Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json)
Hash identifier: bjjAf0qj9Qj777Qn4Z0t3rYPL0M9tP5K2GiwODraxqM=
Subject key identifier: 3F:F8:A2:96:0B:7E:8F:5C:7E:3B:56:88:54:E4:C1:E1:87:9B:74:5F
Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Certificate serial: 019CE5FF32DEAC707F1C6C44A129F7E19431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
Manifest number: 09DB
Signing time: Fri 13 Mar 2026 07:00:32 +0000
Manifest this update: Fri 13 Mar 2026 07:00:32 +0000
Manifest next update: Sat 14 Mar 2026 07:00:32 +0000
Files and hashes: 1: DlYdZNTLvfx2OD11UfQRnD3hK2o.roa (hash: Yz+AdjCjCsAlEW+BjCHTyQFo7Owy/uvBTZnF71MgcBA=)
2: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: EGfCGYwHm1MZWswFZ0Dvf6qwNurD3D+R6t/DcXsY5bg=)
3: zw7G6rZ3OugQehoBP3QpVRIzHKs.roa (hash: Ywv0pQZLRrxCf8Y+ep3+4GqTg47V6bf1LboUdnUKZNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:32:de:ac:70:7f:1c:6c:44:a1:29:f7:e1:94:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Validity
Not Before: Mar 13 07:00:32 2026 GMT
Not After : Mar 14 07:00:32 2026 GMT
Subject: CN=3ff8a2960b7e8f5c7e3b568854e4c1e1879b745f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:62:3c:71:f0:1f:7f:b0:99:a8:44:33:7a:38:
04:51:72:5b:ff:f4:1b:55:f3:9c:81:7d:c0:73:67:
ad:ea:73:aa:ea:94:96:97:36:ab:58:47:98:f9:0f:
74:c2:3a:da:01:ed:4a:ae:a0:e1:28:83:ea:6d:a6:
4a:f3:f0:20:ed:f2:36:09:15:e2:d6:88:55:35:56:
02:a7:57:a2:79:15:89:13:27:e9:14:00:84:8c:a1:
51:76:8a:7a:9a:6c:1c:f7:c5:87:71:a2:14:5c:9b:
85:88:c6:25:04:06:18:39:71:df:d6:94:38:18:f6:
55:05:8e:9c:22:50:96:b5:be:6c:31:6d:17:3f:ad:
09:08:19:4a:14:5a:9e:e9:ed:f7:09:6a:33:84:1f:
be:fc:d9:5c:53:f5:08:0d:86:da:0a:48:f6:25:3a:
d8:69:8f:bb:9e:60:db:01:58:a2:e3:33:61:57:aa:
58:75:26:a3:d2:1b:67:cb:f1:b0:af:01:cc:bb:e6:
b2:8f:f6:31:6b:50:ad:5f:1a:d1:a5:fe:45:70:4a:
4c:e0:10:04:5f:9c:cc:b1:de:6d:45:0f:d8:8d:a8:
cd:12:92:c6:0d:9c:df:20:61:0c:dc:fd:c2:75:f7:
4e:90:a8:fc:06:3f:39:20:09:34:59:02:05:80:f8:
00:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F8:A2:96:0B:7E:8F:5C:7E:3B:56:88:54:E4:C1:E1:87:9B:74:5F
X509v3 Authority Key Identifier:
keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d6:0a:28:40:ad:bd:01:5a:c4:8d:76:d2:f2:3a:01:4f:60:
86:43:6d:4d:83:61:2d:dc:a9:cb:b2:98:71:e1:e4:1c:3c:ff:
04:b5:d5:9e:5f:dc:81:72:7c:cc:5f:a7:2a:c0:2c:23:fe:82:
0a:3c:e6:41:8c:2a:fc:a9:b4:ae:98:e4:fc:c9:84:5d:d3:ba:
0b:0c:1a:05:7d:33:4b:5f:ed:8a:12:5a:c7:43:70:57:5c:b8:
10:79:8d:b7:35:ef:33:ec:68:34:a8:17:fd:ab:23:02:6e:2f:
17:8a:8e:36:5d:45:9f:a4:38:4b:69:29:ef:e0:4a:78:69:8c:
6c:c2:e9:6a:01:bd:7c:61:4a:63:18:51:49:b1:c5:17:88:3e:
f6:db:ad:51:3d:e7:0b:8d:d5:cc:c8:07:e5:ce:bb:86:c5:dc:
cb:72:7f:d8:c0:52:33:6a:41:f9:3b:ee:aa:04:3b:5a:3f:1b:
3c:94:4f:95:d5:7a:6f:b1:8c:ab:46:37:bc:f5:3b:ca:d4:84:
80:83:f9:4d:34:e1:53:19:15:cc:fe:32:56:22:96:c7:f4:64:
bf:76:e2:0c:2a:6c:d1:df:93:ae:d8:b4:8a:9b:52:ad:b2:e2:
7c:53:14:af:41:dc:12:5f:ce:95:1f:bc:02:e1:bc:9a:a9:2a:
b5:89:39:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:26:53 2026 by rpki-client