Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
File: lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft (raw, json)
Hash identifier: pE31ROBo6A1L8ahMdqRdUzXRuXpsvea25mB2z1pCXm4=
Subject key identifier: 8D:1B:BD:82:9E:82:E5:28:E9:F0:1F:0D:0B:60:9F:EE:18:E1:1F:4A
Authority key identifier: 95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA
Certificate issuer: /CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
Certificate serial: 019F118A5063C69146916F1DF1C52655C411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
Manifest number: 01A1
Signing time: Mon 29 Jun 2026 04:01:44 +0000
Manifest this update: Mon 29 Jun 2026 04:01:44 +0000
Manifest next update: Tue 30 Jun 2026 04:01:44 +0000
Files and hashes: 1: 59LkX4aXBLUMkLAwAs9-rWbuAm8.asa (hash: Z213VKCdnM5+8ee00xrFiP1MjFtseCc8292AQptoZLA=)
2: lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl (hash: 3nAGzEvC4WHEfKJoxuxAWZ5Lr2In1lPJ8ogdjz4xoYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:8a:50:63:c6:91:46:91:6f:1d:f1:c5:26:55:c4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
Validity
Not Before: Jun 29 04:01:44 2026 GMT
Not After : Jun 30 04:01:44 2026 GMT
Subject: CN=8d1bbd829e82e528e9f01f0d0b609fee18e11f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:da:0c:ab:a7:08:d6:e1:23:ac:ff:64:dd:15:
f3:47:e9:fc:4f:ad:08:a0:1f:70:55:10:d1:d9:b6:
17:70:6b:18:0a:7a:cc:0a:80:cb:76:d7:9c:77:92:
10:30:ee:9f:30:8c:54:24:d0:0d:8e:60:2c:30:9d:
9f:5f:e6:85:0e:b8:aa:fd:c4:ef:8a:a4:1c:7c:85:
f1:c1:11:26:86:61:cd:28:84:6b:5c:1f:a5:17:35:
7b:dc:8a:0f:cd:89:96:7d:83:6a:31:b6:67:f0:c7:
e1:67:f9:2e:53:2a:aa:fe:8b:81:5e:32:50:f4:fa:
55:f6:37:55:37:b7:d0:f3:0b:2f:c4:03:e5:d3:29:
eb:d0:3b:cd:37:73:e9:21:a4:07:2c:15:55:b4:8b:
a3:83:52:94:bd:ff:d0:94:b6:6c:35:80:f5:ac:90:
de:a6:89:76:c9:e4:bc:92:77:0d:db:de:25:3c:16:
b3:87:14:f0:e7:e1:d3:e8:b6:68:cc:a1:31:98:16:
aa:c4:b6:46:df:e6:0b:bb:70:af:cc:20:28:e4:3d:
e7:b0:94:f3:8a:41:57:24:5d:13:42:db:03:67:9a:
e9:a4:b5:42:b7:0c:de:a1:cd:c8:d4:c0:61:a5:5f:
fc:6a:cf:a9:27:4a:69:fc:a9:2e:b3:e4:4f:8f:0b:
66:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1B:BD:82:9E:82:E5:28:E9:F0:1F:0D:0B:60:9F:EE:18:E1:1F:4A
X509v3 Authority Key Identifier:
keyid:95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:80:0b:b5:3f:41:2a:5c:53:be:58:55:ac:aa:b6:af:8f:ea:
9f:3c:71:77:93:fd:9f:48:10:92:a9:9b:f2:85:ac:fb:4b:27:
11:20:a4:1b:46:92:db:00:84:7c:49:9e:55:6b:8e:97:0d:da:
72:55:b9:08:46:33:98:87:97:f1:d7:77:fc:ef:b0:43:f7:c5:
72:8f:c3:08:a6:10:fc:68:23:d9:cb:72:31:04:82:60:6a:10:
f4:21:55:00:dc:8f:11:28:da:cb:77:79:ff:80:ed:47:5e:44:
c0:17:21:84:9b:c4:17:8c:e9:98:90:3e:55:41:04:8f:f6:f4:
03:4c:d2:0c:3c:09:99:d3:c9:c5:56:f4:ec:d4:4f:f5:23:f9:
bd:f6:7d:8e:68:8c:5a:f1:a7:47:56:5e:30:c2:dd:c1:c8:a8:
8b:72:2f:0f:e7:61:45:e8:1b:ec:ef:52:9b:97:27:7e:1e:19:
5b:a2:bc:80:03:45:2d:68:5d:ad:ca:26:3c:1e:99:1f:2d:44:
be:2d:14:91:cd:92:ac:59:59:0c:5f:52:6f:4b:19:00:86:bb:
3e:6a:06:33:e2:8b:2a:6c:59:67:4b:4c:a9:94:1b:7a:b3:98:
ee:10:b6:bf:a7:6e:6f:ad:f0:e4:35:22:0a:09:2a:b6:10:4a:
6e:b6:cf:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:40:53 2026 by rpki-client