Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
File: lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft (raw, json)
Hash identifier: RYaHWGpDOVAX1H5ZKG1kruvSYU6DsOJvHBPBzUr3buo=
Subject key identifier: 06:2D:F1:EE:4B:7F:03:8E:91:82:72:12:66:71:90:20:05:51:59:E2
Authority key identifier: 95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
Certificate issuer: /CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Certificate serial: 019E30A9076C8BE5A683C470EA3CE81E275E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
Manifest number: 075A
Signing time: Sat 16 May 2026 12:00:44 +0000
Manifest this update: Sat 16 May 2026 12:00:44 +0000
Manifest next update: Sun 17 May 2026 12:00:44 +0000
Files and hashes: 1: McifzUNxziI8WsCXgZeHNz10iWQ.roa (hash: 1R6rZYh+m87Flh7dOcMYHRsZeD59VMaEbBnj6Shuhfs=)
2: lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl (hash: cpFOnWo2H88pJ4Tlze+WLQoT3VetPxvyITArrMNQ/Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:07:6c:8b:e5:a6:83:c4:70:ea:3c:e8:1e:27:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Validity
Not Before: May 16 12:00:44 2026 GMT
Not After : May 17 12:00:44 2026 GMT
Subject: CN=062df1ee4b7f038e9182721266719020055159e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e9:8b:88:27:94:41:8b:3b:00:27:b2:4b:77:
f7:91:e5:0e:e6:86:8f:ae:32:60:4c:38:03:44:6b:
a1:b3:4e:ca:a9:f7:5d:e6:6c:11:ce:d1:51:09:37:
90:24:dd:d8:64:03:06:45:c1:f0:b2:87:0e:a5:b2:
b6:8e:06:b8:b5:7f:d8:4d:ec:df:4a:3d:18:77:88:
d5:6d:0a:63:d2:b5:3c:d9:71:59:f9:e7:68:6a:79:
4c:41:b5:b1:8b:cb:90:c9:1a:27:30:49:36:81:4c:
be:5e:9c:3f:75:b1:90:f3:02:57:47:e6:26:d7:85:
0e:06:c7:c9:10:14:49:69:57:48:fa:23:bf:a9:eb:
6c:f0:4f:2e:70:c7:18:fb:87:c2:39:53:73:31:96:
c3:b3:a8:cd:ba:b1:b8:1b:7e:83:d8:ba:44:ad:98:
dd:1d:11:04:6f:6c:66:81:f1:2f:f7:25:43:e4:72:
8f:65:4d:76:2d:83:7f:99:92:72:c7:53:2d:0d:16:
b2:54:e8:81:ad:44:bb:2b:cc:45:5a:aa:ba:94:e1:
7e:10:1a:8d:05:e3:ae:85:eb:52:1e:b0:be:10:e0:
33:5f:29:d8:04:6a:f5:a5:0d:89:59:ff:f8:56:3d:
36:86:b6:40:85:c5:ed:9d:b1:be:b7:e6:c2:c7:02:
9d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2D:F1:EE:4B:7F:03:8E:91:82:72:12:66:71:90:20:05:51:59:E2
X509v3 Authority Key Identifier:
keyid:95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ea:c9:95:d6:e3:68:43:71:a3:b6:5b:73:f2:5d:35:fb:3a:
37:05:62:56:ce:3b:5f:86:64:2a:e6:94:58:13:d5:26:37:de:
01:a2:52:d0:c7:24:be:70:0e:af:32:56:4c:8e:ad:66:de:df:
f3:c9:b4:b9:53:6f:99:c5:1b:bf:64:bb:9e:d2:0d:2f:51:88:
aa:a4:56:8d:1f:ef:ad:d4:74:21:77:75:c2:37:30:91:e6:ea:
99:c1:da:03:85:4e:c5:1b:9f:92:a9:27:c0:e2:59:b7:a2:7c:
86:3e:37:a6:84:9f:53:f0:f8:81:96:68:f7:b1:3b:d8:47:9c:
fa:80:0d:fe:34:84:64:db:12:ee:ee:be:70:ab:9e:86:03:68:
ad:61:5d:ce:7e:e7:1e:8a:00:06:9d:5d:38:ba:e0:b3:82:1d:
40:07:3b:f6:de:7a:d2:a6:af:74:67:ad:2b:3c:b9:a2:ce:75:
06:47:bb:41:c8:f4:7c:d5:d0:99:ec:f4:06:94:13:73:e7:5b:
75:b1:17:ed:ac:fd:e2:77:bd:de:db:19:00:55:71:ed:d7:15:
7b:da:db:11:fe:a5:7d:51:ea:e0:90:ce:b1:5d:b9:74:a9:33:
48:bf:ce:2e:2b:03:fb:1e:61:6c:d6:c5:b3:06:f0:6a:b9:2b:
f8:19:cc:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqQdsi+Wmg8Rw6jzoHideMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NDY0NjVjYTViODZjMjVhMDJlNTJlY2JmMDRjNGNmYmMw
NzY1NGQwHhcNMjYwNTE2MTIwMDQ0WhcNMjYwNTE3MTIwMDQ0WjAzMTEwLwYDVQQD
EygwNjJkZjFlZTRiN2YwMzhlOTE4MjcyMTI2NjcxOTAyMDA1NTE1OWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwumLiCeUQYs7ACeyS3f3keUO5oaP
rjJgTDgDRGuhs07Kqfdd5mwRztFRCTeQJN3YZAMGRcHwsocOpbK2jga4tX/YTezf
Sj0Yd4jVbQpj0rU82XFZ+edoanlMQbWxi8uQyRonMEk2gUy+Xpw/dbGQ8wJXR+Ym
14UOBsfJEBRJaVdI+iO/qets8E8ucMcY+4fCOVNzMZbDs6jNurG4G36D2LpErZjd
HREEb2xmgfEv9yVD5HKPZU12LYN/mZJyx1MtDRayVOiBrUS7K8xFWqq6lOF+EBqN
BeOuhetSHrC+EOAzXynYBGr1pQ2JWf/4Vj02hrZAhcXtnbG+t+bCxwKdQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYt8e5LfwOOkYJyEmZxkCAFUVniMB8GA1UdIwQY
MBaAFJVGRlyluGwloC5S7L8ExM+8B2VNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFVaR1hLVzRiQ1dnTGxMc3Z3VEV6N3dIWlUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9jNDhiNGMtMDIyMS00NjQ2LWJiNzIt
MDVjZjlkYjQzMGIzLzEvbFVaR1hLVzRiQ1dnTGxMc3Z3VEV6N3dIWlUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9jNDhiNGMtMDIyMS00NjQ2LWJiNzItMDVjZjlkYjQzMGIz
LzEvbFVaR1hLVzRiQ1dnTGxMc3Z3VEV6N3dIWlUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOrJldbj
aENxo7Zbc/JdNfs6NwViVs47X4ZkKuaUWBPVJjfeAaJS0MckvnAOrzJWTI6tZt7f
88m0uVNvmcUbv2S7ntINL1GIqqRWjR/vrdR0IXd1wjcwkebqmcHaA4VOxRufkqkn
wOJZt6J8hj43poSfU/D4gZZo97E72Eec+oAN/jSEZNsS7u6+cKuehgNorWFdzn7n
HooABp1dOLrgs4IdQAc79t560qavdGetKzy5os51Bke7Qcj0fNXQmez0BpQTc+db
dbEX7az94ne93tsZAFVx7dcVe9rbEf6lfVHq4JDOsV25dKkzSL/OLisD+x5hbNbF
swbwarkr+BnMag==
-----END CERTIFICATE-----
Generated at Sat May 16 20:26:18 2026 by rpki-client