Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json)
Hash identifier: 7/VVnAF57bMQ88Zh5RAal8V+klAIbs2PJFzgD9fqDEw=
Subject key identifier: 4D:B0:D3:86:32:FB:2F:AB:3A:39:41:D5:69:44:98:A9:F2:FE:B1:23
Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Certificate serial: 019E8CED65CFF82B8F771F74051FF6FEC4D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
Manifest number: 0AB6
Signing time: Wed 03 Jun 2026 10:00:28 +0000
Manifest this update: Wed 03 Jun 2026 10:00:28 +0000
Manifest next update: Thu 04 Jun 2026 10:00:28 +0000
Files and hashes: 1: DlYdZNTLvfx2OD11UfQRnD3hK2o.roa (hash: Yz+AdjCjCsAlEW+BjCHTyQFo7Owy/uvBTZnF71MgcBA=)
2: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: zSKkjADf/7EwIrkGgLtXPm7p8AqDgVgZM/TMjtcoN9M=)
3: zw7G6rZ3OugQehoBP3QpVRIzHKs.roa (hash: Ywv0pQZLRrxCf8Y+ep3+4GqTg47V6bf1LboUdnUKZNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:ed:65:cf:f8:2b:8f:77:1f:74:05:1f:f6:fe:c4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Validity
Not Before: Jun 3 10:00:28 2026 GMT
Not After : Jun 4 10:00:28 2026 GMT
Subject: CN=4db0d38632fb2fab3a3941d5694498a9f2feb123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bf:14:28:e8:5b:90:e4:93:b8:2e:eb:c5:76:
c4:8b:0c:ee:74:73:46:96:f1:a2:18:30:f6:97:57:
fb:16:64:45:0d:e7:fe:77:14:db:1b:87:65:7b:09:
d8:d3:22:40:69:4c:35:01:24:d6:48:3f:48:a3:68:
ac:0d:00:46:77:21:62:21:c6:a1:5d:0f:15:9c:d4:
2a:28:fc:ab:4d:52:64:c9:d3:a5:60:73:01:ea:b1:
a0:3e:00:b0:08:9e:70:41:0e:25:b5:92:11:03:ca:
b0:95:1e:24:bf:5e:4e:7f:e6:49:42:b7:19:ea:b5:
06:73:f2:3c:6e:eb:b8:18:f7:1d:41:0d:78:1c:a6:
0c:11:93:e6:e8:95:f4:8f:46:4b:d7:3b:15:c5:2f:
65:57:92:4c:09:ea:05:57:c4:2c:20:04:a8:80:1a:
c1:5c:b6:6a:c1:87:86:94:b9:3d:ee:a3:8e:df:4f:
c8:f7:5d:89:69:6e:12:05:a8:70:3f:70:49:73:88:
95:50:21:39:33:ec:8d:84:2f:40:4d:7e:1f:4f:8d:
d6:fd:9f:29:a9:6a:9b:29:cb:6d:4b:55:ad:65:e4:
08:f3:cf:2f:c9:4d:b1:b7:41:15:48:af:7d:94:40:
00:e4:ab:69:2d:9e:dc:36:f0:90:aa:c2:2b:35:51:
91:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B0:D3:86:32:FB:2F:AB:3A:39:41:D5:69:44:98:A9:F2:FE:B1:23
X509v3 Authority Key Identifier:
keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b0:aa:20:04:24:79:4c:b3:34:77:21:39:f4:e9:45:d5:01:
cb:13:c1:e1:18:32:38:3c:95:26:f9:70:f5:23:ea:c8:60:91:
38:8b:b9:77:d6:2e:87:28:18:17:e0:c9:cc:be:c9:7d:db:60:
91:1b:0a:da:f9:3d:fd:7c:64:39:2d:99:65:bc:ff:14:9c:c6:
66:6a:92:98:d2:1c:59:de:8a:0f:ae:e0:24:22:92:69:ea:c2:
4c:b5:97:85:84:c5:b0:a2:79:09:ca:fd:dc:2c:c3:4d:94:5b:
eb:ca:8d:ed:8f:ad:e3:4d:e7:bb:59:1e:22:0f:51:4e:fe:a6:
ca:f8:d6:4b:0b:c7:a5:98:76:f2:78:a6:d4:f9:cf:12:39:ea:
cb:f1:ff:ca:7e:6d:4e:64:0a:ad:6a:52:b5:87:b0:32:6b:d0:
e1:ee:4d:45:8f:be:65:8f:a8:4c:3f:6c:47:e0:ce:82:9b:0f:
e7:ca:3c:f4:92:40:27:f8:b5:f0:c4:fd:95:c0:e7:fb:56:0e:
e7:4e:cb:b5:03:fc:e7:61:d7:28:7b:fb:90:20:90:ca:00:d6:
74:92:bb:e3:14:32:b6:8a:19:81:8d:fc:7a:bb:a5:40:0b:bd:
44:a0:c5:8a:c7:c3:7a:db:7c:e4:95:59:b1:51:03:b0:bd:b9:
7d:02:18:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6M7WXP+CuPdx90BR/2/sTWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NDYxZmJlZTFjMDZlM2VhZmFjMGYyZjk1MjUzY2E4NjAz
YWNjZjIwHhcNMjYwNjAzMTAwMDI4WhcNMjYwNjA0MTAwMDI4WjAzMTEwLwYDVQQD
Eyg0ZGIwZDM4NjMyZmIyZmFiM2EzOTQxZDU2OTQ0OThhOWYyZmViMTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr8UKOhbkOSTuC7rxXbEiwzudHNG
lvGiGDD2l1f7FmRFDef+dxTbG4dlewnY0yJAaUw1ASTWSD9Io2isDQBGdyFiIcah
XQ8VnNQqKPyrTVJkydOlYHMB6rGgPgCwCJ5wQQ4ltZIRA8qwlR4kv15Of+ZJQrcZ
6rUGc/I8buu4GPcdQQ14HKYMEZPm6JX0j0ZL1zsVxS9lV5JMCeoFV8QsIASogBrB
XLZqwYeGlLk97qOO30/I912JaW4SBahwP3BJc4iVUCE5M+yNhC9ATX4fT43W/Z8p
qWqbKcttS1WtZeQI888vyU2xt0EVSK99lEAA5KtpLZ7cNvCQqsIrNVGR7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2w04Yy+y+rOjlB1WlEmKny/rEjMB8GA1UdIwQY
MBaAFJVGH77hwG4+r6wPL5UlPKhgOszyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lNWNlOGYtNWVhMC00NzlmLTkzZTkt
ODlkNWM2MGY1MDFmLzEvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9lNWNlOGYtNWVhMC00NzlmLTkzZTktODlkNWM2MGY1MDFm
LzEvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLCqIAQk
eUyzNHchOfTpRdUByxPB4RgyODyVJvlw9SPqyGCROIu5d9YuhygYF+DJzL7Jfdtg
kRsK2vk9/XxkOS2ZZbz/FJzGZmqSmNIcWd6KD67gJCKSaerCTLWXhYTFsKJ5Ccr9
3CzDTZRb68qN7Y+t403nu1keIg9RTv6myvjWSwvHpZh28nim1PnPEjnqy/H/yn5t
TmQKrWpStYewMmvQ4e5NRY++ZY+oTD9sR+DOgpsP58o89JJAJ/i18MT9lcDn+1YO
507LtQP852HXKHv7kCCQygDWdJK74xQytooZgY38erulQAu9RKDFisfDett85JVZ
sVEDsL25fQIYQg==
-----END CERTIFICATE-----
Generated at Wed Jun 3 20:00:07 2026 by rpki-client