Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
File: lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft (raw, json)
Hash identifier: ocf2vIOg1aaDAxiDRPf8MNL96dTlYsAP2/BIKbiUKNw=
Subject key identifier: 61:F7:25:73:D9:19:4D:B4:96:70:46:7D:D4:3A:EB:17:F9:46:4E:70
Authority key identifier: 95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA
Certificate issuer: /CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
Certificate serial: 01A03AF08EC65C9CB28DF79D12375728DF5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
Manifest number: 023B
Signing time: Tue 25 Aug 2026 22:00:38 +0000
Manifest this update: Tue 25 Aug 2026 22:00:38 +0000
Manifest next update: Wed 26 Aug 2026 22:00:38 +0000
Files and hashes: 1: 59LkX4aXBLUMkLAwAs9-rWbuAm8.asa (hash: Z213VKCdnM5+8ee00xrFiP1MjFtseCc8292AQptoZLA=)
2: lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl (hash: aCZCBwI3vaDVjGw1XeqJk2zN1aD7XnpSqD42TDPwL4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:f0:8e:c6:5c:9c:b2:8d:f7:9d:12:37:57:28:df:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
Validity
Not Before: Aug 25 22:00:38 2026 GMT
Not After : Aug 26 22:00:38 2026 GMT
Subject: CN=61f72573d9194db49670467dd43aeb17f9464e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b8:e8:dd:46:3c:c6:52:0e:5c:80:a5:c5:16:
ab:90:8f:42:59:06:60:61:f8:1c:10:7f:41:e9:53:
a3:0a:0d:ec:8f:27:58:fd:26:50:c1:94:3d:03:40:
31:ab:e5:f5:ab:aa:1a:94:25:fd:d2:e1:35:cc:ce:
e5:8b:83:39:d1:2e:1e:6e:96:69:24:73:13:4a:d9:
4a:a2:cf:56:53:97:68:3c:0e:6a:ad:60:4c:91:f5:
d9:00:e9:56:be:45:e2:42:59:34:ea:0a:46:a5:a3:
8c:2c:f2:cd:ee:f4:29:e6:2d:c4:53:91:41:56:17:
ad:a7:65:da:bb:89:56:1c:8c:32:7a:b3:0a:e5:44:
01:34:92:26:f1:e0:58:9f:39:ce:8d:57:51:8f:3a:
86:a1:c5:b5:45:0e:4c:d0:88:46:f7:df:be:f6:a3:
1c:c7:ce:d7:3d:da:22:df:38:aa:d5:7f:b7:a6:ba:
19:0d:dc:cc:f3:b3:da:63:60:41:7a:98:62:a8:e5:
0e:d3:57:5e:74:11:7c:ca:e5:66:7c:e1:3e:81:6c:
aa:de:f6:76:61:f7:77:df:e6:1e:06:8a:a3:27:d6:
0e:c5:2f:12:4d:58:2e:31:b8:dd:46:a1:9a:09:05:
6e:75:d4:e1:0f:0c:2a:a0:df:ca:22:d7:03:07:6a:
9e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F7:25:73:D9:19:4D:B4:96:70:46:7D:D4:3A:EB:17:F9:46:4E:70
X509v3 Authority Key Identifier:
keyid:95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:db:99:9c:f9:ba:ab:1e:fc:ff:0b:0a:13:e3:72:4e:1b:bd:
cb:fe:c7:b8:1f:6f:8f:43:08:28:7e:3b:16:c1:08:6e:f0:bb:
1b:d5:a7:b4:8b:38:73:74:89:20:60:81:6d:c9:fa:ef:4c:12:
70:7a:05:4f:53:88:95:a4:6d:f6:ca:30:89:0d:b6:01:a9:ee:
b3:be:2b:29:4f:1c:7b:a5:c5:71:99:a0:3a:c2:9c:b7:59:cf:
6f:4c:10:15:6d:57:f1:3d:63:6c:02:38:cb:c0:a5:db:14:45:
59:09:e2:c5:07:ab:30:0f:16:e5:15:8d:50:2d:b3:c6:5f:7e:
2b:f8:3e:65:bd:d2:b1:38:77:dd:07:9a:75:4e:3c:90:2b:a8:
a4:fa:34:3b:8b:80:a3:63:8e:ff:87:a3:03:75:93:84:da:37:
1c:94:f3:b8:30:b9:14:c8:08:50:bd:8f:b6:d4:8d:fa:c5:fb:
89:af:17:bb:75:ec:07:45:0c:55:2c:02:70:67:4a:8c:85:87:
00:3b:f6:b5:dc:56:7c:c1:77:16:de:c4:69:be:6a:d6:91:59:
20:8d:52:ff:63:1e:84:aa:86:77:dc:71:3b:17:e6:b5:9c:ef:
6d:42:b7:00:9d:25:13:68:4c:b0:c2:65:0e:c8:d3:85:16:61:
db:ab:28:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA68I7GXJyyjfedEjdXKN9bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NGZjNGQ4ZGE1NzY1ZjA2ZDdjMjRlZTI3ZGFjMGFmMzQz
MWVkZmEwHhcNMjYwODI1MjIwMDM4WhcNMjYwODI2MjIwMDM4WjAzMTEwLwYDVQQD
Eyg2MWY3MjU3M2Q5MTk0ZGI0OTY3MDQ2N2RkNDNhZWIxN2Y5NDY0ZTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbjo3UY8xlIOXIClxRarkI9CWQZg
YfgcEH9B6VOjCg3sjydY/SZQwZQ9A0Axq+X1q6oalCX90uE1zM7li4M50S4ebpZp
JHMTStlKos9WU5doPA5qrWBMkfXZAOlWvkXiQlk06gpGpaOMLPLN7vQp5i3EU5FB
Vhetp2Xau4lWHIwyerMK5UQBNJIm8eBYnznOjVdRjzqGocW1RQ5M0IhG99++9qMc
x87XPdoi3ziq1X+3proZDdzM87PaY2BBephiqOUO01dedBF8yuVmfOE+gWyq3vZ2
Yfd33+YeBoqjJ9YOxS8STVguMbjdRqGaCQVuddThDwwqoN/KItcDB2qeEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGH3JXPZGU20lnBGfdQ66xf5Rk5wMB8GA1UdIwQY
MBaAFJVPxNjaV2XwbXwk7ifawK80Me36MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFVfRTJOcFhaZkJ0ZkNUdUo5ckFyelF4N2ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yMWNlMDUtOWNjMi00NDUxLWJkMTkt
MDQwODQ0ZmE0MjM4LzEvbFVfRTJOcFhaZkJ0ZkNUdUo5ckFyelF4N2ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8yMWNlMDUtOWNjMi00NDUxLWJkMTktMDQwODQ0ZmE0MjM4
LzEvbFVfRTJOcFhaZkJ0ZkNUdUo5ckFyelF4N2ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNuZnPm6
qx78/wsKE+NyThu9y/7HuB9vj0MIKH47FsEIbvC7G9WntIs4c3SJIGCBbcn670wS
cHoFT1OIlaRt9sowiQ22Aanus74rKU8ce6XFcZmgOsKct1nPb0wQFW1X8T1jbAI4
y8Cl2xRFWQnixQerMA8W5RWNUC2zxl9+K/g+Zb3SsTh33QeadU48kCuopPo0O4uA
o2OO/4ejA3WThNo3HJTzuDC5FMgIUL2PttSN+sX7ia8Xu3XsB0UMVSwCcGdKjIWH
ADv2tdxWfMF3Ft7Eab5q1pFZII1S/2MehKqGd9xxOxfmtZzvbUK3AJ0lE2hMsMJl
DsjThRZh26soZQ==
-----END CERTIFICATE-----
Generated at Tue Aug 25 23:41:20 2026 by rpki-client