Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
File: lUqTUetm2NhiTiDRafdmty9YrMA.mft (raw, json)
Hash identifier: WXWHk13bWZVUFyuwZ4kbt5LR3MVbbY5ob/M+sSHJUtk=
Subject key identifier: E3:C7:A9:13:80:91:72:11:4B:F9:40:E7:3B:97:78:35:71:AF:C5:AA
Authority key identifier: 95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
Certificate issuer: /CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Certificate serial: 019FF97EF90DF1BFA6B50A123106033BAFD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
Manifest number: 05B4
Signing time: Thu 13 Aug 2026 05:01:15 +0000
Manifest this update: Thu 13 Aug 2026 05:01:15 +0000
Manifest next update: Fri 14 Aug 2026 05:01:15 +0000
Files and hashes: 1: Cqp-7RFmWIRhPlRItz8b7WniVM8.roa (hash: WN3y68b5/hiQoqHDZtfcy65p4h2IyPgin5+Be6vlaV0=)
2: lUqTUetm2NhiTiDRafdmty9YrMA.crl (hash: cxMbAP6N9cVU0tpZVP1eWpsShP0KQljXEUccYikzCv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:7e:f9:0d:f1:bf:a6:b5:0a:12:31:06:03:3b:af:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Validity
Not Before: Aug 13 05:01:15 2026 GMT
Not After : Aug 14 05:01:15 2026 GMT
Subject: CN=e3c7a913809172114bf940e73b97783571afc5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b0:c0:49:81:f3:a1:dc:fd:77:be:d6:8e:ed:
cc:30:5d:84:6b:17:67:c8:e1:31:68:db:64:c2:53:
fd:60:f0:14:71:ab:34:42:ee:8a:c6:90:6d:eb:20:
95:41:7f:14:c0:32:b4:a8:a2:1a:12:85:b2:8b:c1:
a7:0a:69:c6:a5:bf:66:58:40:c3:78:5c:6a:80:a1:
06:d0:9c:1c:04:1c:d7:06:09:33:af:54:96:bd:1c:
3f:38:24:66:bb:ce:a4:e7:5c:79:5d:22:d3:a0:1b:
0c:76:8c:c2:06:69:e9:c7:45:83:da:b0:a8:a9:b7:
30:3b:e8:09:1c:ee:bc:d6:92:90:ce:fb:5a:87:c9:
20:38:2a:1c:d0:c8:ce:22:79:db:1d:d0:53:9e:34:
dd:88:86:59:a5:aa:58:db:4f:4c:97:92:50:d8:9d:
46:f1:0a:9e:b1:b1:4a:ef:fc:cc:09:cf:de:d5:f8:
ff:32:9a:27:c2:a1:ca:ed:c4:b6:d1:2f:0c:62:a0:
3f:12:e0:35:41:d3:86:50:b3:9a:ad:06:8c:57:3b:
ac:71:0b:64:52:68:7f:e0:d9:e2:b3:7b:e2:03:db:
4b:0d:3e:c5:ea:ff:f0:6e:f9:ff:4b:3e:d7:12:58:
96:30:af:b3:bc:b2:41:cb:60:71:66:eb:5d:9d:25:
53:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C7:A9:13:80:91:72:11:4B:F9:40:E7:3B:97:78:35:71:AF:C5:AA
X509v3 Authority Key Identifier:
keyid:95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:54:d5:2e:6f:66:b4:d8:08:dd:28:df:12:cf:22:f7:77:8f:
b7:ba:f2:53:e8:3a:1c:d2:b3:04:de:61:0b:7b:ff:95:f9:10:
53:d5:35:d0:2f:46:75:83:ee:76:3f:ce:e0:07:31:2b:4f:c7:
8b:de:fc:07:19:48:b2:12:15:57:ab:bc:d4:1d:a1:2d:f7:a7:
fa:83:54:f6:a4:99:c8:9f:03:3d:b3:02:38:3c:5b:ae:96:bb:
74:11:49:2b:85:63:d7:d6:9b:2a:0a:01:e8:c2:6c:a9:56:a6:
de:3f:91:e3:bd:a4:9e:bb:dc:a2:f9:c3:31:9a:b7:98:01:6b:
7f:54:6c:6c:ab:cb:96:5d:f7:40:e5:77:80:05:3e:63:32:38:
3c:e9:23:27:9e:a0:10:a4:77:16:2c:ae:30:ae:91:09:1a:23:
30:f6:68:88:6a:36:30:0b:69:9a:79:80:f4:c2:e6:43:5a:b8:
be:2d:e4:30:b1:9c:12:df:1c:81:66:dc:c5:63:37:82:15:8f:
fb:76:fa:a8:31:55:67:d3:d5:db:64:52:71:e2:69:a7:54:cf:
e4:6d:76:93:e7:69:97:24:a8:07:ea:f0:8f:b2:2b:6e:e0:14:
ba:fb:71:12:93:58:ee:8a:bf:2f:1e:0b:42:83:e5:8d:e5:33:
f6:f7:1f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:01:18 2026 by rpki-client