Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
File: lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft (raw, json)
Hash identifier: Hvl8WSwSDDDV9jx+p/ySnJ2PdwSEt7aFQLm2sp/DVEw=
Subject key identifier: DD:82:95:94:76:AD:59:74:9E:A5:04:CC:B8:47:8B:31:38:1E:4E:3D
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial: 019D386626DE690E8C5B3137A0654A9D9523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
Manifest number: 156A
Signing time: Sun 29 Mar 2026 07:01:51 +0000
Manifest this update: Sun 29 Mar 2026 07:01:51 +0000
Manifest next update: Mon 30 Mar 2026 07:01:51 +0000
Files and hashes: 1: 1-lKoU1yOKxnwsDuF3-ruK96PVNo.roa (hash: IOjO4sGW5jpY5sMRaf3CjBzP7+xSqwcjH//jisz2/A8=)
2: GJmBjPFiuI9wpLlDRwS9mxb4F6E.roa (hash: EWYqSEaxsJwB3eARQDD/wcNEb9j/xhowyFxphGXlVm8=)
3: Ht4mv8kp4i3crO6SB184ED4eteI.roa (hash: UhjKCPcDd1ersETNcFLEp5rKk3sifo5x89dtS1h38rA=)
4: kCAsSIbvKF55PV7u3rulF5069fE.roa (hash: baPIhS+1QRBCYazJ9uYyJZTSmKcZ6uEAV6jyZHcT50U=)
5: lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl (hash: Ux+MGBueh007zyaCFbSg0KjHcJvgerctTO+fF1QsCRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:26:de:69:0e:8c:5b:31:37:a0:65:4a:9d:95:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Validity
Not Before: Mar 29 07:01:51 2026 GMT
Not After : Mar 30 07:01:51 2026 GMT
Subject: CN=dd82959476ad59749ea504ccb8478b31381e4e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9b:88:fd:03:ee:68:a8:d0:5a:c0:ea:78:a6:
21:1f:37:71:4d:b9:38:2a:cd:3c:c0:19:39:28:b6:
84:78:d1:01:f2:6c:dd:75:36:98:d3:3c:19:5e:40:
84:10:33:35:19:fd:3a:d4:45:98:0d:02:3c:a2:85:
00:af:cf:d6:02:04:5d:d2:f9:43:31:31:78:5b:4e:
32:4b:31:ee:03:27:6d:62:9e:2f:13:79:80:44:b8:
dd:18:0f:e0:fd:bc:44:eb:b6:19:2f:de:24:e3:04:
c1:83:7e:26:a0:2b:eb:09:0a:6b:eb:ff:82:7b:51:
2c:e7:d2:77:fa:a0:ba:49:a8:80:34:8c:fe:93:05:
84:a7:ec:ed:2a:1e:bf:1e:fb:fa:7e:f8:8c:aa:f9:
0f:9e:cf:fd:d7:ae:e3:89:a2:44:39:5e:4a:52:36:
11:26:60:9b:84:45:c2:6b:95:44:96:48:86:96:e5:
13:ed:d8:3a:ef:06:a4:f2:cf:60:01:63:13:ec:f4:
7b:e5:f8:06:d1:7a:d9:b3:93:63:64:9c:ef:4c:3c:
28:e3:19:1d:d8:f0:5b:57:d1:90:95:7d:15:60:b2:
a0:7d:83:d7:88:f3:9f:26:e7:9e:f8:e6:d5:c3:2e:
f3:bb:d1:68:e1:a9:f9:ea:cb:5e:a8:c9:ca:fc:14:
07:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:82:95:94:76:AD:59:74:9E:A5:04:CC:B8:47:8B:31:38:1E:4E:3D
X509v3 Authority Key Identifier:
keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f0:6e:c4:2f:e2:8d:c6:62:ad:89:02:30:c1:64:7c:d0:b9:
43:7b:40:a0:a9:c7:b4:d1:0d:26:15:54:a5:d4:4e:f8:0a:f6:
64:92:49:30:08:8a:07:2a:d0:54:a7:df:30:dd:69:00:22:1c:
f3:da:9d:2f:f1:c7:e2:b5:ad:1d:ab:11:d2:6c:a0:c8:3c:29:
98:1a:46:84:ca:5b:31:e9:9c:72:ae:24:9e:79:ef:cc:7c:e6:
3f:a6:ad:ef:a8:51:02:83:a2:13:33:13:38:20:c7:87:19:10:
f6:d3:12:5d:bb:96:3a:61:c9:30:69:2a:14:95:a9:a7:70:36:
d5:26:53:ef:52:1b:ac:95:c0:55:be:4a:ce:31:d0:49:ae:21:
c3:5e:6f:b6:cf:31:ca:17:88:fe:31:5c:91:ab:c4:85:88:58:
79:b5:44:a1:fa:5c:e6:13:9b:2a:ca:f0:d2:ed:46:7d:a1:53:
e1:30:01:76:87:46:ad:47:3f:59:e0:25:7d:c0:15:fe:11:1e:
e8:87:4a:7c:3e:b8:99:95:29:c9:0e:1d:ed:35:17:b9:75:ed:
2e:20:f3:e6:3c:81:ca:79:3a:1d:46:46:9c:ed:9c:56:4e:b0:
33:d2:e2:78:6e:1d:46:7f:83:cb:e3:82:c0:f8:a9:5e:c7:ea:
c7:d8:23:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:47 2026 by rpki-client