Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json)
Hash identifier: Kei9cbkTuwz4SCdbTJqMRnEN+jAEnHYZnk1GhSLP0Kg=
Subject key identifier: 03:06:9F:65:9C:A4:DB:E8:C6:3B:4E:C3:61:66:8C:94:F3:CA:C4:8F
Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Certificate serial: 01A06DCBF35189756E611D7CC2C09F5F07AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
Manifest number: 0BAF
Signing time: Fri 04 Sep 2026 19:01:17 +0000
Manifest this update: Fri 04 Sep 2026 19:01:17 +0000
Manifest next update: Sat 05 Sep 2026 19:01:17 +0000
Files and hashes: 1: DlYdZNTLvfx2OD11UfQRnD3hK2o.roa (hash: Yz+AdjCjCsAlEW+BjCHTyQFo7Owy/uvBTZnF71MgcBA=)
2: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: 69wkX0vPXJWAIpyN2bb4zT09S6zlS5+4j95WYW/MFAA=)
3: zw7G6rZ3OugQehoBP3QpVRIzHKs.roa (hash: Ywv0pQZLRrxCf8Y+ep3+4GqTg47V6bf1LboUdnUKZNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:cb:f3:51:89:75:6e:61:1d:7c:c2:c0:9f:5f:07:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Validity
Not Before: Sep 4 19:01:17 2026 GMT
Not After : Sep 5 19:01:17 2026 GMT
Subject: CN=03069f659ca4dbe8c63b4ec361668c94f3cac48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:0d:e8:a4:27:66:80:95:b0:40:06:7d:1d:
0c:70:3f:ba:7f:6f:b2:b9:1d:d9:b7:e6:f3:44:82:
94:71:0f:0c:bb:5d:f3:bd:07:e6:35:7b:c5:7f:d0:
f7:d7:12:c1:8b:a8:b0:a1:ba:89:6c:b8:ce:72:dd:
a4:3f:aa:42:f9:80:88:86:1d:01:34:47:98:0a:48:
74:70:4d:96:36:1a:a2:bf:75:d0:75:c6:af:8b:51:
ef:5a:0b:b3:c3:e2:cc:35:4d:22:a1:b0:53:7d:0d:
82:0a:c6:84:58:3c:51:43:0e:3b:7d:20:23:55:e0:
e6:fd:4f:b9:72:5f:e1:db:b9:f0:59:b7:52:a1:43:
27:da:f4:5d:9d:80:2f:02:1a:b9:2b:3b:39:e6:23:
43:91:86:44:f2:57:d4:ed:34:a5:e2:05:22:7c:7e:
46:d9:0c:35:f8:b1:ef:aa:8a:38:a9:68:34:fd:b3:
36:f9:43:68:1b:46:d9:c5:a7:57:06:21:10:74:cf:
56:22:64:ad:fc:81:ab:77:b4:f4:33:bf:bf:55:3f:
20:13:92:09:fd:a3:51:38:05:61:54:b8:89:f8:a9:
75:4a:59:e4:5c:d9:d7:c4:41:6a:c6:40:75:e3:8c:
d7:e3:4e:6e:cd:56:7a:e8:e2:b5:b6:d2:f8:23:ae:
da:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:06:9F:65:9C:A4:DB:E8:C6:3B:4E:C3:61:66:8C:94:F3:CA:C4:8F
X509v3 Authority Key Identifier:
keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:97:b4:89:6e:b6:0c:c0:d6:be:e6:b2:b4:80:c1:03:6f:1d:
b5:e0:d5:20:27:73:04:a0:7c:e5:5e:0e:da:99:7a:2d:db:8d:
21:39:60:c3:e6:3b:82:ff:1a:31:1f:73:be:2f:2d:6d:08:12:
52:a2:2b:bc:df:d7:70:b5:3d:b8:2f:1f:ce:40:c4:43:76:77:
c1:96:17:3c:b5:11:ed:ff:19:06:f6:4f:fe:77:9f:28:6d:7a:
07:6e:6a:7a:3c:f1:97:7a:3d:3c:8b:0f:0d:2a:4a:d5:af:22:
8b:37:85:2a:47:a0:ff:9f:66:2b:67:5e:1c:b2:67:7e:94:e8:
8f:3f:41:28:4b:9f:da:f1:2a:71:83:bf:d0:4c:72:8d:7c:d3:
f4:63:2a:77:0a:75:83:37:42:96:28:b4:1a:8e:07:be:24:08:
7c:6c:10:fc:3b:49:ee:47:db:db:81:89:8c:e4:22:ff:3b:b3:
45:08:28:81:9e:44:c7:1c:c8:27:85:8e:c3:d4:92:63:46:74:
74:9f:4f:e5:db:df:60:9a:6d:64:d7:f2:45:a6:9f:22:11:b0:
24:32:95:3f:e1:4b:c0:19:1d:7f:49:5e:b0:bb:04:30:de:ee:
99:1a:cd:e4:9b:23:e4:e4:64:fa:74:e3:8a:73:68:12:ae:e9:
3e:73:5a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:25:29 2026 by rpki-client