Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json)
Hash identifier: BgD4sRgzgRyJ9OQ7sSHFKx4Bl9REborezhWOE8p/1GU=
Subject key identifier: E8:C8:A4:05:1E:4E:F7:10:B5:54:73:6A:FC:41:77:4A:83:BE:FD:6D
Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Certificate serial: 01A1DEA7ED28F8AD8EFC16632DE8B46DF604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
Manifest number: 0C6E
Signing time: Sun 15 Nov 2026 10:01:49 +0000
Manifest this update: Sun 15 Nov 2026 10:01:49 +0000
Manifest next update: Mon 16 Nov 2026 10:01:49 +0000
Files and hashes: 1: DlYdZNTLvfx2OD11UfQRnD3hK2o.roa (hash: Yz+AdjCjCsAlEW+BjCHTyQFo7Owy/uvBTZnF71MgcBA=)
2: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: GOvDLkpgFqqNXkUXX9qEVUKIYcndv6muEqU77PfPmcY=)
3: zw7G6rZ3OugQehoBP3QpVRIzHKs.roa (hash: Ywv0pQZLRrxCf8Y+ep3+4GqTg47V6bf1LboUdnUKZNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:ed:28:f8:ad:8e:fc:16:63:2d:e8:b4:6d:f6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Validity
Not Before: Nov 15 10:01:49 2026 GMT
Not After : Nov 16 10:01:49 2026 GMT
Subject: CN=e8c8a4051e4ef710b554736afc41774a83befd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f7:b9:4b:87:a6:4b:75:d1:74:5a:e1:00:a6:
86:e6:50:cc:89:41:43:1b:bd:2f:f0:ae:e3:37:9b:
b8:37:43:f7:b8:a3:fd:38:f8:17:26:6f:f8:8d:15:
6e:83:43:2d:27:01:1c:76:84:27:d0:37:80:4d:31:
08:c8:a6:b1:08:aa:bc:bc:1a:b8:3c:0a:65:07:13:
0d:cd:11:bc:a5:09:49:d3:a0:9b:9b:68:cd:fa:1b:
a6:f0:9d:96:78:1b:91:29:48:58:d2:8d:03:63:dd:
dd:00:45:bc:fa:74:e1:5c:48:a7:fd:f0:a3:f0:d1:
9b:8d:b6:24:04:34:9e:8d:2e:ba:a9:a9:dd:ea:39:
42:19:64:79:73:25:f1:11:38:85:a4:90:b3:a3:cf:
f5:8a:fd:ff:b9:26:b6:eb:99:b2:80:c7:c0:f2:9a:
04:6c:08:cd:2d:1c:f4:96:a7:0f:b3:26:98:cc:e4:
85:3d:33:66:a3:30:59:94:66:7a:56:3c:f9:49:00:
e7:ea:48:36:79:cb:a4:20:0a:0a:de:17:c3:bf:66:
b4:c4:3e:40:14:a3:db:51:8a:37:4a:c1:f7:e5:59:
15:80:9b:74:34:df:9c:30:9b:68:0f:11:0e:5e:0f:
a1:54:11:82:07:e4:76:47:1c:95:88:58:69:e9:7a:
99:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C8:A4:05:1E:4E:F7:10:B5:54:73:6A:FC:41:77:4A:83:BE:FD:6D
X509v3 Authority Key Identifier:
keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ca:61:ef:79:75:0a:3a:5c:27:fa:1a:6d:9f:5a:ae:14:7f:
c0:55:98:55:d5:82:ff:15:6c:e7:37:42:fe:82:38:be:d2:7d:
74:66:88:75:f2:02:c7:42:d7:fa:a5:5e:05:6a:e6:99:0f:e6:
4c:e4:f5:a8:bc:1d:87:12:80:64:e1:91:11:ff:de:5d:a8:97:
50:8e:33:fe:b5:f1:dd:34:30:32:69:1c:31:ac:ca:3c:6f:10:
d5:18:84:39:71:07:e0:16:3d:24:f6:bc:e3:db:e9:5d:b8:cc:
5c:76:a4:96:8b:26:cf:27:6f:5a:6d:19:5a:70:1c:69:f7:70:
6e:b9:7b:e2:43:01:70:b3:02:c9:24:ab:d6:09:08:dc:13:12:
c8:fb:24:3c:5d:29:c8:2e:9b:68:e1:7c:f9:6e:2f:2c:a8:1c:
6a:4e:11:9e:9b:0d:41:cd:e9:b2:18:a3:60:fc:66:ca:78:d8:
90:6e:b5:0e:ca:b0:7d:20:ef:9d:a1:f0:76:60:52:4c:26:52:
13:46:de:f7:5e:7b:6c:50:8f:03:93:0f:15:34:3c:9f:3d:15:
d9:77:f3:7d:76:7a:bf:9a:62:14:7c:c2:d1:25:c2:b4:4a:2f:
87:3c:01:9a:2e:00:95:1d:b4:b0:14:a6:0b:3f:26:e3:e0:ac:
07:3e:26:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:03:52 2026 by rpki-client