Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json)
Hash identifier: IWDcrAO1zCav7U+wfYGAjjs1sCz7szQl01zSx6FOqvU=
Subject key identifier: C3:7C:B0:5A:F0:37:DC:FE:71:E0:D9:C3:8E:56:FB:57:4C:9E:D7:5E
Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Certificate serial: 019D27A8F075593D5840EFD1974A1ED14A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
Manifest number: 09FD
Signing time: Thu 26 Mar 2026 01:01:15 +0000
Manifest this update: Thu 26 Mar 2026 01:01:15 +0000
Manifest next update: Fri 27 Mar 2026 01:01:15 +0000
Files and hashes: 1: DlYdZNTLvfx2OD11UfQRnD3hK2o.roa (hash: Yz+AdjCjCsAlEW+BjCHTyQFo7Owy/uvBTZnF71MgcBA=)
2: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: xsk3+j72jo27z3t3zociG55+ZrpGKnE3v0k0I+LOJI4=)
3: zw7G6rZ3OugQehoBP3QpVRIzHKs.roa (hash: Ywv0pQZLRrxCf8Y+ep3+4GqTg47V6bf1LboUdnUKZNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:f0:75:59:3d:58:40:ef:d1:97:4a:1e:d1:4a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Validity
Not Before: Mar 26 01:01:15 2026 GMT
Not After : Mar 27 01:01:15 2026 GMT
Subject: CN=c37cb05af037dcfe71e0d9c38e56fb574c9ed75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7b:bc:60:49:2b:06:40:04:39:30:7c:5e:ef:
e0:f7:9f:57:3f:f0:ed:a4:57:ad:a3:b6:6b:a9:48:
4e:ef:b3:b5:98:25:3a:f2:e5:9f:8f:43:7a:dc:0f:
19:da:6d:fa:20:0f:b7:e5:d3:91:3c:f0:bc:ac:e2:
62:07:17:96:c9:a7:97:7c:e7:70:aa:11:42:86:7a:
55:b0:d2:a2:d5:ba:92:f9:34:be:59:50:bf:8c:b2:
37:ca:82:c9:12:dd:d6:80:e4:94:09:03:d0:f5:3a:
14:d7:37:ec:03:b2:01:d0:30:75:24:d7:8e:d3:68:
6b:76:1e:73:e7:12:bf:3a:dc:f5:4a:ab:14:99:4f:
f3:d6:19:d5:13:73:e3:8f:22:e6:da:91:83:1c:6a:
c5:00:c6:fb:33:41:a0:40:cf:74:57:20:94:80:53:
1c:66:dc:42:4f:39:7e:fb:03:0c:91:4c:ab:85:b9:
44:28:f4:9c:1a:fb:e5:7c:36:8e:cc:4d:3a:fa:7d:
14:7e:e8:03:52:27:df:ea:eb:ec:25:ea:5f:d1:92:
b0:ef:7b:5a:f0:21:83:71:b5:db:ca:6c:d1:11:c6:
9a:45:76:a8:a3:ad:28:63:f2:7a:74:d0:5c:cf:7d:
44:3d:13:69:b6:73:8d:ca:90:fa:c3:cc:d9:bf:b7:
ff:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7C:B0:5A:F0:37:DC:FE:71:E0:D9:C3:8E:56:FB:57:4C:9E:D7:5E
X509v3 Authority Key Identifier:
keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:33:93:34:5c:87:66:19:2f:18:61:59:aa:1a:82:42:4e:6c:
7d:7c:46:67:a4:d4:2f:c4:50:1c:ad:c4:d5:8e:e6:95:50:9d:
0e:3c:d2:d0:91:3b:b0:2c:46:44:b4:7e:09:d9:79:c9:69:75:
e2:f8:1e:67:63:7e:c3:bf:62:b9:f2:9a:75:29:7d:37:bb:a1:
25:87:ec:84:d7:7e:f0:20:92:1a:a8:cf:f5:90:8c:1a:24:81:
7c:39:8f:d3:b0:73:7a:d8:a2:ab:e9:38:be:93:8f:af:33:c7:
da:23:dc:7c:e4:4e:ee:c0:76:de:bd:07:75:2a:d9:ae:42:31:
fb:b2:2b:4e:a5:ea:cc:21:ff:c3:82:de:5c:67:2b:88:5a:08:
a2:33:3f:1b:c9:61:52:53:65:e9:e7:a8:82:b0:9f:2c:c3:7b:
c1:84:fd:52:20:01:f3:85:66:c4:e4:f3:b9:3b:2f:f3:64:9d:
ed:23:33:c8:3c:ca:43:1c:db:3f:36:18:23:3a:28:fc:35:f6:
96:61:9d:ac:fc:b2:25:f7:19:bc:35:80:0e:91:da:d7:12:c5:
67:0b:97:c1:90:32:58:66:d2:43:78:e8:cb:7a:4f:0a:4d:d8:
18:0d:93:c7:7d:12:8b:9c:9c:da:3d:f6:01:42:42:f3:f5:1c:
7d:42:15:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqPB1WT1YQO/Rl0oe0UonMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NDYxZmJlZTFjMDZlM2VhZmFjMGYyZjk1MjUzY2E4NjAz
YWNjZjIwHhcNMjYwMzI2MDEwMTE1WhcNMjYwMzI3MDEwMTE1WjAzMTEwLwYDVQQD
EyhjMzdjYjA1YWYwMzdkY2ZlNzFlMGQ5YzM4ZTU2ZmI1NzRjOWVkNzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63u8YEkrBkAEOTB8Xu/g959XP/Dt
pFeto7ZrqUhO77O1mCU68uWfj0N63A8Z2m36IA+35dORPPC8rOJiBxeWyaeXfOdw
qhFChnpVsNKi1bqS+TS+WVC/jLI3yoLJEt3WgOSUCQPQ9ToU1zfsA7IB0DB1JNeO
02hrdh5z5xK/Otz1SqsUmU/z1hnVE3PjjyLm2pGDHGrFAMb7M0GgQM90VyCUgFMc
ZtxCTzl++wMMkUyrhblEKPScGvvlfDaOzE06+n0UfugDUiff6uvsJepf0ZKw73ta
8CGDcbXbymzREcaaRXaoo60oY/J6dNBcz31EPRNptnONypD6w8zZv7f/qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMN8sFrwN9z+ceDZw45W+1dMntdeMB8GA1UdIwQY
MBaAFJVGH77hwG4+r6wPL5UlPKhgOszyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lNWNlOGYtNWVhMC00NzlmLTkzZTkt
ODlkNWM2MGY1MDFmLzEvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9lNWNlOGYtNWVhMC00NzlmLTkzZTktODlkNWM2MGY1MDFm
LzEvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzOTNFyH
ZhkvGGFZqhqCQk5sfXxGZ6TUL8RQHK3E1Y7mlVCdDjzS0JE7sCxGRLR+Cdl5yWl1
4vgeZ2N+w79iufKadSl9N7uhJYfshNd+8CCSGqjP9ZCMGiSBfDmP07Bzetiiq+k4
vpOPrzPH2iPcfORO7sB23r0HdSrZrkIx+7IrTqXqzCH/w4LeXGcriFoIojM/G8lh
UlNl6eeogrCfLMN7wYT9UiAB84VmxOTzuTsv82Sd7SMzyDzKQxzbPzYYIzoo/DX2
lmGdrPyyJfcZvDWADpHa1xLFZwuXwZAyWGbSQ3joy3pPCk3YGA2Tx30Si5yc2j32
AUJC8/UcfUIVjQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:59 2026 by rpki-client