Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
File: lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft (raw, json)
Hash identifier: 1FuBbs3zqGMQGzFQ2ABg6zO1mZRCJZhVmn3HUDO4+GI=
Subject key identifier: E8:46:ED:4E:E3:B1:E3:1A:DE:61:E2:CF:F2:D4:3A:71:95:4C:EC:1E
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial: 019E2CCCD47C4E688658DD58162DCD038E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
Manifest number: 15E9
Signing time: Fri 15 May 2026 18:01:21 +0000
Manifest this update: Fri 15 May 2026 18:01:21 +0000
Manifest next update: Sat 16 May 2026 18:01:21 +0000
Files and hashes: 1: FitX3sWQ_iHXagZBIm2G09JUo5s.roa (hash: KV5mxaj5PQdSSjX+1QS/5L4FU+fN0JBB9CsJ5gF5o/o=)
2: GJmBjPFiuI9wpLlDRwS9mxb4F6E.roa (hash: EWYqSEaxsJwB3eARQDD/wcNEb9j/xhowyFxphGXlVm8=)
3: k7h4yqZemUb5b2bIFBvdTSgfzyw.roa (hash: Bx4UTl3NXqDp9MQ/LTWLZEsPj6vB0/E0amtRDWqvTIc=)
4: kCAsSIbvKF55PV7u3rulF5069fE.roa (hash: baPIhS+1QRBCYazJ9uYyJZTSmKcZ6uEAV6jyZHcT50U=)
5: lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl (hash: S41tI8X6Ch7qJfp1vk6IG1IsyCz6zDJEz0KD/pu5nZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:cc:d4:7c:4e:68:86:58:dd:58:16:2d:cd:03:8e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Validity
Not Before: May 15 18:01:21 2026 GMT
Not After : May 16 18:01:21 2026 GMT
Subject: CN=e846ed4ee3b1e31ade61e2cff2d43a71954cec1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5b:62:01:af:79:77:18:9f:6d:b5:1d:28:37:
8d:13:ee:0e:17:71:9e:bb:df:ca:22:b4:cf:8c:24:
95:9e:c2:88:c9:10:1f:99:99:08:a8:ee:33:b6:24:
eb:ed:28:e7:b8:bb:ff:26:c3:f8:30:ae:75:68:cd:
b5:bd:ba:e7:b3:d4:35:4a:bf:c6:06:c9:2f:65:58:
85:c9:71:01:a2:ff:88:a9:b7:66:47:1a:46:f2:fb:
2a:7f:ca:14:6f:a6:36:5e:8b:9b:4e:df:1c:94:e5:
26:db:d4:6b:4d:0c:b7:d5:6f:a6:21:fc:44:12:15:
32:3e:25:f9:10:e6:3a:33:23:37:1a:3b:f6:0b:95:
d8:39:48:5c:53:a2:19:26:f4:d4:aa:f7:fb:9f:79:
1c:a7:f4:3e:a4:57:45:b2:cc:b4:46:8e:82:40:fd:
23:b6:a6:b8:fd:55:b4:db:1b:87:bb:5f:d6:97:e9:
c1:9f:45:50:89:8c:32:d1:f6:97:af:a1:9c:cb:4d:
d5:83:75:b4:5a:f2:c0:8f:18:fd:df:c4:9a:97:d4:
2b:eb:ff:c3:bf:31:a2:30:c5:a8:a6:02:c7:f2:2e:
3d:ca:96:79:e2:95:d6:cc:37:f6:95:f5:39:73:ba:
db:bf:ec:3a:85:99:a5:5b:74:87:29:86:02:39:c6:
74:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:46:ED:4E:E3:B1:E3:1A:DE:61:E2:CF:F2:D4:3A:71:95:4C:EC:1E
X509v3 Authority Key Identifier:
keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8f:25:b1:ce:9b:79:ca:48:79:5e:73:5c:29:ea:63:4e:50:
9c:bb:e8:1c:20:5e:de:d0:93:e3:c7:fb:3f:0d:32:b2:5f:11:
47:94:44:08:6c:ba:33:32:60:4d:60:5c:a0:5f:13:d9:34:55:
c7:5e:72:0b:a4:49:f1:bc:10:6f:6d:22:3b:78:d2:9e:06:33:
c4:19:90:f3:76:7a:4d:10:f6:2a:e6:f5:8e:44:f3:4f:bc:55:
be:9b:71:53:55:dd:37:6b:9b:d0:5a:d5:3a:ad:ba:98:6d:c9:
a2:e3:f3:4c:df:43:64:cb:dd:f1:ac:c2:af:65:d7:7e:8e:5f:
6f:2e:3d:26:5a:d7:84:92:f0:01:b3:7b:52:5d:dc:44:19:e8:
28:5e:a8:ae:0e:b5:9e:8f:6f:2d:2b:6d:6f:fa:53:72:28:6c:
d0:13:90:38:4c:94:60:27:75:ab:55:32:15:eb:c2:e0:ca:4a:
59:de:29:18:42:c0:59:de:4e:ff:de:a3:2a:e0:a6:a0:5a:03:
c2:19:59:55:20:71:82:e7:eb:60:ac:18:dd:af:5b:1e:f2:4a:
1d:90:ce:39:d4:bd:c2:ef:74:10:fb:a7:21:8f:e8:df:20:95:
4a:d3:28:cc:46:88:b8:e5:94:a5:34:43:84:89:c5:1d:c9:f4:
d6:19:6e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 20:45:19 2026 by rpki-client