Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
File: lUqTUetm2NhiTiDRafdmty9YrMA.mft (raw, json)
Hash identifier: O7Rf0ob9zSpNnJD3u16+OcciRSm+KIor4KIne+ZhOCU=
Subject key identifier: AC:8D:BE:09:16:81:BE:7A:3C:A0:13:8E:BD:26:96:6A:65:6F:20:25
Authority key identifier: 95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
Certificate issuer: /CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Certificate serial: 019D08547FABF6674650BFB75C0EF0E1443A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
Manifest number: 042E
Signing time: Thu 19 Mar 2026 23:00:48 +0000
Manifest this update: Thu 19 Mar 2026 23:00:48 +0000
Manifest next update: Fri 20 Mar 2026 23:00:48 +0000
Files and hashes: 1: Cqp-7RFmWIRhPlRItz8b7WniVM8.roa (hash: WN3y68b5/hiQoqHDZtfcy65p4h2IyPgin5+Be6vlaV0=)
2: lUqTUetm2NhiTiDRafdmty9YrMA.crl (hash: zOf2SNbPg97SbPRcKxn8LhowwZ16Kcovf4AW/2KV7cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:54:7f:ab:f6:67:46:50:bf:b7:5c:0e:f0:e1:44:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Validity
Not Before: Mar 19 23:00:48 2026 GMT
Not After : Mar 20 23:00:48 2026 GMT
Subject: CN=ac8dbe091681be7a3ca0138ebd26966a656f2025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:82:58:2c:09:15:0a:6f:5f:9d:02:97:e8:
6d:60:a9:c9:4b:57:3d:81:c2:eb:f4:d5:c8:1b:dd:
9e:ea:f0:06:84:83:7e:d6:08:5d:61:3e:3f:f3:9a:
33:01:25:42:63:8f:64:e1:0e:f5:80:0e:3a:1e:b9:
3c:5e:43:97:19:9c:ba:ba:e0:3f:af:72:d5:f8:23:
bd:9e:77:0d:5c:09:5e:57:b0:9a:95:15:3a:2b:d2:
89:b2:c9:37:64:00:6d:d9:98:2f:46:c2:ec:da:47:
df:b8:c3:f2:94:b2:c7:41:14:00:d8:13:15:da:ad:
36:9f:f0:78:51:1d:c8:3b:6c:6b:f3:fc:9d:12:fe:
45:db:f6:ca:73:da:51:7f:e0:3b:d3:9b:11:47:a8:
cf:4f:0d:08:63:07:3f:7c:1f:c0:d2:63:a2:cd:66:
02:04:c8:b1:96:38:ac:d0:12:c6:8f:2e:76:37:b9:
f7:07:8c:ba:9b:9c:06:2d:bc:2d:e2:87:0f:03:3c:
96:cf:79:f5:08:91:03:dd:93:72:11:d7:99:9a:ef:
19:52:c2:67:15:b8:92:7d:f3:49:35:0a:1a:36:7a:
43:f5:b3:7e:8d:67:27:15:6d:93:fe:e5:f2:72:f6:
a0:0f:78:93:3a:3d:97:61:6a:c4:52:19:2f:70:d3:
13:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8D:BE:09:16:81:BE:7A:3C:A0:13:8E:BD:26:96:6A:65:6F:20:25
X509v3 Authority Key Identifier:
keyid:95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8a:0b:dd:11:69:d3:5d:31:00:cb:ea:26:7f:4a:58:60:03:
d4:5d:1c:22:75:3a:3c:77:86:fb:04:a9:ab:3e:bc:b5:61:1b:
0e:29:59:a3:5a:44:32:73:92:b8:9d:aa:f0:69:d8:a6:81:4a:
c0:57:44:a5:65:c1:bf:bd:66:05:81:3c:07:bc:73:bb:49:1a:
e9:2d:55:bf:93:3d:d9:2d:62:5d:52:91:63:91:e0:61:8f:3f:
9e:d9:14:bd:2a:0f:2c:b3:2a:ba:9f:9f:2a:77:38:73:8d:5a:
c0:d2:7e:86:73:f2:cc:5f:5e:85:69:96:89:bb:87:2e:24:da:
37:8f:9e:3e:69:be:3f:75:bf:e0:82:d7:42:78:15:98:7f:5b:
b7:e5:f4:df:71:c3:b2:7d:73:84:74:49:e9:23:f1:74:d0:3f:
df:78:87:f6:73:0e:0e:bf:50:a7:53:88:45:15:1f:f9:a9:46:
79:6a:ed:42:96:c8:1d:ba:11:6d:b0:03:3b:74:97:06:66:93:
50:18:e4:f2:15:02:09:15:07:f0:48:8f:eb:1a:24:01:5f:f7:
e2:5d:4e:17:3c:61:41:8b:0f:a3:28:18:8d:12:5a:8b:ae:29:
88:18:da:2e:ff:b0:4c:fa:a4:d1:99:e1:10:44:90:43:10:fb:
dc:75:25:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 02:36:24 2026 by rpki-client