Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
File: lRUfu3HkGy0QY9OxEUGtoahEx_c.mft (raw, json)
Hash identifier: HQjVD1Dp249Y779WTKEHtXB1Fnl6qoBJtjwqCgNMylY=
Subject key identifier: 2D:9D:1F:2F:93:EC:F7:3D:5D:5D:12:F2:1B:EF:AF:4C:82:98:62:20
Authority key identifier: 95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
Certificate issuer: /CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Certificate serial: 01A00394B5319A9F3AA0158D922F4B8C214E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
Manifest number: 1678
Signing time: Sat 15 Aug 2026 04:01:12 +0000
Manifest this update: Sat 15 Aug 2026 04:01:12 +0000
Manifest next update: Sun 16 Aug 2026 04:01:12 +0000
Files and hashes: 1: 43DpV7xrZKIPgR3LXQiPDkxuS6g.roa (hash: Pz+pBSh7qLUtOCsg2X6KXkUs5v6TAPEm46EKWek5QPQ=)
2: KXQ6A3de6ngkk1WG9cHu1Wh6z8U.asa (hash: 5ZyKxUcShckFXuyMs3UQFf3JSdmvQECqj6DhdV60Ytw=)
3: lRUfu3HkGy0QY9OxEUGtoahEx_c.crl (hash: jTmhMwsm9ljZ9aMnWF/X3Wtlsd/eH2F30rRB77GvwHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:94:b5:31:9a:9f:3a:a0:15:8d:92:2f:4b:8c:21:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Validity
Not Before: Aug 15 04:01:12 2026 GMT
Not After : Aug 16 04:01:12 2026 GMT
Subject: CN=2d9d1f2f93ecf73d5d5d12f21befaf4c82986220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:88:8b:72:fa:69:8f:33:6b:ee:68:07:51:
c6:09:3f:20:7d:a2:c8:7e:c6:3c:97:56:d6:88:b4:
0c:c3:44:44:2c:bf:44:0d:1a:d4:a2:bc:ea:29:e6:
c6:36:78:49:18:da:44:3d:f2:af:be:66:90:02:8d:
f4:f0:29:f7:96:84:f0:23:f8:11:6e:a2:fb:fb:da:
b6:b8:0b:31:45:78:77:e9:00:51:5d:fe:3c:4a:93:
3b:e0:83:d7:f5:81:6d:8d:f3:7a:04:38:5c:43:9f:
c8:67:31:54:0f:62:49:d9:26:85:a3:6c:bb:19:6f:
91:fd:69:8f:01:26:75:7d:bd:11:f8:73:be:78:18:
d6:f2:1d:33:5e:c6:4b:55:2a:6d:6c:d0:f6:97:c0:
48:2a:ba:21:17:c4:cc:80:7c:c3:29:b0:2c:6a:a9:
93:66:97:24:6c:e4:b9:e3:22:c4:d0:ad:07:75:13:
2c:8a:dc:86:24:17:e0:b9:4d:98:02:0e:3a:d3:80:
fa:75:11:6b:29:8a:3c:a4:1a:e5:bb:3a:52:9a:e5:
81:5c:ae:79:b6:de:ab:69:dd:ee:56:5a:9d:c7:d4:
32:94:ee:ca:17:4c:30:3d:81:49:5e:d2:92:dc:50:
98:4f:11:d7:c1:32:01:5d:a2:72:47:06:1a:3d:bb:
82:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9D:1F:2F:93:EC:F7:3D:5D:5D:12:F2:1B:EF:AF:4C:82:98:62:20
X509v3 Authority Key Identifier:
keyid:95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ae:a3:7d:35:81:4f:46:b6:76:23:32:73:3f:79:e3:c5:3b:
8f:6f:42:ed:17:68:bf:c2:07:a1:16:8c:77:3d:5c:9b:b7:72:
44:31:f7:27:7b:31:69:90:1b:ae:27:42:0d:41:12:b9:9b:a0:
f0:53:b9:10:a0:14:92:66:e9:8c:cc:92:b1:48:dd:38:54:d9:
45:2c:68:42:02:ee:8c:5a:53:6c:cf:14:49:56:19:5d:14:d3:
d6:2c:96:05:58:cd:c4:b5:28:34:4f:48:3c:7e:d5:a8:90:e6:
17:21:a2:64:ae:db:3a:25:a2:4d:77:38:7b:f0:59:72:66:27:
20:7b:56:04:92:19:d2:3a:ff:3d:ad:f9:e4:b4:93:fb:84:df:
49:d3:6b:c9:16:da:fb:06:5c:ba:fa:b6:ac:35:09:81:69:c2:
4f:03:d1:36:08:8e:64:7c:46:6d:7f:e2:97:76:83:d1:61:25:
f1:83:39:48:10:c3:bf:8e:5b:d2:45:4d:15:28:4b:ba:34:de:
f5:3b:5a:a6:f1:eb:37:89:22:50:d3:f4:05:3a:34:e7:d2:a9:
fc:fb:79:7e:e5:c3:0a:7e:9f:85:38:c4:b0:8c:e4:2d:ec:4d:
0d:e0:b8:25:05:8e:82:fa:0c:fb:b8:cc:d1:8a:57:12:df:71:
43:b6:b4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:04:32 2026 by rpki-client