Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
File: mLU7husfGdCufACxMul8A6lL_2E.mft (raw, json)
Hash identifier: MT3pFBynin0suSdS36pEnVgpOzI0EoNNi2e7tR80IKk=
Subject key identifier: 54:49:A2:C5:35:44:32:DD:E4:3E:FD:12:D5:17:6A:B3:61:E0:00:35
Authority key identifier: 98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61
Certificate issuer: /CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61
Certificate serial: 01A08A554D0881B1C246BB39CBD363724D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
Manifest number: 17CD
Signing time: Thu 10 Sep 2026 08:00:41 +0000
Manifest this update: Thu 10 Sep 2026 08:00:41 +0000
Manifest next update: Fri 11 Sep 2026 08:00:41 +0000
Files and hashes: 1: QxbuEgaCbRaD-slTv7YdUYD7rWQ.roa (hash: d2KUx7esd7yDYioAhXgs0Rm4+uRrblcxg8RCa82DopQ=)
2: mLU7husfGdCufACxMul8A6lL_2E.crl (hash: 44utt7Cs6enU66jeXqxrPnJ+ncCtearDRJ5WEXp3ESI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:4d:08:81:b1:c2:46:bb:39:cb:d3:63:72:4d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61
Validity
Not Before: Sep 10 08:00:41 2026 GMT
Not After : Sep 11 08:00:41 2026 GMT
Subject: CN=5449a2c5354432dde43efd12d5176ab361e00035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:f6:19:c5:81:4c:e6:51:62:0c:a2:f8:43:
5d:28:d0:dc:be:3e:4e:48:c6:de:92:c7:45:cc:2e:
0d:68:8d:de:b2:c6:a2:02:45:c2:cf:9c:dd:f7:1d:
80:4d:b4:60:19:25:2a:ef:9c:52:ef:26:c8:5c:41:
a1:1d:a8:a5:69:e3:d6:05:02:e8:0a:c9:ec:f9:9b:
e4:92:c3:1d:b5:20:52:74:e9:41:b6:c6:e8:dc:b9:
b9:99:01:89:3c:8a:1a:0e:d0:34:09:f3:8e:d0:92:
8c:4a:f8:38:7b:93:5d:2e:14:d6:a4:0c:00:bc:51:
15:64:20:9e:8f:ef:df:bb:ef:d2:53:85:f0:7a:94:
5d:97:f9:4f:dc:65:58:6b:f0:20:19:96:59:e3:f4:
df:b3:89:58:18:9c:91:4f:e4:92:e4:6d:f0:e9:53:
9e:d8:43:41:76:03:78:12:83:94:0f:22:17:a2:6a:
ff:c1:36:a4:be:a0:2a:47:1c:85:a8:cd:df:06:e6:
87:84:b7:7d:bc:df:93:67:b6:03:5b:2e:69:9b:bf:
04:1d:63:b0:66:2d:96:3a:20:a5:fe:fc:e1:e5:94:
b4:7d:28:56:7d:ff:1b:16:39:50:f6:84:7d:71:8c:
d7:c2:43:10:db:ed:9a:17:c7:47:0d:6b:02:25:53:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:49:A2:C5:35:44:32:DD:E4:3E:FD:12:D5:17:6A:B3:61:E0:00:35
X509v3 Authority Key Identifier:
keyid:98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4c:9d:00:f0:ce:a5:f7:80:9b:e6:fd:77:ff:83:d8:2a:a5:
12:9b:cd:3a:e3:d3:5e:3c:bd:78:e8:79:ac:a0:4c:90:97:bf:
59:5e:6c:74:0a:74:74:af:5f:83:46:84:aa:c0:00:01:37:bf:
60:20:cd:44:eb:2f:80:a4:2b:46:d6:4f:3a:3f:33:2e:30:63:
54:41:d1:c0:32:8a:9e:3a:ab:07:80:7b:fa:4f:46:95:ce:24:
0d:d8:ed:53:de:c6:63:82:ff:d4:b5:4a:a1:b0:1a:de:ef:15:
6f:f5:f9:9a:49:26:62:6a:fe:38:53:d2:e8:cf:91:c5:f2:2b:
d3:53:70:f7:38:95:3e:3a:fc:52:db:a6:54:60:2c:3a:dd:ec:
b6:55:e9:4d:bf:fd:15:a2:c9:be:16:7f:b7:1b:1f:c1:cc:c2:
0f:b1:4c:75:66:49:d1:91:6d:1c:c9:33:58:f9:4d:b7:22:8f:
2c:03:e1:69:54:a0:d8:44:5e:56:1a:67:b0:28:9b:62:f9:39:
cc:0d:2d:39:2e:1e:fe:6b:c5:4c:12:79:e7:6c:4c:91:1e:d6:
1e:22:6d:0a:06:23:36:06:6c:b8:8c:52:ab:dd:47:79:b4:9f:
c7:ac:37:b8:ec:19:93:1e:7c:94:3b:f7:66:d3:03:58:4f:c8:
f2:11:f7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:01:36 2026 by rpki-client