Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json)
Hash identifier: m+8y5+UJAXIpMeRKNsun49wYNnl8g8kCK4GjqbZNHmM=
Subject key identifier: F4:0F:AC:6D:20:29:EA:18:E7:C4:5B:EE:33:8B:15:DB:4F:02:5B:77
Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Certificate serial: 019F9392684155C1F640DD71D204E090C585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
Manifest number: 0B3E
Signing time: Fri 24 Jul 2026 10:01:13 +0000
Manifest this update: Fri 24 Jul 2026 10:01:13 +0000
Manifest next update: Sat 25 Jul 2026 10:01:13 +0000
Files and hashes: 1: DlYdZNTLvfx2OD11UfQRnD3hK2o.roa (hash: Yz+AdjCjCsAlEW+BjCHTyQFo7Owy/uvBTZnF71MgcBA=)
2: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: pDFYrjG4+5Yb0XkIboX2VShQ9emlTa6hBRpl85JQrdo=)
3: zw7G6rZ3OugQehoBP3QpVRIzHKs.roa (hash: Ywv0pQZLRrxCf8Y+ep3+4GqTg47V6bf1LboUdnUKZNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:68:41:55:c1:f6:40:dd:71:d2:04:e0:90:c5:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Validity
Not Before: Jul 24 10:01:13 2026 GMT
Not After : Jul 25 10:01:13 2026 GMT
Subject: CN=f40fac6d2029ea18e7c45bee338b15db4f025b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:28:c5:3e:da:e0:bd:8d:14:15:81:72:31:
f5:36:45:e6:f2:fd:04:e8:0f:c9:2d:cc:35:5e:d4:
b1:02:a2:36:f5:11:2f:e1:ef:23:4f:2e:11:00:19:
28:44:e9:e0:85:75:d8:27:b3:be:a7:0e:36:80:ef:
85:90:44:77:53:c6:ad:52:62:ab:d3:e2:a6:ac:15:
03:5d:ef:20:c9:74:13:c8:7b:ce:d6:6e:15:ac:d2:
60:81:52:e9:11:75:24:f9:8f:52:f9:29:01:f6:97:
15:31:12:f1:bd:78:30:df:20:6f:53:76:c2:a8:9f:
1d:42:f3:55:e7:3f:40:8e:eb:8f:f0:5e:7a:71:4d:
e8:c5:76:2a:58:3e:84:38:11:7e:7c:27:f7:57:06:
19:6f:87:77:f6:ec:b7:d1:3d:e1:23:f3:90:a6:03:
44:01:0d:78:71:26:2d:0d:31:61:30:c0:28:a3:75:
52:e0:6d:58:ba:19:09:68:9d:e4:3c:73:5b:52:69:
0c:4d:62:4f:22:76:c6:61:01:b7:96:25:d3:45:fb:
c9:8b:43:cc:83:f4:21:fb:2d:f5:8b:03:67:31:ba:
a9:4c:43:af:94:29:15:32:b9:f5:40:cf:c7:f0:f7:
54:17:00:50:67:5b:04:dd:46:2e:8f:5f:35:fc:f5:
70:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0F:AC:6D:20:29:EA:18:E7:C4:5B:EE:33:8B:15:DB:4F:02:5B:77
X509v3 Authority Key Identifier:
keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a6:f2:8d:c7:92:d8:22:6e:94:4e:a3:18:5e:3e:fe:bb:05:
50:67:8b:45:c9:55:49:4c:77:1e:45:95:79:5e:b9:a9:47:90:
d3:7f:02:d3:30:39:97:4a:3e:80:e6:d7:46:1b:0f:58:ca:58:
24:87:5a:67:8a:26:0b:8c:a7:76:9e:a9:7e:9d:24:80:f1:01:
62:dd:e8:c4:d7:c6:f6:ab:cb:d7:3f:17:ce:3a:3c:00:64:06:
03:af:d3:09:18:ae:e3:9f:c4:40:33:f3:2e:d9:1f:29:ab:42:
d0:45:24:a7:90:a4:05:64:95:91:f5:69:8b:89:91:ae:a8:af:
d0:54:f0:77:72:af:1f:b2:3e:5d:8a:31:5a:39:bc:6a:f4:94:
0f:a5:8f:0a:72:1b:70:f3:68:fd:82:8b:a7:7b:71:39:ea:87:
05:1d:2e:81:85:44:81:67:aa:51:20:a2:b8:0e:db:e6:a3:1b:
b6:92:b6:c0:3c:f1:a1:33:8b:0f:a9:e9:6e:49:0d:42:45:17:
d8:fe:74:1d:f0:1d:e0:3b:1a:88:59:5c:e4:fb:c4:99:40:7b:
e0:45:a5:2e:f2:d9:7b:cb:88:60:ae:a6:40:ab:bb:90:75:f0:
f5:48:cb:57:d8:1b:e0:e4:0c:d9:cf:c4:26:03:1d:62:ce:dd:
d6:5a:3a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:37:19 2026 by rpki-client