Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json)
Hash identifier: eEcAjRDiWAAIGHKO37flrOBHcBEhvD/fAdImkZhThO4=
Subject key identifier: 92:27:0E:23:03:76:7C:75:56:B6:89:55:B3:E2:34:F5:64:B7:F4:BF
Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Certificate serial: 01A1765DEA6222EAF5442713CFFF2EFE7793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
Manifest number: 0C38
Signing time: Mon 26 Oct 2026 04:00:28 +0000
Manifest this update: Mon 26 Oct 2026 04:00:28 +0000
Manifest next update: Tue 27 Oct 2026 04:00:28 +0000
Files and hashes: 1: DlYdZNTLvfx2OD11UfQRnD3hK2o.roa (hash: Yz+AdjCjCsAlEW+BjCHTyQFo7Owy/uvBTZnF71MgcBA=)
2: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: 7WyXsvcpHJAGKk5IYxmuOUjF6fPT+TeVAxYe6z7jYjc=)
3: zw7G6rZ3OugQehoBP3QpVRIzHKs.roa (hash: Ywv0pQZLRrxCf8Y+ep3+4GqTg47V6bf1LboUdnUKZNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:5d:ea:62:22:ea:f5:44:27:13:cf:ff:2e:fe:77:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Validity
Not Before: Oct 26 04:00:28 2026 GMT
Not After : Oct 27 04:00:28 2026 GMT
Subject: CN=92270e2303767c7556b68955b3e234f564b7f4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:8c:4d:ee:62:80:0c:b7:7c:6c:72:7e:32:
61:5e:7c:e8:2b:e5:d0:76:a8:cc:c9:a5:98:4c:02:
47:89:ed:94:29:f5:bb:92:8a:b3:74:67:aa:16:76:
2f:57:68:c7:29:4a:89:c3:ee:44:43:45:f4:db:07:
14:cb:df:c2:84:16:af:51:02:fa:6f:e6:c3:38:51:
5e:84:3e:bf:27:ae:64:dc:d2:6f:60:0b:19:ac:25:
c0:41:35:b9:45:77:0c:30:22:3b:d1:3e:ac:43:06:
27:9e:f3:e8:bf:b1:6b:46:f1:2e:9e:f4:ff:01:50:
7e:71:46:dd:da:a9:a8:4f:29:12:e1:6a:be:ad:5d:
4b:97:06:1a:0d:12:95:21:ce:9a:89:10:a5:ad:fc:
ea:9f:7f:77:4a:7d:a7:e5:fd:92:fd:27:77:bb:0d:
25:45:5a:0c:28:b1:74:46:75:f3:c6:e3:04:f9:4a:
4c:a6:3a:c1:57:9b:be:64:af:79:6f:bc:89:84:77:
6f:84:8d:f6:93:72:e1:f5:64:ea:96:f0:a0:d9:c8:
4f:c8:4d:b9:df:62:01:4d:46:2a:e5:9a:7a:5b:32:
66:2e:54:7b:97:0b:a8:69:6b:e1:de:cd:59:49:7e:
bd:1e:12:2d:6f:ca:a2:38:c3:90:6c:4e:e2:d5:6a:
9c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:27:0E:23:03:76:7C:75:56:B6:89:55:B3:E2:34:F5:64:B7:F4:BF
X509v3 Authority Key Identifier:
keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a3:2d:a5:76:1b:e9:c5:e0:7b:6c:e3:d7:f5:59:a5:ba:99:
f6:13:7e:4f:76:6d:80:9a:d2:85:78:0e:2f:fe:27:62:66:23:
69:ed:0d:4d:a0:01:91:4f:ca:3c:10:82:2f:2b:4e:1f:ce:46:
47:cf:3c:a4:e6:f2:79:75:04:d1:aa:51:2a:3e:66:61:97:61:
6b:e1:c0:49:12:10:61:ed:37:46:81:5c:dd:7d:29:35:3b:87:
36:f6:73:04:bf:dc:0f:83:79:12:6c:18:9c:e8:22:11:01:64:
7d:21:a0:75:b2:29:3a:47:84:bf:d2:4c:53:0a:d3:45:7a:24:
5c:f0:69:0a:f7:18:d0:ad:a8:6a:ea:8e:d8:80:63:e3:3a:21:
18:8c:0e:90:60:82:74:bd:86:95:e3:17:3c:c1:7b:3f:5e:57:
fc:9c:01:a0:ba:16:58:05:9c:6d:f8:bb:da:51:d3:34:8a:d8:
e9:4e:d1:57:d9:01:39:90:1e:c6:13:bb:71:50:d4:ed:74:b2:
70:e0:8d:0c:58:bf:16:cd:6b:f6:db:a3:5d:fb:f5:1a:cf:e8:
76:c2:39:48:50:3f:86:45:ee:5d:cf:05:75:86:a2:72:71:a0:
95:85:57:35:8a:86:fb:e0:91:6d:0f:b6:53:41:dd:6b:e7:ee:
ec:19:e9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:43:08 2026 by rpki-client