Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
File: lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft (raw, json)
Hash identifier: qkjXays4CsIZ6hfaHEO3sJAeGycuWzQEaEbGic1YYyg=
Subject key identifier: 5F:00:3B:88:F3:F3:48:F7:96:D6:28:CA:95:2D:49:F2:B4:84:17:15
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial: 01A028B39EFB558261DEC9D0C2FA43931BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
Manifest number: 16F0
Signing time: Sat 22 Aug 2026 09:00:55 +0000
Manifest this update: Sat 22 Aug 2026 09:00:55 +0000
Manifest next update: Sun 23 Aug 2026 09:00:55 +0000
Files and hashes: 1: FitX3sWQ_iHXagZBIm2G09JUo5s.roa (hash: KV5mxaj5PQdSSjX+1QS/5L4FU+fN0JBB9CsJ5gF5o/o=)
2: GJmBjPFiuI9wpLlDRwS9mxb4F6E.roa (hash: EWYqSEaxsJwB3eARQDD/wcNEb9j/xhowyFxphGXlVm8=)
3: k7h4yqZemUb5b2bIFBvdTSgfzyw.roa (hash: Bx4UTl3NXqDp9MQ/LTWLZEsPj6vB0/E0amtRDWqvTIc=)
4: kCAsSIbvKF55PV7u3rulF5069fE.roa (hash: baPIhS+1QRBCYazJ9uYyJZTSmKcZ6uEAV6jyZHcT50U=)
5: lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl (hash: LppBuxOT/J96QuAz8etQwJnAizOB1I4yenE6lCEkxJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:28:b3:9e:fb:55:82:61:de:c9:d0:c2:fa:43:93:1b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Validity
Not Before: Aug 22 09:00:55 2026 GMT
Not After : Aug 23 09:00:55 2026 GMT
Subject: CN=5f003b88f3f348f796d628ca952d49f2b4841715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:57:6c:c0:51:36:bf:87:81:68:9f:2d:42:46:
f3:4b:31:9a:bf:f8:09:7d:41:5d:16:32:22:52:75:
4d:0b:28:ae:bc:32:37:83:54:ff:65:ed:7e:03:36:
06:64:f2:50:b3:3b:11:93:c5:f2:13:84:45:02:c3:
c8:e3:e7:1f:31:36:d3:a4:0b:ee:62:14:b8:f1:52:
f2:0e:e2:5d:c2:96:2c:1d:cd:73:68:da:5b:bd:42:
f8:33:ef:56:70:95:5d:5d:92:b3:14:93:6f:bc:ae:
84:70:e6:01:af:89:6b:8a:06:80:04:f9:05:ce:1d:
58:78:7d:62:a2:b7:59:94:dd:ef:b3:19:ad:b9:89:
aa:24:df:5e:a8:65:4c:30:9c:64:b6:11:97:fb:2f:
1c:5e:f2:81:47:e3:7d:35:16:df:4c:02:fd:4a:85:
7c:89:c9:66:2e:23:d7:18:72:03:9f:04:52:6f:33:
c1:68:13:2d:80:ce:f6:cd:3b:61:83:60:d4:d1:25:
67:39:b9:ff:09:97:8b:55:94:8a:0e:1c:25:17:65:
8f:c7:3c:4b:f8:cd:0f:1c:1b:fe:56:f8:56:dd:74:
4e:88:ae:99:a4:80:6e:39:2d:fe:4b:0b:f6:48:c1:
44:08:e4:48:3d:67:28:b7:a9:33:65:a4:f4:4c:9b:
97:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:00:3B:88:F3:F3:48:F7:96:D6:28:CA:95:2D:49:F2:B4:84:17:15
X509v3 Authority Key Identifier:
keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e5:66:8f:0d:73:91:2a:88:98:d4:fa:81:e0:66:18:d9:f2:
62:7b:cf:27:ae:34:7b:47:e1:1d:9a:cc:7f:18:57:bd:5c:51:
f9:a4:72:bc:8f:09:c8:92:5d:e7:0b:7e:99:a1:7f:d1:bf:e8:
6b:24:3c:8b:79:e6:b0:70:85:89:46:8f:f8:bc:22:de:39:2f:
ee:cf:e1:aa:5f:e7:f1:43:40:9d:15:bb:97:53:86:22:09:e2:
8f:31:06:54:59:bf:5a:5a:f5:3b:b2:78:a7:1d:5b:77:7c:59:
d8:8c:8c:d7:2b:66:b4:86:55:a1:e8:7a:2a:3d:27:8a:89:25:
8e:f7:33:9c:e4:62:7c:68:78:2d:ba:62:47:49:af:e4:fe:fd:
67:4c:3f:4d:dc:7e:4a:91:86:55:56:a7:c7:25:e9:c1:77:f7:
dd:73:f8:bd:97:71:e5:e9:5d:32:a3:ec:0d:07:57:fb:df:d8:
89:42:54:cc:da:73:f3:12:b1:3d:90:a1:3b:70:32:5c:3e:59:
50:b0:89:06:f9:81:eb:5d:cc:3b:6b:96:3b:8a:53:8f:ac:ef:
a9:6a:96:65:73:85:aa:82:76:55:34:59:4c:c1:2d:bb:71:2b:
43:c8:7a:54:1f:91:ec:05:d5:17:58:15:b4:ab:06:ef:da:14:
1b:fb:7b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 12:26:19 2026 by rpki-client