Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/00aea9-b0af-4a74-be6a-41e91a54a275/1/LUuu4_cib9zqPiKIu-eZlm11_rM.mft
File: LUuu4_cib9zqPiKIu-eZlm11_rM.mft (raw, json)
Hash identifier: GIt2jfEcXgDsHSi7e3Kp5h02xq7sPQpCrcG42KyqvIs=
Subject key identifier: 38:5B:5F:3C:54:0A:76:29:D8:5D:57:D5:A4:9A:18:6E:2A:18:92:C2
Authority key identifier: 2D:4B:AE:E3:F7:22:6F:DC:EA:3E:22:88:BB:E7:99:96:6D:75:FE:B3
Certificate issuer: /CN=2d4baee3f7226fdcea3e2288bbe799966d75feb3
Certificate serial: 019D322BC011EA7F43293016556D396D451E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUuu4_cib9zqPiKIu-eZlm11_rM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/00aea9-b0af-4a74-be6a-41e91a54a275/1/LUuu4_cib9zqPiKIu-eZlm11_rM.mft
Manifest number: 88
Signing time: Sat 28 Mar 2026 02:00:21 +0000
Manifest this update: Sat 28 Mar 2026 02:00:21 +0000
Manifest next update: Sun 29 Mar 2026 02:00:21 +0000
Files and hashes: 1: LUuu4_cib9zqPiKIu-eZlm11_rM.crl (hash: uilWpuGIyAdt/I/PHFJff9/Saz1/WAh9KsxBvUwAd2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/00aea9-b0af-4a74-be6a-41e91a54a275/1/LUuu4_cib9zqPiKIu-eZlm11_rM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/00aea9-b0af-4a74-be6a-41e91a54a275/1/LUuu4_cib9zqPiKIu-eZlm11_rM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUuu4_cib9zqPiKIu-eZlm11_rM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2b:c0:11:ea:7f:43:29:30:16:55:6d:39:6d:45:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4baee3f7226fdcea3e2288bbe799966d75feb3
Validity
Not Before: Mar 28 02:00:21 2026 GMT
Not After : Mar 29 02:00:21 2026 GMT
Subject: CN=385b5f3c540a7629d85d57d5a49a186e2a1892c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b2:98:06:2b:38:7b:9d:24:6c:87:64:a6:9a:
e0:67:a8:08:0e:02:17:5b:c1:c3:9b:da:d1:46:d5:
f6:a2:c1:77:7a:8f:7f:69:26:6a:c0:d8:87:42:c2:
20:64:c8:02:e0:21:e4:47:74:7a:c3:85:f7:7e:2c:
50:17:fc:24:9b:42:aa:05:6b:dd:5f:17:e6:c2:67:
0b:50:6c:5a:2e:9e:35:c7:35:f1:3a:ad:aa:79:23:
6c:3f:e6:f1:71:f7:de:81:83:39:1a:0e:a5:eb:b2:
9d:47:5a:3e:0b:13:84:d5:44:2b:fb:ca:19:9e:6f:
48:27:5a:49:fc:40:27:6e:59:2c:6b:f0:e2:b8:ad:
71:a8:e2:f0:61:3a:0d:7d:ee:46:e5:d7:d4:6c:73:
ad:60:cc:63:c1:65:cd:44:72:a8:db:c8:93:ec:f7:
86:75:d6:20:d5:08:69:6d:ee:38:f6:b4:2e:18:40:
92:46:6a:a8:f6:43:60:fa:1b:0e:45:08:24:08:d9:
9d:f1:d0:21:69:f2:4e:e0:31:0b:d4:61:d8:31:7d:
38:c8:5b:f0:e9:03:9e:5a:ac:8d:7c:57:4a:06:2d:
97:45:38:97:2c:44:ec:32:68:a1:bd:d8:bc:a5:e2:
ff:d5:9a:57:08:f0:f4:63:49:b2:17:e9:5a:c9:24:
c1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5B:5F:3C:54:0A:76:29:D8:5D:57:D5:A4:9A:18:6E:2A:18:92:C2
X509v3 Authority Key Identifier:
keyid:2D:4B:AE:E3:F7:22:6F:DC:EA:3E:22:88:BB:E7:99:96:6D:75:FE:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUuu4_cib9zqPiKIu-eZlm11_rM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/00aea9-b0af-4a74-be6a-41e91a54a275/1/LUuu4_cib9zqPiKIu-eZlm11_rM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/00aea9-b0af-4a74-be6a-41e91a54a275/1/LUuu4_cib9zqPiKIu-eZlm11_rM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:41:ce:71:e4:d2:19:80:3e:e8:32:bb:87:ae:fb:78:4d:c8:
a4:d8:1b:1d:8c:4d:0d:76:92:08:57:fc:81:f3:ca:5c:db:ba:
95:fe:d6:00:25:4e:f0:df:06:82:67:40:4f:d9:d5:6f:35:ed:
aa:ce:0d:dd:f1:c2:da:53:a1:e4:6e:e8:59:e6:37:50:bf:e1:
78:37:f9:f3:bb:9a:c0:98:0e:92:8b:16:00:6a:29:77:16:8f:
1d:9c:12:b5:2f:56:d0:d4:84:8c:05:f7:6c:fe:b3:4a:8d:41:
f8:c6:3d:4c:52:e7:85:56:50:65:7c:50:77:fc:13:7d:b5:56:
ab:6f:fb:12:56:01:e0:d6:ea:1f:41:1e:79:49:68:fa:62:66:
45:f5:52:19:b3:c5:d9:50:46:8a:13:c2:bf:fe:76:81:4b:01:
ee:04:79:c0:a8:c7:80:07:70:30:a1:85:83:45:29:3e:cf:6b:
d3:df:de:8b:53:72:19:d3:88:7f:2e:81:3f:42:02:0a:2b:44:
95:e9:5a:39:ff:45:42:eb:d6:99:9a:14:50:2f:82:18:b1:8c:
59:7c:8a:35:ad:e8:54:4d:eb:2d:d7:a8:36:bf:0f:31:4c:48:
e8:6a:7e:36:63:02:7c:5e:f1:6c:ee:cd:2e:a5:41:22:9b:96:
0e:61:37:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:36:56 2026 by rpki-client