Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
File: lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft (raw, json)
Hash identifier: B267fKhrl/CO0Dq4/J5O/yUGE6eqcTiDubEETyj0c/Q=
Subject key identifier: BF:8D:84:15:1D:E3:E8:1F:8B:5E:6C:89:03:C9:7D:F9:1E:D5:5F:11
Authority key identifier: 95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
Certificate issuer: /CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Certificate serial: 01A00213F39ABB646E34EE5B4F43B7FAAC2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
Manifest number: 084B
Signing time: Fri 14 Aug 2026 21:00:56 +0000
Manifest this update: Fri 14 Aug 2026 21:00:56 +0000
Manifest next update: Sat 15 Aug 2026 21:00:56 +0000
Files and hashes: 1: McifzUNxziI8WsCXgZeHNz10iWQ.roa (hash: 1R6rZYh+m87Flh7dOcMYHRsZeD59VMaEbBnj6Shuhfs=)
2: lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl (hash: oJE6KmNmEUwIZctQ9oFiJKe1JbLRJmPpsi6B/NPsvP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:f3:9a:bb:64:6e:34:ee:5b:4f:43:b7:fa:ac:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Validity
Not Before: Aug 14 21:00:56 2026 GMT
Not After : Aug 15 21:00:56 2026 GMT
Subject: CN=bf8d84151de3e81f8b5e6c8903c97df91ed55f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a5:87:c5:1b:84:c6:b7:c9:ba:35:a9:89:9d:
fc:52:8e:ac:cb:d5:b0:4c:82:f4:78:cc:c5:b9:bd:
89:43:be:b9:ac:cc:79:c8:b0:2e:65:79:8f:a3:f8:
83:e6:7c:f5:f7:be:2f:65:c0:5c:08:a6:fa:7f:85:
f5:b8:da:86:b6:f7:b7:b5:57:84:d8:f6:68:04:68:
93:82:26:c2:45:52:52:c4:11:24:dd:c2:a5:d7:ed:
ec:1e:e8:67:5a:52:bb:17:00:2e:f2:a9:3c:60:62:
a3:59:88:5c:af:75:63:19:f9:c6:ce:6f:92:3b:aa:
3d:08:2c:06:9a:b7:57:1d:1d:df:08:3e:0a:f5:14:
34:ae:ad:91:5a:49:79:58:f2:25:33:a6:b4:12:81:
ec:6c:9b:d3:d1:bd:f7:e9:54:4a:05:d8:23:f2:b4:
97:84:dd:e9:e4:da:03:2b:09:41:2e:cf:1e:fb:4a:
ac:22:53:fc:d3:45:e3:14:f3:44:fc:19:8a:75:9d:
3a:64:c6:60:8f:61:ae:9e:57:49:cf:67:3f:8d:6f:
78:dd:fa:c6:f5:84:ff:f9:f5:58:4d:0d:54:16:f9:
5a:40:fe:b6:1f:80:91:ea:1d:95:d4:ba:5e:c2:a8:
dd:3b:91:86:dc:8b:99:8e:0d:a3:cd:b4:29:d2:97:
8e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8D:84:15:1D:E3:E8:1F:8B:5E:6C:89:03:C9:7D:F9:1E:D5:5F:11
X509v3 Authority Key Identifier:
keyid:95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:07:d7:b2:2f:2c:86:9f:45:1e:3f:f1:76:d1:cf:c4:bc:52:
39:88:7d:99:f4:3e:75:e2:6b:ec:6d:90:bf:af:fa:22:9c:5e:
b6:cc:20:aa:68:e6:20:89:b8:53:79:00:8a:a4:8e:54:bf:8a:
4f:5d:15:ff:d1:09:fb:49:49:5a:4b:b7:49:75:76:73:0d:cf:
ef:47:66:db:f9:07:89:c7:a2:92:b9:76:bb:ba:d3:d9:e1:30:
9c:03:49:d7:0d:3a:3d:86:82:3a:3f:a6:7d:58:51:ef:42:e7:
ab:3d:c5:75:b5:25:d9:6c:89:b2:e3:f2:43:ac:7d:9c:c6:9b:
8d:65:d2:f3:02:c8:78:ed:27:c3:83:c1:16:90:de:2e:8a:24:
b3:db:62:06:a7:b0:1b:29:20:7b:de:6f:65:d7:17:1d:2e:ee:
43:63:32:5e:af:df:1d:67:61:5a:07:49:78:86:c3:f8:12:88:
79:59:20:67:7d:5e:82:a4:f3:5e:f0:d5:28:9a:ba:80:1a:17:
ec:3a:99:11:93:44:2f:8e:a0:9b:e2:cb:b3:51:c0:a3:1c:9d:
f7:2a:e3:5b:6f:15:9c:ad:f4:41:f2:0c:15:d6:9b:6a:d1:cb:
46:d1:fa:57:bd:5d:a1:d1:03:0e:a2:3f:57:de:04:01:39:21:
2f:c3:89:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:16:12 2026 by rpki-client