Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
File: lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft (raw, json)
Hash identifier: gF4B0wpro/HU3XX1tAD5XjFnTNCkPX3u3izrh4f4vaA=
Subject key identifier: 06:93:A7:0B:A0:6C:A5:A5:C3:78:E1:F6:DF:A4:8E:96:98:91:A6:BD
Authority key identifier: 95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA
Certificate issuer: /CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
Certificate serial: 019D38659C99596D1EF3AA090D359CD68DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
Manifest number: AC
Signing time: Sun 29 Mar 2026 07:01:16 +0000
Manifest this update: Sun 29 Mar 2026 07:01:16 +0000
Manifest next update: Mon 30 Mar 2026 07:01:16 +0000
Files and hashes: 1: 59LkX4aXBLUMkLAwAs9-rWbuAm8.asa (hash: Z213VKCdnM5+8ee00xrFiP1MjFtseCc8292AQptoZLA=)
2: lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl (hash: UpBAXwXBaAx4Aluc4xGXh96cwa+eaRi0bNF8Y2RjMYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:9c:99:59:6d:1e:f3:aa:09:0d:35:9c:d6:8d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
Validity
Not Before: Mar 29 07:01:16 2026 GMT
Not After : Mar 30 07:01:16 2026 GMT
Subject: CN=0693a70ba06ca5a5c378e1f6dfa48e969891a6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:ff:94:ac:94:69:e9:b7:3a:64:50:3d:33:
ce:b0:ac:44:9a:dd:2c:98:0e:9c:81:11:a0:e9:de:
5f:30:11:72:1f:b6:2e:cc:6f:a6:33:bb:15:c8:39:
2c:a4:67:0e:d5:3e:2d:3c:86:ca:ad:29:6f:d5:25:
88:f0:18:e2:f0:19:df:49:e0:c1:8a:4f:cb:a7:aa:
53:65:06:5e:bd:6a:ac:4e:da:6c:4e:9e:54:fe:07:
65:12:a5:79:fc:6f:74:96:d8:a5:72:24:de:2e:9f:
08:a9:21:f0:85:2b:21:40:6c:ff:dd:2a:2d:da:f5:
49:35:35:44:cd:9e:90:8b:eb:be:e1:3a:e0:f8:99:
19:89:e9:7c:cb:9a:28:de:fb:14:d9:91:2c:60:e1:
d6:d3:c0:37:61:e5:de:69:73:54:38:d8:2f:24:36:
b3:fe:c6:99:d4:eb:83:b2:ad:95:4f:ff:60:dc:2e:
70:61:10:b9:4f:e8:ae:3c:8c:c9:44:0f:17:9c:b9:
d1:99:80:de:98:9b:17:b7:e5:6a:d3:7c:6f:2a:fb:
9e:93:bf:a6:db:ae:b7:4a:c6:e8:c6:c1:1c:0b:17:
1c:db:7d:3b:1e:53:ac:6c:87:df:0f:63:ef:ec:84:
37:25:4f:3e:f1:07:eb:df:c0:ae:a3:e3:8b:5b:54:
f8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:93:A7:0B:A0:6C:A5:A5:C3:78:E1:F6:DF:A4:8E:96:98:91:A6:BD
X509v3 Authority Key Identifier:
keyid:95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:18:5d:09:b3:0a:6a:d1:c5:20:d3:da:88:29:c7:5c:eb:bc:
a5:09:1e:bc:26:0b:bf:94:a0:0f:89:18:c2:7e:87:f5:fd:fb:
db:7e:f1:65:83:89:d2:9a:4b:3c:8d:d0:db:19:04:dc:39:07:
6d:88:ad:65:a5:7c:4f:07:b4:e8:52:2e:52:a0:32:dd:60:d7:
83:f5:dc:2f:52:40:c4:66:db:a7:91:d9:21:99:5e:61:f9:ee:
f0:d1:d6:61:13:07:7a:ac:74:9b:de:26:e9:9d:c7:b2:8b:2c:
18:83:53:16:ca:72:4f:37:0d:d0:3c:5b:36:0d:f5:b0:0e:37:
84:dd:c3:91:e2:f7:9c:45:fe:13:d9:d6:d7:03:9f:93:0f:18:
c4:5a:e5:5a:3f:4e:58:c1:ff:d9:63:3f:e9:be:03:c4:01:3d:
a8:50:17:98:37:54:fd:ed:88:45:b1:ea:87:90:03:f4:ea:83:
e0:5e:0a:ce:93:d0:0a:0c:24:d4:f3:9c:6f:eb:e8:e0:d7:21:
92:9d:30:da:c7:eb:1d:51:db:1e:ce:a6:ba:79:9a:ff:71:ec:
ba:87:a7:07:88:18:ae:26:49:81:7c:a7:ce:2b:be:0b:46:e4:
ce:c7:f6:24:31:a2:f2:77:47:29:f5:a2:d1:20:81:f3:96:f7:
33:54:46:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:28 2026 by rpki-client