Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
File: 01QLUY11--_WFr_ZTPBf0lukiLY.mft (raw, json)
Hash identifier: u3edMlq23ZvrlVEcuwqXpbj2rnWxjbkBcWsZCfBbAig=
Subject key identifier: BF:C2:1B:08:12:69:1F:51:F9:0F:BD:38:FF:90:BD:24:C4:C5:99:4A
Authority key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
Certificate issuer: /CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Certificate serial: 019D3A1CC60D84D67278C1A7F58A55408A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 15:00:57 +0000
Manifest this update: Sun 29 Mar 2026 15:00:57 +0000
Manifest next update: Mon 30 Mar 2026 15:00:57 +0000
Files and hashes: 1: 01QLUY11--_WFr_ZTPBf0lukiLY.crl (hash: ZEvgq0PvgHr93Q4T3v8XFWUlr2P1mpnho/CgkoH8zhk=)
2: uXxyOPGVnASS7u5ky0_kq_0zUmQ.roa (hash: 83RawsrluXe18GC2cGOGUx568BZVRaon+KIyn+++hqw=)
3: z4dC7BchYgJeEJVK0u1hQk0LX9w.roa (hash: eWL2mFtDMtr2WhkRkhhO2F6MQbo7HgvI3DvROQrIYRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:c6:0d:84:d6:72:78:c1:a7:f5:8a:55:40:8a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Validity
Not Before: Mar 29 15:00:57 2026 GMT
Not After : Mar 30 15:00:57 2026 GMT
Subject: CN=bfc21b0812691f51f90fbd38ff90bd24c4c5994a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:44:f8:b4:d2:46:69:52:0a:6b:f3:a8:e5:4d:
98:69:20:99:ab:f0:c9:c3:02:49:b7:de:45:c6:5d:
50:4f:3f:d4:f6:2d:3d:55:87:46:65:13:87:55:e0:
d0:b0:49:47:f9:4c:70:5b:05:26:5e:9c:25:11:8e:
c3:ea:3e:69:0f:50:a1:17:84:55:61:32:95:91:83:
97:01:66:29:5a:79:45:9f:45:ff:d5:35:b5:f6:0d:
fa:67:59:b2:a3:8b:a4:32:56:29:8b:48:8c:e7:0c:
82:bd:a7:62:ce:fb:90:e0:83:43:81:38:b5:32:11:
7b:74:1a:c4:d7:c3:d0:8c:0b:7b:b6:a0:3c:e0:60:
7d:89:c0:c5:54:63:a7:75:6f:3a:58:a6:0c:e3:43:
fc:38:4c:c7:e3:11:a9:8f:74:ca:71:f4:d7:9b:2c:
02:a4:8c:fb:33:3c:04:1d:5a:16:6c:c4:fd:3e:3b:
08:95:27:9f:de:29:9f:31:08:92:54:9d:98:a0:c3:
1a:95:20:c2:90:c0:e9:db:d1:95:57:ea:72:f6:7f:
c0:ad:9a:a8:c5:8b:99:92:bd:36:6e:19:12:0b:a5:
0e:be:61:7f:e5:75:92:66:d5:ac:85:64:ad:b0:e4:
b1:05:59:b4:28:82:35:54:e6:2a:a9:1b:b4:64:5e:
4d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C2:1B:08:12:69:1F:51:F9:0F:BD:38:FF:90:BD:24:C4:C5:99:4A
X509v3 Authority Key Identifier:
keyid:D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:38:ac:eb:8e:f4:01:54:39:d6:65:fe:d1:44:03:41:dc:11:
c5:9a:ff:e9:7d:72:1f:a1:e9:62:5e:88:e1:07:fb:6d:63:8e:
6d:71:19:80:91:5c:28:e5:08:cb:b3:86:cf:c6:dc:e5:71:d1:
59:05:0c:5a:7b:20:ab:a6:f9:2f:7d:82:0f:05:fc:cb:d8:2b:
70:68:9d:54:c7:a6:4d:9a:ce:e7:77:eb:e3:cf:ed:bc:ab:7a:
f6:63:54:9f:7f:32:c9:57:61:33:b8:a4:a0:8e:ae:c9:d1:66:
fa:eb:98:b6:c6:ac:87:42:11:3c:89:a2:cb:b0:df:6e:65:9e:
4d:ce:0a:2a:01:5b:c1:23:31:5f:66:87:0c:c5:5f:0c:50:7c:
6c:fe:3b:a6:9a:05:bc:81:fc:ba:98:f7:63:65:36:43:cf:56:
2b:fe:41:5b:91:b6:35:7a:02:7c:8a:0a:06:8b:dd:28:4a:cd:
92:c6:1d:14:bb:73:c0:31:ef:5c:99:e4:27:25:16:8b:b4:4d:
53:ba:06:b1:90:be:cd:bb:b5:2d:66:a1:0e:f0:9d:0a:99:f6:
3e:d5:d2:4a:79:6a:fc:95:02:fa:37:89:bd:21:cd:7a:a8:8b:
9f:4e:2f:db:c1:d6:5d:17:d6:41:eb:8e:de:29:4c:76:dc:91:
36:33:45:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:20 2026 by rpki-client