
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
File: u-LMINabMN3hjsDQAs4vkUm_sG0.mft (raw, json)
Hash identifier: opxrLWbfdhBSUtxsP56iWN2CHlcfrXnzc901Ph+3qao=
Subject key identifier: 5B:64:C8:25:A0:9A:2A:D4:08:87:96:0D:B3:AD:45:BF:60:65:73:E2
Authority key identifier: BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D
Certificate issuer: /CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
Certificate serial: 019D38666EC398128AEB74ABB488B2BD21AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
Manifest number: 0331
Signing time: Sun 29 Mar 2026 07:02:10 +0000
Manifest this update: Sun 29 Mar 2026 07:02:10 +0000
Manifest next update: Mon 30 Mar 2026 07:02:10 +0000
Files and hashes: 1: DXWKP3MB1lGDghFM-NJLvzILH4w.roa (hash: xZDooqBAiwnUkw67O91/SNOlEYAoGsWqbl+tv4wSxjk=)
2: IvYaWiyU4-mF6Hfr6yvUs-TfOx8.roa (hash: vzEeCN8mv8JAbDyh2EAs7UGT1vMJ7VBIlnfY4XE6ETA=)
3: iYgL9YAcXTZTdezPKH7kUPhkmN0.roa (hash: +UrmUxN9VwigyNaXGlHJ5mAa5ZCnHwM1WUcwK+R8j8E=)
4: u-LMINabMN3hjsDQAs4vkUm_sG0.crl (hash: fZeJXTqMA3gLx9iW8BHpFcjeI/skkVii3BgzNCPzZTo=)
5: yFDUf6JsuvyfXz0jEUOsaieGxCw.roa (hash: zP6gz/6pp44KQYvi0+M6T/CexJqf4xQ7LrlyWEsXUQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:6e:c3:98:12:8a:eb:74:ab:b4:88:b2:bd:21:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
Validity
Not Before: Mar 29 07:02:10 2026 GMT
Not After : Mar 30 07:02:10 2026 GMT
Subject: CN=5b64c825a09a2ad40887960db3ad45bf606573e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:22:ba:e1:fc:f7:5e:c7:f7:dd:da:50:9b:36:
f9:4f:3c:20:15:fd:9c:74:f6:9d:97:d8:65:86:ee:
28:0e:c9:86:cd:ff:8d:6b:fc:84:eb:ef:35:01:2e:
90:8a:1a:60:09:d8:d0:34:21:02:84:06:73:d7:01:
b8:1c:9e:61:65:00:ce:97:a8:31:61:ad:d1:46:bc:
fa:9c:d2:33:0d:ee:0b:7a:4b:03:2a:fb:79:dd:5d:
6a:e2:34:b4:7c:21:09:22:83:a0:09:91:19:70:d2:
c9:1b:8b:ef:f7:21:27:ca:81:f4:42:ed:e4:4c:1c:
c6:24:29:a4:bf:dc:15:68:6f:4b:60:d5:dc:0d:ca:
25:47:1b:cc:35:c6:30:5f:45:3c:30:c7:df:84:69:
fa:91:c1:74:ae:c9:73:af:73:ef:87:23:a0:1c:52:
ef:f3:bc:96:0b:d6:00:ac:99:ef:07:19:57:0d:f2:
b5:76:ac:63:04:f6:5c:50:74:f8:c2:1a:3f:b9:80:
24:13:bc:8f:0b:fc:18:d7:ed:8b:9c:89:d5:ee:64:
8e:39:49:a9:c5:6c:c1:f4:1f:0c:2a:e1:36:4b:7e:
b8:9f:c5:36:08:dd:c3:85:ac:cc:ec:09:99:8a:c3:
91:3d:05:c0:e1:3c:30:a3:c2:2d:be:cd:d9:7c:92:
c3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:64:C8:25:A0:9A:2A:D4:08:87:96:0D:B3:AD:45:BF:60:65:73:E2
X509v3 Authority Key Identifier:
keyid:BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e8:1b:38:15:f5:a1:66:84:a2:7b:52:3d:72:61:7c:87:14:
ee:c5:56:3b:e9:4e:93:60:67:a5:f9:10:e8:ff:9b:06:28:a2:
0d:8d:48:07:4d:f9:8a:a1:2d:41:f0:3f:3d:fc:92:a0:62:6c:
94:cf:4d:2f:61:d3:64:5e:60:95:3f:d8:7e:54:7e:80:a4:40:
89:f8:a0:09:90:4a:0b:29:a8:39:1f:e4:03:dd:46:4a:bc:6a:
2c:15:cf:c3:9c:f6:46:6d:01:e0:57:37:6f:52:db:71:29:60:
64:1c:03:0a:f5:b5:1c:8d:06:21:c8:e2:ae:8e:8e:2e:8e:03:
1c:2d:5b:4f:1d:f8:47:5f:f7:e2:16:25:b2:6c:aa:70:30:3f:
b0:c7:fb:b7:55:23:95:86:31:9a:3a:ae:5f:15:f4:52:cd:e4:
5a:45:f2:7d:23:99:a2:7a:e3:8d:01:c3:88:6d:e7:3b:7e:60:
f3:aa:0c:75:14:39:0d:c1:03:14:63:bb:62:66:5c:95:d4:1c:
ce:fe:69:30:2c:e5:09:cb:95:f3:3f:17:cf:b9:ea:93:c3:c3:
cb:cd:23:5c:11:8c:ee:af:c2:a5:ab:af:06:2a:93:31:e6:e0:
66:43:1e:ef:4e:35:f4:0a:9d:a2:2d:55:e7:c2:2b:e8:3f:f5:
21:2f:70:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:46 2026 by rpki-client