Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
File: LuUlFj3AHc0wibsdz7CRLnftr5g.mft (raw, json)
Hash identifier: j4pxkeiJZUnUsa6AoZBVIb7o7C+fMWyMa2g9PRsjICk=
Subject key identifier: DB:51:01:94:98:7D:0E:66:5E:ED:D9:33:81:2F:91:3D:C6:00:5F:76
Authority key identifier: 2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
Certificate issuer: /CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Certificate serial: 01A1770371E4F373C1A2438067FD973B4A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
Manifest number: 1AC1
Signing time: Mon 26 Oct 2026 07:01:16 +0000
Manifest this update: Mon 26 Oct 2026 07:01:16 +0000
Manifest next update: Tue 27 Oct 2026 07:01:16 +0000
Files and hashes: 1: LuUlFj3AHc0wibsdz7CRLnftr5g.crl (hash: LNMIarlXvTCr6yvBySOTSxAgfFNiNadj0jmlMNbfIcw=)
2: SEDWNZbo3pFvXEliK-mlebM2s8Q.asa (hash: NafQwDuHMOdaxwYRGkcpU9cIEXXXpPwc58+KMEjSHWM=)
3: bJdam9pp9M4KoAXNEJaB74-xkH0.roa (hash: uYdGAOnYTnxesXkdC+SoZNMuyPsRhlrSV+UF+OBopIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:03:71:e4:f3:73:c1:a2:43:80:67:fd:97:3b:4a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Validity
Not Before: Oct 26 07:01:16 2026 GMT
Not After : Oct 27 07:01:16 2026 GMT
Subject: CN=db510194987d0e665eedd933812f913dc6005f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6f:4a:1b:9b:7a:d2:05:a9:3c:b2:43:10:a1:
3a:a9:b9:57:76:01:e1:8f:43:d3:f3:18:e0:37:29:
e7:2d:92:2e:bb:9f:0e:b0:89:d7:e9:e3:71:9b:48:
4e:8f:f6:01:80:f4:b9:c0:c4:55:3d:d2:0b:d6:66:
64:c0:68:6e:86:cb:5e:0c:42:bd:70:df:7c:ce:e1:
10:98:6d:ad:1e:99:5c:59:07:2a:c4:27:43:72:80:
52:46:4a:a9:f7:3b:fc:99:e0:79:c7:6c:b1:8f:07:
37:50:50:7d:06:3b:ed:4f:6f:d4:30:5d:ed:a3:ea:
83:c5:b3:03:d4:d0:31:fd:2f:6a:b7:96:f8:28:1f:
1a:97:65:cc:a7:f6:71:45:14:0a:b6:f5:52:df:ba:
73:1e:7b:78:18:9b:bb:ed:31:98:42:e1:ae:22:0a:
2a:b1:5d:a8:05:78:6c:33:33:72:29:6b:f4:89:d9:
ae:06:0b:20:cb:7a:7c:2f:1a:61:8e:19:3c:8f:e7:
24:d8:d1:a3:55:3c:4c:84:9b:d3:98:c1:d2:10:78:
30:b5:5e:91:6a:5d:e1:e5:ef:2e:ac:36:44:4c:5d:
18:17:3b:40:9f:c9:a1:47:b9:15:1f:69:7b:ad:e0:
88:7b:3b:f9:65:3f:90:77:b5:93:cf:91:4c:12:a0:
87:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:51:01:94:98:7D:0E:66:5E:ED:D9:33:81:2F:91:3D:C6:00:5F:76
X509v3 Authority Key Identifier:
keyid:2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a6:c6:1a:96:d9:52:a3:bd:ac:58:1f:cb:9e:69:d3:3e:b8:
b1:b7:a7:e2:ae:df:b6:cd:e3:32:49:79:a5:58:02:26:fc:71:
b9:dd:86:50:f7:46:1f:c3:6c:ec:09:5f:18:74:8d:f0:cd:c1:
ec:fd:1f:f1:69:17:2f:9e:0f:90:46:4b:4c:d0:48:18:40:c0:
73:87:3d:18:72:b2:59:1c:a2:8d:54:86:35:bf:b6:fa:00:d8:
fb:54:15:2f:45:2f:10:d8:ae:64:a4:a9:41:10:17:91:1a:f3:
2b:e0:ec:a5:12:9b:37:11:c6:5c:6b:bb:68:a9:69:7a:d2:24:
1f:cd:29:50:44:4b:e1:82:f1:0c:c9:d9:c4:85:3e:33:71:0c:
c2:17:67:84:ab:07:1d:05:0a:8b:c6:2d:c4:78:2d:c8:27:08:
14:62:63:b2:ec:09:0b:a6:98:b9:0f:93:f9:1a:36:06:ee:9a:
5b:fa:5c:8b:64:08:75:a8:18:05:7f:97:ac:11:68:37:ce:9c:
48:5a:4c:50:36:a8:b0:9d:e2:32:92:b5:e8:d8:97:d4:0d:29:
21:3e:ed:35:f0:f5:41:32:b4:1a:fd:df:17:3d:c6:b5:a3:56:
16:68:78:1d:7a:d4:15:1d:32:c6:05:a0:84:4d:b0:61:04:9d:
1d:d5:02:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:04:51 2026 by rpki-client