Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json)
Hash identifier: tW437v9QnpMQDGgf9jZKBPMDzvWJgCiOskBEW9l7c6o=
Subject key identifier: B9:61:CD:F5:DE:BE:9B:DF:41:F7:7F:6F:88:C8:B1:E9:C9:5F:27:C4
Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Certificate serial: 01A0D426DB50555DCC524806F226D6D39BFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
Manifest number: 0BE4
Signing time: Thu 24 Sep 2026 16:01:51 +0000
Manifest this update: Thu 24 Sep 2026 16:01:51 +0000
Manifest next update: Fri 25 Sep 2026 16:01:51 +0000
Files and hashes: 1: DlYdZNTLvfx2OD11UfQRnD3hK2o.roa (hash: Yz+AdjCjCsAlEW+BjCHTyQFo7Owy/uvBTZnF71MgcBA=)
2: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: VjTNS+Rft+Qn5ak2ffpEIWHcLJ33rs/lyg+zauu6oEE=)
3: zw7G6rZ3OugQehoBP3QpVRIzHKs.roa (hash: Ywv0pQZLRrxCf8Y+ep3+4GqTg47V6bf1LboUdnUKZNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:db:50:55:5d:cc:52:48:06:f2:26:d6:d3:9b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Validity
Not Before: Sep 24 16:01:51 2026 GMT
Not After : Sep 25 16:01:51 2026 GMT
Subject: CN=b961cdf5debe9bdf41f77f6f88c8b1e9c95f27c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:02:35:4a:4d:4e:67:68:e2:0d:1a:c1:64:36:
b4:ce:0b:f1:99:55:e2:ad:dc:bf:81:5f:52:b2:2a:
11:62:32:f2:b9:04:e2:c8:a8:37:48:f0:dc:6c:96:
8f:dd:04:ac:fa:5e:4e:ca:ea:ff:1d:e6:63:1c:64:
20:23:5e:79:a0:13:8b:17:1d:2a:bf:05:b1:96:d5:
6d:38:b8:b6:ed:d2:c1:ff:ee:29:71:b7:47:7f:05:
7c:72:d7:4b:0f:4c:07:a0:1d:51:bf:26:86:09:73:
a9:11:6d:c9:4a:91:f1:c1:1e:c5:da:f8:36:60:60:
53:2b:cc:19:9c:b0:ce:db:0d:89:d4:5a:dc:2f:55:
04:fc:6f:ec:12:c0:7a:62:f5:ff:62:7b:ec:1d:bc:
52:9d:95:9e:7d:b4:fe:0f:49:0a:20:ac:96:15:40:
34:38:d4:5f:a0:ba:b4:fa:b7:8a:a0:c1:52:d5:fd:
e7:c5:37:d0:91:0b:23:33:1b:52:a2:f8:9a:03:ae:
72:ee:60:4d:84:5a:1a:0c:06:ec:1c:0c:e2:c2:d9:
73:12:74:f3:6a:ce:0b:c4:66:66:8b:97:9c:34:02:
7d:6f:85:dd:5c:dc:ac:a5:7e:2e:9c:26:d7:1d:cb:
2a:de:f7:b3:48:da:e3:e2:66:fa:45:d6:43:5a:a8:
e4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:61:CD:F5:DE:BE:9B:DF:41:F7:7F:6F:88:C8:B1:E9:C9:5F:27:C4
X509v3 Authority Key Identifier:
keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:10:06:72:25:ee:97:a4:52:51:a5:27:d3:8f:a2:1d:e5:08:
d1:dc:fa:da:86:2f:db:bb:72:9b:9f:d7:3a:be:df:b7:6c:be:
9a:e7:a4:bd:c6:59:64:df:5a:01:c0:37:a5:34:09:25:a1:4d:
2f:e3:c7:ff:20:19:e7:58:05:64:e2:7f:d2:06:d8:6b:94:a1:
f4:cd:72:43:76:eb:34:a5:3b:07:47:0f:f4:7d:72:86:1f:a7:
7f:15:ad:a6:bc:9a:2a:9c:a7:65:67:8f:ba:82:73:ec:26:04:
84:11:ff:e5:d1:52:f8:69:f7:b0:62:21:0f:ba:81:5e:8a:e5:
f0:e9:88:b7:b7:93:30:89:bb:74:65:27:ba:2f:65:04:8f:29:
ac:66:13:c0:36:c3:24:88:93:01:4c:5f:2c:da:a4:3d:93:d1:
f4:57:c8:4e:59:be:c5:aa:ae:46:4b:95:7f:76:fb:8f:79:99:
ff:b6:56:db:2d:42:02:55:3c:ba:f5:54:04:65:c6:4c:07:66:
4d:db:db:9e:2f:bb:01:31:41:e6:08:fc:34:90:a3:c8:2d:e3:
dd:c7:9f:2e:8c:c7:00:a7:cd:97:b1:c0:1c:4b:a2:e2:c9:19:
6f:d3:fd:df:59:7a:08:7e:0a:84:36:9b:15:93:b6:00:8c:8e:
62:72:53:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:14:43 2026 by rpki-client