Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
File: lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft (raw, json)
Hash identifier: C7FjC7iVco8sjliQ++oxr25/y8AYJHp765Ls3nOGorc=
Subject key identifier: 7D:29:72:A7:BC:D3:8D:22:0A:C3:DA:F0:DB:87:0C:DF:42:B6:E4:70
Authority key identifier: 95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA
Certificate issuer: /CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
Certificate serial: 019E29CC439141FF559FDC62535EC8855F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
Manifest number: 0129
Signing time: Fri 15 May 2026 04:01:52 +0000
Manifest this update: Fri 15 May 2026 04:01:52 +0000
Manifest next update: Sat 16 May 2026 04:01:52 +0000
Files and hashes: 1: 59LkX4aXBLUMkLAwAs9-rWbuAm8.asa (hash: Z213VKCdnM5+8ee00xrFiP1MjFtseCc8292AQptoZLA=)
2: lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl (hash: zMSGwyDHmAg+TqW+39Ws94WWyqlDbAeCyiblmpLLjmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:cc:43:91:41:ff:55:9f:dc:62:53:5e:c8:85:5f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
Validity
Not Before: May 15 04:01:52 2026 GMT
Not After : May 16 04:01:52 2026 GMT
Subject: CN=7d2972a7bcd38d220ac3daf0db870cdf42b6e470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f5:55:24:db:50:bd:5a:61:a3:39:75:f0:87:
0d:62:b6:a4:f5:52:3d:fb:64:40:fc:6f:a1:da:b0:
9c:31:5c:16:00:46:df:9c:6e:4e:dc:4a:cf:ed:8f:
9e:5e:28:0c:3c:1b:8a:68:87:10:ed:79:fb:48:84:
09:8f:cf:f8:02:41:9a:4e:cd:58:fc:39:50:ee:95:
26:e7:8d:8c:c5:89:bb:44:40:07:90:44:36:7f:bf:
8b:0a:cc:51:77:d0:27:f0:0d:2a:b5:62:16:16:7a:
ea:60:b5:35:28:8f:03:25:d5:eb:94:82:e7:8f:58:
de:6e:dc:c6:6e:dd:e7:55:9d:9d:61:5e:ea:16:1a:
5c:11:d6:29:c7:76:56:8c:15:3a:0f:20:d3:64:30:
a2:f7:8c:a2:b8:b1:83:38:5f:9f:e5:dc:9a:96:bd:
ee:3e:2d:a5:96:57:e0:1e:7d:37:d5:13:81:5f:6c:
34:ce:64:e5:af:cb:80:95:44:d0:7d:ef:62:20:a2:
30:8e:99:05:9b:7a:5a:1a:98:42:7b:a1:d0:24:22:
48:52:35:4d:b0:12:fe:ed:23:75:00:70:95:61:50:
b8:6f:08:df:c0:dd:5b:cd:c1:89:ad:67:2a:29:cd:
de:b6:a2:6a:16:1c:4a:d7:ef:dc:c5:9c:49:db:4c:
e7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:29:72:A7:BC:D3:8D:22:0A:C3:DA:F0:DB:87:0C:DF:42:B6:E4:70
X509v3 Authority Key Identifier:
keyid:95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1f:af:e9:24:a5:17:ae:5e:97:5f:2e:07:94:31:80:64:ec:
10:1e:85:c5:83:8e:d9:3f:59:c5:60:2d:0e:59:9c:9b:f7:1b:
92:54:67:44:09:21:6c:69:18:d8:70:69:2e:d2:b7:7b:de:a1:
2a:e3:f7:f7:6f:cb:11:ed:e3:02:da:fa:cf:76:fa:8d:33:39:
b0:76:12:22:a1:45:c4:93:30:bf:f4:03:96:ac:92:5b:e6:32:
1c:57:47:86:83:c3:f3:f1:e2:bf:13:d5:87:2a:a4:6f:c6:0e:
45:f0:29:5c:7e:d4:9d:ab:3a:33:f4:95:fd:ec:f0:f1:cb:15:
a6:b0:3b:71:96:a6:92:8e:68:85:40:98:cd:71:97:cb:16:a6:
14:bf:9b:08:72:c6:28:89:aa:ea:03:28:25:c4:e2:d0:70:e2:
ea:a3:1f:d2:5d:cd:1a:16:ae:6c:1a:44:ef:5d:05:60:34:bb:
60:a1:c3:91:4f:1d:22:20:b2:2d:59:45:9a:47:54:c5:48:fe:
7d:65:79:d5:13:ed:9c:af:26:36:79:3d:93:1c:8e:2d:ae:93:
80:c1:9c:69:27:33:8d:ea:fa:24:45:f0:84:2a:78:de:da:a7:
2f:07:55:27:db:5d:0c:63:46:33:a0:99:8a:01:61:cb:26:b0:
32:ae:fd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:15 2026 by rpki-client