Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
File: lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft (raw, json)
Hash identifier: 6b4i3OJRQrIgIAHUfdUb/hd2h4yrd96b6HcIgJ9d6F4=
Subject key identifier: BD:C3:EF:E7:20:AB:A6:DD:E4:91:7C:D9:64:56:C3:4D:C1:39:54:76
Authority key identifier: 95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
Certificate issuer: /CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Certificate serial: 019D39781ED446B6E27330C5ED1016DCCDB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
Manifest number: 06DA
Signing time: Sun 29 Mar 2026 12:01:06 +0000
Manifest this update: Sun 29 Mar 2026 12:01:06 +0000
Manifest next update: Mon 30 Mar 2026 12:01:06 +0000
Files and hashes: 1: McifzUNxziI8WsCXgZeHNz10iWQ.roa (hash: 1R6rZYh+m87Flh7dOcMYHRsZeD59VMaEbBnj6Shuhfs=)
2: lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl (hash: HnUFqgQLYruvVmzCcm3QWI0Wenf+A1t1RX4I+jW1if4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:1e:d4:46:b6:e2:73:30:c5:ed:10:16:dc:cd:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Validity
Not Before: Mar 29 12:01:06 2026 GMT
Not After : Mar 30 12:01:06 2026 GMT
Subject: CN=bdc3efe720aba6dde4917cd96456c34dc1395476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:fd:12:7a:cf:f8:f7:77:60:9f:78:fb:98:
47:76:97:22:40:45:32:6a:b9:d6:86:65:8c:ee:07:
90:f6:34:b4:d6:24:ce:f3:21:8a:06:3e:58:b8:eb:
c1:97:21:fe:89:96:d3:6d:ba:8a:3a:ad:b0:af:7a:
93:07:ea:69:68:2d:d4:1a:a6:26:f4:31:0f:ab:41:
21:8d:ff:3a:6c:b1:44:bb:ca:0e:a8:20:7d:d6:d2:
19:15:5a:e7:41:2a:e3:26:f8:60:0c:78:34:e9:a7:
d8:24:f0:8c:0e:9b:9e:e9:e5:8f:04:73:2b:f3:f4:
47:a4:09:81:68:57:7c:6c:0f:65:65:4c:01:3e:79:
91:00:97:9d:0f:2c:a5:d9:6a:29:ba:89:02:71:d7:
e2:85:66:06:8a:ed:f2:c8:1c:03:8f:ee:ef:3b:53:
08:00:29:d4:d2:9b:8c:6a:20:e0:1e:4c:64:e1:ca:
9c:08:0c:31:7e:d8:73:0b:48:3c:d1:3d:7a:80:a7:
0a:af:90:43:6c:b7:da:26:12:cb:f1:cf:b6:41:de:
ca:9b:dc:d6:14:0c:80:8f:4d:6e:43:fa:23:f1:e6:
6c:94:2e:ba:22:e4:1d:8d:9c:fc:30:27:cb:ba:0f:
4b:38:d9:a0:a1:00:aa:d8:5c:18:86:b5:d3:a4:36:
db:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C3:EF:E7:20:AB:A6:DD:E4:91:7C:D9:64:56:C3:4D:C1:39:54:76
X509v3 Authority Key Identifier:
keyid:95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c2:c8:23:fa:7f:1b:70:6e:cf:84:7d:3d:2a:83:8e:19:99:
ae:54:42:b0:b7:59:ab:ef:4f:79:68:a4:c9:ee:46:ba:30:bd:
28:de:ac:ba:8e:1c:78:72:10:41:07:eb:8c:b8:eb:c7:dd:e6:
eb:45:7e:59:9c:9b:2f:c7:89:34:0a:e0:c7:3a:7b:f3:b6:fd:
0b:7d:5a:8e:0b:77:c1:25:e2:78:cb:72:d0:88:a0:da:dc:64:
6d:e4:39:b6:b3:b5:26:a4:b4:15:05:26:e3:60:3a:63:66:97:
50:e5:b4:ec:a1:d7:92:1e:04:34:bf:b1:6f:85:fb:d3:6d:a4:
35:0e:84:57:2c:70:58:7c:67:91:c5:c0:36:74:7e:2a:4b:df:
95:df:8b:9e:26:34:48:31:3e:0e:19:98:74:ab:83:a5:2f:8d:
ab:15:c2:96:73:09:c4:5b:7b:e8:62:49:15:56:0b:80:64:e2:
96:3e:9c:fe:cf:28:d0:e1:e6:0a:df:81:79:ae:c1:ec:31:24:
3c:34:e6:e6:11:c2:29:71:7c:53:01:66:54:ac:58:25:a9:f6:
b9:43:58:a8:58:60:ba:eb:e5:5a:6e:80:b5:34:0b:03:d9:f2:
4b:5d:22:dd:70:1f:10:92:c9:a1:f5:92:2b:a9:bb:f0:a7:40:
51:b3:14:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:45:21 2026 by rpki-client