74:45:87:24:48:
12:5c:9a:d3:1b:b1:ac:4a:48:9e:93:08:45:ef:17:
d1:13:6d:73:94:17:db:09:1c:1e:aa:45:9f:bf:b5:
8f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C4:60:D4:38:4C:84:C7:12:83:E0:C9:63:DD:9D:39:0F:51:C1:2F
X509v3 Authority Key Identifier:
keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:05:5a:19:c1:75:2b:92:d7:8a:ba:78:b0:d7:5e:d7:5b:5b:
55:98:7e:43:8b:5b:dc:d3:b6:6d:05:a4:2b:89:d9:25:cc:48:
ad:4d:bd:2d:f4:7c:98:96:09:16:3f:62:ad:35:b6:33:f1:ec:
37:a7:43:6d:ea:f5:c5:92:f7:30:83:85:4b:33:c4:93:47:aa:
14:0b:06:11:d2:1d:61:94:d3:40:85:c6:fe:c3:aa:53:81:29:
5f:ae:cf:2d:1a:c4:76:51:28:f2:12:eb:e5:58:45:79:90:62:
5c:5a:8b:8a:d7:39:de:6d:85:aa:31:3b:1c:14:62:d4:25:9e:
0f:81:ad:e2:62:29:ec:f1:dc:38:2e:97:ba:15:b6:da:cd:1c:
d5:3d:01:7c:0c:3a:d0:17:ff:de:87:a6:27:da:5b:1b:35:62:
3e:87:30:79:2c:88:0b:c6:74:a9:a5:df:f5:df:3b:c8:9d:79:
0d:4e:43:80:20:a8:3b:83:f8:c9:e4:4c:2e:36:d2:89:fa:78:
4f:3d:87:3c:aa:2a:55:b8:96:77:8d:a3:5a:8a:79:f2:54:10:
1d:39:81:22:40:71:40:3b:50:15:71:58:51:3e:8e:85:d1:69:
7f:53:ac:5a:d6:51:a7:14:da:12:8f:bd:a0:81:0a:ac:cd:db:
1d:57:1e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 05:52:36 2026 by rpki-client