Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
File: lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft (raw, json)
Hash identifier: dTV5A9kodtsHDcCku7Ns9tFR/Fm6x03SAohpL8i/JoQ=
Subject key identifier: CF:DD:E6:92:4A:CA:7F:AC:25:B5:18:62:B1:F6:9B:80:40:4E:43:40
Authority key identifier: 96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A
Certificate issuer: /CN=96edc682a944005117b8febed6dc8bac060f329a
Certificate serial: 019D389BE0D9AC8EA158ADF5800F6F64F522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
Manifest number: 0784
Signing time: Sun 29 Mar 2026 08:00:32 +0000
Manifest this update: Sun 29 Mar 2026 08:00:32 +0000
Manifest next update: Mon 30 Mar 2026 08:00:32 +0000
Files and hashes: 1: DErivx0e-6b56vQq7Hodx5LXJgM.roa (hash: Qu7V6jf5xYIpOAX8Mui4oAi/eNqnZVmhkF0lUX59mwE=)
2: lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl (hash: 2b2nQFp8BOTGy1TfoU+PXZ5QoSF2gFi4swo6OfnZUn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e0:d9:ac:8e:a1:58:ad:f5:80:0f:6f:64:f5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96edc682a944005117b8febed6dc8bac060f329a
Validity
Not Before: Mar 29 08:00:32 2026 GMT
Not After : Mar 30 08:00:32 2026 GMT
Subject: CN=cfdde6924aca7fac25b51862b1f69b80404e4340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:aa:fa:7b:21:7b:ad:63:56:89:39:03:54:3e:
df:fc:14:49:33:e0:aa:ed:77:45:66:5c:49:4d:1f:
9d:b7:85:9a:8f:28:56:74:71:f2:48:96:0e:7e:3d:
84:d3:8a:35:77:66:2c:a9:f5:6f:5c:45:c8:87:a7:
53:7e:d4:cf:e9:8c:a3:7d:23:30:f5:88:47:05:f9:
a5:14:ce:00:ef:f6:65:10:b6:48:b6:70:2e:18:97:
91:f9:76:49:f3:bd:8d:df:7b:e1:1b:91:14:8c:4b:
64:78:c7:d7:46:88:1d:5a:80:17:07:27:8d:c1:6a:
c4:b1:76:c9:68:be:d5:8f:dc:55:2f:c6:d3:f3:49:
50:fc:00:2c:39:3c:57:3c:cd:33:7c:36:b3:6b:e9:
4a:b4:be:59:46:8e:78:70:04:90:c3:67:e3:3e:83:
90:4a:11:32:e6:1b:35:fd:18:d8:ec:1b:2f:9d:21:
f3:b9:d5:e8:d9:e5:98:06:08:cc:3e:90:ca:96:cc:
55:05:e4:2d:e2:7f:2e:35:59:64:8b:09:d2:70:1b:
29:fb:4d:48:db:ff:05:fc:e2:3d:3d:20:b5:a0:88:
7b:3a:45:25:35:c2:61:f9:9e:f8:95:6b:45:a4:37:
14:78:af:da:96:12:80:e3:00:58:86:51:fd:f5:cc:
72:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DD:E6:92:4A:CA:7F:AC:25:B5:18:62:B1:F6:9B:80:40:4E:43:40
X509v3 Authority Key Identifier:
keyid:96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:75:4c:ea:f2:1f:d2:af:a4:85:d5:30:0c:96:d5:0c:00:ed:
87:b5:23:a4:39:75:8c:f1:4d:e4:31:ae:89:f6:4e:93:02:4a:
1e:78:13:c6:6a:e8:72:42:f5:13:b2:c5:d7:e8:c1:e3:0e:67:
d3:37:79:01:8c:4c:68:22:11:01:a1:0f:b1:c4:17:e7:d4:05:
37:5f:00:4c:77:86:4c:da:93:fb:87:d6:d4:99:1a:12:ad:17:
8e:92:5a:77:30:db:73:c1:02:cf:a7:72:c3:c8:9d:f7:f5:cd:
62:0d:f1:41:6a:78:03:98:8b:2a:c0:d7:7f:6b:1d:ac:76:f2:
47:00:36:f0:e7:de:3f:05:9c:ce:56:a0:c5:7e:50:66:65:e3:
4c:9c:fa:2f:18:4e:6e:65:f4:ab:db:3e:32:bd:02:0c:e7:94:
f0:45:aa:55:a1:2e:ab:2b:33:cd:6b:42:7d:a8:b6:60:cc:86:
7d:97:b7:18:32:35:9d:ef:c3:c7:72:a4:6a:ba:40:56:4f:86:
5b:82:c4:5e:0c:81:6e:cc:91:5a:62:01:7e:55:be:3c:94:79:
55:f8:f0:93:d8:2b:d1:78:02:f4:be:51:63:9b:9b:ee:b0:41:
fe:4f:85:40:2f:8a:d4:9a:6e:c1:7d:c1:68:90:37:35:06:4f:
9a:76:8e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:19 2026 by rpki-client