Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
File: lUqTUetm2NhiTiDRafdmty9YrMA.mft (raw, json)
Hash identifier: xt+K2/R+QB6Nd7T6KOV746pObElKlGpBTQwr7PqFk/E=
Subject key identifier: 15:2F:C5:09:57:78:58:E2:09:B6:AD:01:2C:2D:EA:01:D6:BC:88:8C
Authority key identifier: 95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
Certificate issuer: /CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Certificate serial: 019EF8A53A8CA7DB0CFA13D94C58BBAE2BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
Manifest number: 052F
Signing time: Wed 24 Jun 2026 08:00:38 +0000
Manifest this update: Wed 24 Jun 2026 08:00:38 +0000
Manifest next update: Thu 25 Jun 2026 08:00:38 +0000
Files and hashes: 1: Cqp-7RFmWIRhPlRItz8b7WniVM8.roa (hash: WN3y68b5/hiQoqHDZtfcy65p4h2IyPgin5+Be6vlaV0=)
2: lUqTUetm2NhiTiDRafdmty9YrMA.crl (hash: 9QxdStcr8H7uA9TtsBVLU2VHmy9r1wayrgIgL5ClnqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:a5:3a:8c:a7:db:0c:fa:13:d9:4c:58:bb:ae:2b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Validity
Not Before: Jun 24 08:00:38 2026 GMT
Not After : Jun 25 08:00:38 2026 GMT
Subject: CN=152fc509577858e209b6ad012c2dea01d6bc888c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:30:bb:4c:6f:03:bb:c3:8c:3d:6d:11:78:8d:
ff:56:47:e1:fd:12:42:47:af:14:a8:94:b4:c3:f8:
87:32:e3:f6:27:15:79:b0:5a:8b:7c:b7:3b:a4:4e:
b7:db:5c:9c:f9:7d:62:08:62:9c:50:fa:f5:87:5e:
2d:2f:3d:e5:e7:62:90:ec:36:b9:50:79:a2:34:de:
db:26:fb:8e:c3:07:84:0f:40:b1:7d:a0:cb:af:c1:
1c:cd:d7:0f:10:84:6f:eb:9c:0e:94:f0:a5:05:89:
f6:87:52:6e:14:a7:14:2c:84:18:c0:73:8c:fb:e8:
57:02:78:df:cd:c1:aa:e6:bc:2a:38:cb:1c:af:63:
a1:47:04:ea:a9:59:3f:4e:02:d4:62:2f:15:e4:e1:
b1:e2:2e:c0:dc:d3:d3:1d:24:04:ce:ab:17:00:7a:
30:05:64:ee:af:a6:6b:33:dd:3f:4f:ce:90:95:63:
98:35:34:72:9d:c9:cf:d4:bd:7f:7d:e7:f3:e2:dd:
8b:c9:0e:18:af:ec:3d:5f:1e:e3:a1:c9:dc:09:d7:
0a:31:10:38:c6:57:f6:17:2c:4d:3e:ce:d3:8f:10:
1c:58:f8:9b:5f:6a:c2:a0:2e:0b:dd:c7:bc:de:ce:
42:11:2c:95:0d:97:50:32:ae:c4:8e:cb:8a:10:45:
4f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2F:C5:09:57:78:58:E2:09:B6:AD:01:2C:2D:EA:01:D6:BC:88:8C
X509v3 Authority Key Identifier:
keyid:95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2e:63:b8:99:02:ff:c4:2f:9c:5a:30:d3:be:81:4a:51:ca:
81:87:16:69:b1:d1:a5:4b:22:e9:b8:74:4e:7f:c2:b4:4a:23:
60:31:62:29:90:b7:18:fc:ef:54:27:bf:7d:60:09:2e:73:93:
d8:f0:8b:d6:79:1e:69:f8:f0:da:a7:82:7d:37:4c:90:16:56:
cd:96:3b:fa:30:38:2c:22:71:a4:0f:83:52:46:07:9d:b0:a8:
de:33:98:db:99:89:62:de:5c:a2:dd:e6:6a:7b:26:78:c2:20:
b9:c3:4f:b7:05:80:f1:a3:e5:cf:04:05:bb:78:2f:c1:5a:19:
54:69:9e:48:99:2d:65:33:53:db:cf:ee:cf:b2:35:ba:85:ba:
29:e8:9b:29:e9:97:ce:29:1f:65:a6:88:3d:af:dc:60:3a:0e:
69:fa:00:d8:01:b6:67:dc:15:69:8d:e3:bf:c1:cd:d0:8c:78:
12:44:ae:45:74:d6:9b:ee:93:d3:bd:da:fd:5d:69:81:8d:8f:
a5:cb:43:e7:1d:b0:52:75:93:0b:6c:47:59:11:d8:cc:23:38:
02:6a:80:cd:73:3d:a6:74:5f:2a:fe:36:50:f5:03:15:82:04:
26:0d:53:df:27:1d:86:ea:ce:58:36:6a:c9:b2:76:e7:d9:3b:
2f:c8:b6:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ74pTqMp9sM+hPZTFi7rivOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NGE5MzUxZWI2NmQ4ZDg2MjRlMjBkMTY5Zjc2NmI3MmY1
OGFjYzAwHhcNMjYwNjI0MDgwMDM4WhcNMjYwNjI1MDgwMDM4WjAzMTEwLwYDVQQD
EygxNTJmYzUwOTU3Nzg1OGUyMDliNmFkMDEyYzJkZWEwMWQ2YmM4ODhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/DC7TG8Du8OMPW0ReI3/Vkfh/RJC
R68UqJS0w/iHMuP2JxV5sFqLfLc7pE6321yc+X1iCGKcUPr1h14tLz3l52KQ7Da5
UHmiNN7bJvuOwweED0CxfaDLr8EczdcPEIRv65wOlPClBYn2h1JuFKcULIQYwHOM
++hXAnjfzcGq5rwqOMscr2OhRwTqqVk/TgLUYi8V5OGx4i7A3NPTHSQEzqsXAHow
BWTur6ZrM90/T86QlWOYNTRyncnP1L1/fefz4t2LyQ4Yr+w9Xx7jocncCdcKMRA4
xlf2FyxNPs7TjxAcWPibX2rCoC4L3ce83s5CESyVDZdQMq7EjsuKEEVPywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUvxQlXeFjiCbatASwt6gHWvIiMMB8GA1UdIwQY
MBaAFJVKk1HrZtjYYk4g0Wn3ZrcvWKzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFVxVFVldG0yTmhpVGlEUmFmZG10eTlZck1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jZjY4M2UtNmFiZC00ZjVkLTk5NDMt
MDJmM2RkYmExOTQyLzEvbFVxVFVldG0yTmhpVGlEUmFmZG10eTlZck1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9jZjY4M2UtNmFiZC00ZjVkLTk5NDMtMDJmM2RkYmExOTQy
LzEvbFVxVFVldG0yTmhpVGlEUmFmZG10eTlZck1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhS5juJkC
/8QvnFow076BSlHKgYcWabHRpUsi6bh0Tn/CtEojYDFiKZC3GPzvVCe/fWAJLnOT
2PCL1nkeafjw2qeCfTdMkBZWzZY7+jA4LCJxpA+DUkYHnbCo3jOY25mJYt5cot3m
ansmeMIgucNPtwWA8aPlzwQFu3gvwVoZVGmeSJktZTNT28/uz7I1uoW6KeibKemX
zikfZaaIPa/cYDoOafoA2AG2Z9wVaY3jv8HN0Ix4EkSuRXTWm+6T073a/V1pgY2P
pctD5x2wUnWTC2xHWRHYzCM4AmqAzXM9pnRfKv42UPUDFYIEJg1T3ycdhurOWDZq
ybJ259k7L8i22g==
-----END CERTIFICATE-----
Generated at Wed Jun 24 12:04:18 2026 by rpki-client