Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
File: lRUfu3HkGy0QY9OxEUGtoahEx_c.mft (raw, json)
Hash identifier: VrfHZy8VRB8orvruw6UQYFokM1WzZEJLvnMvuaUtCmc=
Subject key identifier: 7C:BF:A4:B2:3B:38:06:8B:2C:DC:F2:29:C6:1E:25:03:D0:6B:8F:D9
Authority key identifier: 95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
Certificate issuer: /CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Certificate serial: 01A160B2111CC77BB5145E75316BDD201125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
Manifest number: 172D
Signing time: Wed 21 Oct 2026 23:00:44 +0000
Manifest this update: Wed 21 Oct 2026 23:00:44 +0000
Manifest next update: Thu 22 Oct 2026 23:00:44 +0000
Files and hashes: 1: KXQ6A3de6ngkk1WG9cHu1Wh6z8U.asa (hash: 5ZyKxUcShckFXuyMs3UQFf3JSdmvQECqj6DhdV60Ytw=)
2: hQpPRm4erIDWbIY8XQoz9UytcaA.roa (hash: P89VvvMHkJtBVyELR1I2+jkquZR5SiLofVkP3TLWjJE=)
3: lRUfu3HkGy0QY9OxEUGtoahEx_c.crl (hash: 9LRwlgAqMUjVSzMxjfNd6v0arXOQ6y1hbXjpnYNFook=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:b2:11:1c:c7:7b:b5:14:5e:75:31:6b:dd:20:11:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Validity
Not Before: Oct 21 23:00:44 2026 GMT
Not After : Oct 22 23:00:44 2026 GMT
Subject: CN=7cbfa4b23b38068b2cdcf229c61e2503d06b8fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:11:3a:f5:5a:a0:4b:c5:e2:75:5c:60:47:2b:
b1:f1:80:a0:a4:f4:9e:a0:ea:e8:f4:83:0c:06:a5:
db:e0:c1:7d:f6:c8:c7:cd:81:88:de:97:fa:14:96:
43:93:da:f7:9c:f3:a1:60:84:84:0e:88:a8:73:3e:
a2:42:89:bf:48:88:db:eb:1a:3f:e4:04:d0:ed:6d:
9f:3e:72:ef:3d:44:ae:6f:4a:9a:d6:59:96:f1:85:
35:a5:d0:36:00:46:1d:bb:cc:16:7f:73:e2:79:a6:
b0:0d:ea:e7:b2:8a:55:d7:7e:b3:4f:0e:75:ef:f3:
db:5d:52:dd:6c:53:5b:87:a2:93:45:c1:8b:fc:bd:
60:6b:8d:21:16:d1:eb:70:99:5c:98:27:c9:c5:9e:
b4:66:81:ca:c4:90:a3:0c:37:4d:b5:a5:49:c8:a4:
d6:a9:fa:91:a6:a9:91:6b:bd:a0:5b:e0:79:95:1a:
3d:34:0f:ff:ac:f3:25:0b:5b:d6:2e:dd:7d:f7:8d:
b6:40:3a:fa:4b:eb:11:ab:a9:02:7e:14:e4:5d:86:
43:6e:2f:bd:ea:ef:c8:58:4a:ee:5e:11:72:08:bc:
a5:8a:5d:45:9b:71:7e:56:a3:9a:db:4c:0f:38:91:
1f:45:5c:f7:7a:6e:b7:aa:a4:48:5c:f4:79:c1:d4:
09:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BF:A4:B2:3B:38:06:8B:2C:DC:F2:29:C6:1E:25:03:D0:6B:8F:D9
X509v3 Authority Key Identifier:
keyid:95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:10:37:99:fb:39:06:55:9f:01:8b:b6:24:0e:6c:a1:9c:96:
88:60:ae:99:f4:af:e0:3e:45:e6:d6:57:db:3b:85:72:d3:7f:
f6:22:84:84:85:8e:b6:fa:a3:50:28:fe:b2:30:99:26:55:09:
5b:0e:fa:25:a9:36:97:ef:21:0b:15:7f:ae:ac:27:cb:14:79:
01:b7:0d:4d:ed:9c:91:ce:92:4d:73:82:f3:fc:a4:75:46:23:
c6:92:de:60:21:cc:a2:b7:c8:29:fc:bf:e5:c8:07:77:68:a3:
98:fb:b2:17:fb:51:a7:0a:d2:0e:21:51:5d:d8:fe:ca:83:9c:
a0:8a:02:65:65:e2:7a:c1:5a:9d:f7:d6:c8:46:af:d2:68:65:
0b:23:bb:53:b4:1c:70:23:34:17:a3:f7:bc:a6:99:08:a1:19:
fa:39:1e:a6:d5:c9:8e:e9:8a:eb:02:57:3e:44:34:04:bd:6f:
f5:50:73:60:98:d1:9f:ad:a7:50:d0:2f:5e:fb:17:c7:88:20:
9d:41:8e:f4:a0:dc:ea:a3:dc:6f:a6:fd:55:c2:6e:3f:4b:f3:
c6:f5:c2:6e:0b:18:a7:d1:76:65:5f:5b:d0:b7:85:21:90:ec:
32:77:b8:e8:f6:67:df:64:cf:b0:52:d7:9a:ca:69:b7:73:95:
aa:98:ae:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 05:54:22 2026 by rpki-client