Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
File: Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft (raw, json)
Hash identifier: FWLq9ooQkYzXkIp3A9Nef3DPYiC5ovRld1KLGDutYMc=
Subject key identifier: 1A:54:D9:1C:CF:B1:E5:43:B8:69:6D:18:25:5A:3A:C9:A2:79:DB:8A
Authority key identifier: 2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
Certificate issuer: /CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Certificate serial: 01A17AA8DA43C761E6F7A92159FAEDCD5EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
Manifest number: 1ACF
Signing time: Tue 27 Oct 2026 00:00:48 +0000
Manifest this update: Tue 27 Oct 2026 00:00:48 +0000
Manifest next update: Wed 28 Oct 2026 00:00:48 +0000
Files and hashes: 1: Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl (hash: YYUx0o8GWIT//R4FIZ/zIZVKun22xC0AiZxwkpvBk0M=)
2: NhO_IDsun1DhSJC0nOwiJzZ6IyY.roa (hash: UE/nLkMq9esL2M39yDKTuiYBOgv6z8tQHjDR2GXbU1s=)
3: PpfIHCD22AUayAWPFxeE0m6hL9o.roa (hash: tEQKGH709CVuan0YOwHt1iqyxRmhemh2Iabk8KfvabM=)
4: _Sd1irv3SLkzWu_oWkUu1MU3I_A.roa (hash: TWJWK/sBOL9QSILupXX65npBLxxyu5RqaTrMAD2mTbI=)
5: dueCXYNcF-POwww1SeqmkvTvQfE.roa (hash: r+0QIl7pa6dXrtrsAw/kbZCUtrWjLzE48etRrYzcEK8=)
6: pR8icRPbtmxZyLYy7ClhNlyoP3I.roa (hash: hJET2JInI9K0Hd2BzAqq/nSPxKB057Gd1PzyTDZKZpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:a8:da:43:c7:61:e6:f7:a9:21:59:fa:ed:cd:5e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Validity
Not Before: Oct 27 00:00:48 2026 GMT
Not After : Oct 28 00:00:48 2026 GMT
Subject: CN=1a54d91ccfb1e543b8696d18255a3ac9a279db8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3a:c6:d1:a3:50:20:29:3f:63:40:cd:49:25:
6d:e5:7a:59:a3:10:94:e4:50:da:69:6e:5c:58:17:
84:b4:c5:e2:c8:05:31:61:a0:10:cb:12:b7:01:3c:
8e:38:42:3d:27:fb:a1:5c:bc:3b:8a:d8:07:fb:9a:
7f:42:3d:ea:0f:7f:eb:73:d4:62:05:2c:84:d7:c6:
f0:a5:50:af:47:bb:35:ad:4a:bb:d2:c2:f0:00:6b:
7a:be:90:42:30:e0:72:86:c0:0d:b6:f6:24:65:6d:
c8:ab:b1:fe:cc:af:c8:18:ba:04:22:96:e6:34:50:
75:89:7f:a2:38:df:2e:10:a9:9d:4a:f2:a1:2b:0b:
24:55:4e:62:e3:fd:78:9e:4c:8a:0b:20:ee:e3:85:
56:1e:51:4c:02:dc:bf:b7:5f:f1:33:b1:fa:9c:f6:
d2:5d:d2:b9:fa:bf:41:2d:07:5a:38:8c:e5:88:43:
58:87:83:3d:a4:11:c6:01:b5:1a:5c:1a:43:0f:27:
1b:fa:b7:06:68:c6:af:dd:3c:cf:cb:a4:d1:49:9a:
1f:ad:8e:25:c4:ea:83:fd:b2:3e:a1:e2:14:82:20:
8a:46:91:9d:fd:36:5c:e5:2f:3e:fb:7c:c3:d8:3e:
cd:d3:c4:a8:17:f3:8f:00:3d:86:69:c5:50:ad:60:
50:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:54:D9:1C:CF:B1:E5:43:B8:69:6D:18:25:5A:3A:C9:A2:79:DB:8A
X509v3 Authority Key Identifier:
keyid:2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:79:5b:6f:8f:c6:92:d5:90:b3:84:cf:c4:d5:b2:31:1e:64:
38:b4:bf:bd:ad:01:a5:73:4d:af:45:ac:eb:5e:d8:88:66:76:
81:e1:f6:cc:9c:58:f7:6b:c9:75:4d:a9:e3:d1:5a:8d:d1:68:
09:c2:eb:d2:54:ba:f7:d3:37:61:49:99:d1:87:f5:04:e1:c5:
5f:a0:da:99:e5:55:11:10:40:5b:26:bf:76:53:ab:f2:39:6e:
4f:ba:2b:35:98:33:66:f1:dd:2a:34:58:39:97:62:d9:1d:ce:
69:f1:7b:aa:85:76:2d:9a:b4:04:ac:66:66:23:d3:3c:a3:c2:
ac:fd:e3:9b:46:91:fd:d4:a6:67:f2:28:f5:67:8f:62:3b:b6:
39:25:19:ec:7b:b9:1a:76:bb:2c:e2:99:1d:8e:08:e9:52:0c:
1a:1e:39:55:5e:55:62:97:b6:83:15:93:82:69:f9:2c:4f:1f:
7a:48:50:1c:74:a1:de:2d:8e:ce:a9:bb:ec:f1:ba:93:d8:f6:
0d:b7:75:16:cf:ed:06:68:f8:96:4a:4d:af:f4:aa:70:aa:45:
be:a2:2a:f6:e9:7d:5f:d3:4d:23:73:d7:63:b2:41:0a:34:fa:
74:66:7f:a2:cf:cb:3e:a9:a4:da:09:fd:cd:b9:d3:c7:e5:2f:
4c:f1:ef:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:40:21 2026 by rpki-client