Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
File: Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft (raw, json)
Hash identifier: 1ITXcPy/hzg1PH45B718eIurxjbS4puHHPR6XU3Gh+I=
Subject key identifier: 54:E6:61:68:62:03:8C:CD:1E:42:D3:4D:49:F5:1E:0E:92:F4:B3:02
Authority key identifier: 2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
Certificate issuer: /CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Certificate serial: 019DCE633BBE71C09916848E2B2DD1C0870E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
Manifest number: 18E2
Signing time: Mon 27 Apr 2026 10:01:42 +0000
Manifest this update: Mon 27 Apr 2026 10:01:42 +0000
Manifest next update: Tue 28 Apr 2026 10:01:42 +0000
Files and hashes: 1: Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl (hash: ABrmGrCDlDB9PcYrKTFDFVg8WakmtTZpHcRPkt4Daxs=)
2: NhO_IDsun1DhSJC0nOwiJzZ6IyY.roa (hash: UE/nLkMq9esL2M39yDKTuiYBOgv6z8tQHjDR2GXbU1s=)
3: PpfIHCD22AUayAWPFxeE0m6hL9o.roa (hash: tEQKGH709CVuan0YOwHt1iqyxRmhemh2Iabk8KfvabM=)
4: Q8LbMVAHxWAfxQJcRhdFiRYCp4w.roa (hash: tdLoVEqLTBIEvnLCawqPyA2B1G/W68at8ZFosy/1Cnw=)
5: X9ZqGynMA1KtK65ZVtTizqC4m9M.roa (hash: hcMM10zcyfbfDa1u/NFR+3E0NC3GcUNUVcvC/8j8tfA=)
6: aiU8GheKUwEsKAvrAGVfVEf_2us.roa (hash: ba9JgrJv05bsn4HBNLPhqyZjZDuO1MwJ6BBEyMGIZCc=)
7: pR8icRPbtmxZyLYy7ClhNlyoP3I.roa (hash: hJET2JInI9K0Hd2BzAqq/nSPxKB057Gd1PzyTDZKZpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:3b:be:71:c0:99:16:84:8e:2b:2d:d1:c0:87:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Validity
Not Before: Apr 27 10:01:42 2026 GMT
Not After : Apr 28 10:01:42 2026 GMT
Subject: CN=54e6616862038ccd1e42d34d49f51e0e92f4b302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:05:b7:5f:5c:db:25:f2:5e:48:72:9c:92:
44:d7:b5:14:6c:4d:2a:8b:79:6b:0b:80:e8:21:0e:
11:d2:7a:79:04:f2:e2:11:d4:77:55:f5:5f:b3:f8:
25:18:7b:8d:69:04:a5:86:72:94:10:10:ff:66:bc:
14:c9:7d:fb:1f:3f:32:97:95:ba:e9:09:9c:fe:62:
f6:b4:a8:18:ee:54:b9:38:bc:77:f8:0a:ad:b2:82:
f3:2a:6e:a0:8f:fe:5e:6b:a5:a3:03:3f:5f:08:93:
9f:aa:0c:fa:3a:f8:0c:c7:f9:4c:6e:bd:65:66:75:
ca:2a:ae:ae:58:39:ff:66:52:92:85:5d:17:ce:53:
9c:92:b6:9f:ea:54:86:fb:ab:ac:cc:7b:41:ec:83:
14:0c:85:39:3b:92:ba:9e:78:b9:99:6e:d4:95:98:
af:c6:7f:f6:e8:5f:4d:d9:56:e8:bc:37:dd:db:ff:
c4:b9:3d:6a:1b:7a:08:de:d5:cd:61:2e:16:e5:14:
c7:a0:f4:3e:9e:a5:7f:99:e2:f9:6c:4d:e6:36:42:
93:0a:98:78:af:00:d9:86:cd:07:56:94:87:a0:2b:
73:d4:da:4a:20:2b:c7:e0:c4:ce:3d:fb:4f:41:4f:
6d:21:7b:2f:f6:bf:e1:79:18:9d:7c:5d:4a:6e:b4:
a0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E6:61:68:62:03:8C:CD:1E:42:D3:4D:49:F5:1E:0E:92:F4:B3:02
X509v3 Authority Key Identifier:
keyid:2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:92:49:dd:7b:86:72:2b:d4:a3:78:fc:4a:77:d2:d6:e4:59:
49:43:e8:1c:3c:1b:e0:60:3b:c7:31:b4:ec:26:8e:35:a1:c1:
31:49:cb:b5:53:40:b8:66:24:3c:b0:cb:e0:3d:cf:f2:37:8a:
fb:0c:d3:30:42:31:10:ce:64:3b:fa:f3:f7:a8:81:37:e0:0d:
98:d8:73:02:e2:78:ab:e4:4f:e5:63:59:9f:6f:76:ba:8a:5e:
ea:51:b7:99:7c:7d:9f:05:ed:9d:d8:6d:c3:a6:b5:b7:76:0e:
2e:4f:8a:c5:43:10:1c:3f:3f:57:65:b0:ee:68:04:71:e8:ff:
17:28:f1:ce:ad:57:05:0b:4c:0a:0b:fb:2b:6e:cd:e8:7d:3f:
4b:3e:30:2a:ee:77:05:8c:b0:f7:15:29:1f:63:d7:05:ef:8c:
f6:e6:5f:52:bd:94:4e:4b:85:96:a1:a3:6b:13:73:39:d6:40:
b6:6b:e7:4c:5e:44:64:e6:08:d9:b3:8e:86:7f:8f:03:be:dd:
a1:34:4e:33:d3:cd:cc:3b:1b:0c:c4:83:f6:a0:cd:35:0e:bf:
fa:6e:d2:a4:14:c6:b5:99:1b:e5:9d:d3:dd:02:57:ce:e4:42:
03:5a:79:52:69:86:5f:80:21:88:77:3b:86:c1:9c:0a:c4:4f:
47:6f:60:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:04:06 2026 by rpki-client