Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
File: lUqTUetm2NhiTiDRafdmty9YrMA.mft (raw, json)
Hash identifier: U9nx1cWHuG6r44W7iVuIrQjLJoXnKINrvlqIil731qQ=
Subject key identifier: 16:D3:71:9E:17:9D:BC:5B:DA:19:F0:14:31:9B:1C:4B:C0:C4:38:40
Authority key identifier: 95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
Certificate issuer: /CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Certificate serial: 019DFF85C503707B17FC35305681C87C1983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
Manifest number: 04AE
Signing time: Wed 06 May 2026 23:00:49 +0000
Manifest this update: Wed 06 May 2026 23:00:49 +0000
Manifest next update: Thu 07 May 2026 23:00:49 +0000
Files and hashes: 1: Cqp-7RFmWIRhPlRItz8b7WniVM8.roa (hash: WN3y68b5/hiQoqHDZtfcy65p4h2IyPgin5+Be6vlaV0=)
2: lUqTUetm2NhiTiDRafdmty9YrMA.crl (hash: D+i+mrLUj2SgVaz4phFlG/VmWeI45/w/L3XYYzVuqIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ff:85:c5:03:70:7b:17:fc:35:30:56:81:c8:7c:19:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Validity
Not Before: May 6 23:00:49 2026 GMT
Not After : May 7 23:00:49 2026 GMT
Subject: CN=16d3719e179dbc5bda19f014319b1c4bc0c43840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1a:99:4a:59:e3:1e:40:d2:0c:b0:bb:fc:63:
7b:7c:d1:43:4a:45:c8:09:87:13:7a:d4:b9:fc:6b:
59:04:ac:d9:80:c1:13:90:27:06:fe:e0:43:50:10:
81:75:3b:78:2b:df:ed:63:3c:c8:ba:20:1f:95:fb:
75:3a:5e:49:00:cf:bf:74:67:58:59:60:34:d9:e6:
90:42:2b:23:31:37:95:1c:50:6c:32:69:68:06:88:
0a:0b:86:78:44:eb:26:97:2b:a4:b1:03:ef:a9:72:
9e:50:11:3d:6a:ba:68:de:2b:11:11:97:3b:c1:11:
2c:6c:84:2d:fe:ef:8f:78:cc:1e:82:63:a3:89:f2:
5f:8b:e9:f8:11:53:bd:61:2c:0d:66:ad:31:26:5c:
1b:52:0f:a5:2e:80:86:dc:ce:a9:1b:b7:b9:cd:a8:
d0:e5:3b:82:84:8a:bd:a2:79:9f:26:5d:28:e4:57:
ce:f9:01:23:3a:a6:47:af:62:40:91:4e:86:d4:85:
52:18:ef:0a:74:ce:05:e4:82:f5:f5:df:ea:17:bd:
f6:23:d3:1b:9e:e3:d9:4f:81:99:a0:58:92:cd:c9:
ad:46:6e:66:49:8a:15:f8:00:3b:83:04:61:46:43:
d6:0a:27:92:37:6d:01:68:fe:79:d4:5e:1e:93:93:
01:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D3:71:9E:17:9D:BC:5B:DA:19:F0:14:31:9B:1C:4B:C0:C4:38:40
X509v3 Authority Key Identifier:
keyid:95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b0:72:cc:76:76:7f:33:03:7a:d4:34:51:05:79:60:e5:08:
7a:8c:1c:83:4b:49:3a:88:de:f6:40:e8:74:94:1a:8b:24:cf:
24:4b:c5:a5:aa:bb:72:e2:a9:de:6a:45:7f:f6:46:18:af:0c:
0b:18:8d:b2:10:ae:fd:78:64:af:af:7a:82:fb:31:15:63:54:
43:26:7a:29:e2:93:a2:52:e1:87:71:22:b8:84:8f:6f:7f:2b:
22:5a:2c:6b:60:95:7d:47:1b:2d:ab:c9:1b:15:6a:46:74:a7:
c9:80:33:d0:49:13:4f:72:12:10:3c:f3:31:47:75:ab:12:5e:
ca:1c:33:0f:a9:f8:b8:99:77:09:16:16:0d:24:39:d8:32:b7:
d7:d7:ad:e7:8b:3d:be:51:a3:20:89:64:6d:e5:ba:09:8d:cf:
88:69:38:a6:fa:bc:d4:bc:62:ae:35:53:cd:95:7c:c7:b2:a7:
8e:b5:3f:cd:48:9c:5d:e0:a2:6a:49:4f:58:73:da:30:01:a1:
25:b6:3b:4b:39:10:5d:d8:ee:61:60:14:73:4c:d7:20:49:dc:
d6:e8:68:87:b4:b7:45:10:ee:9d:d6:01:03:a4:7a:22:4f:65:
0e:ef:77:6e:74:fe:4d:a1:9e:0e:4b:72:24:ef:2e:17:55:e7:
69:6b:a7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 06:30:47 2026 by rpki-client