Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
File: 01QLUY11--_WFr_ZTPBf0lukiLY.mft (raw, json)
Hash identifier: T4W8jliO+P8cnmmLc63jU3RXeJ3bJfFf9fdrQIVTnKk=
Subject key identifier: 59:27:3F:90:A6:61:96:22:41:A4:2B:8C:48:86:6B:74:52:74:2B:BF
Authority key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
Certificate issuer: /CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Certificate serial: 019D26CD2AE5E96705F12AED4A8BABA41DD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:01:13 +0000
Manifest this update: Wed 25 Mar 2026 21:01:13 +0000
Manifest next update: Thu 26 Mar 2026 21:01:13 +0000
Files and hashes: 1: 01QLUY11--_WFr_ZTPBf0lukiLY.crl (hash: Q3KRZN+hOF1p1HhS58CfA18O62Pf1J/g99srvZRUXlY=)
2: uXxyOPGVnASS7u5ky0_kq_0zUmQ.roa (hash: 83RawsrluXe18GC2cGOGUx568BZVRaon+KIyn+++hqw=)
3: z4dC7BchYgJeEJVK0u1hQk0LX9w.roa (hash: eWL2mFtDMtr2WhkRkhhO2F6MQbo7HgvI3DvROQrIYRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:2a:e5:e9:67:05:f1:2a:ed:4a:8b:ab:a4:1d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Validity
Not Before: Mar 25 21:01:13 2026 GMT
Not After : Mar 26 21:01:13 2026 GMT
Subject: CN=59273f90a661962241a42b8c48866b7452742bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4b:d0:99:59:e2:8d:2d:40:ac:01:e3:53:53:
1c:1a:10:98:ef:2b:be:21:f2:b5:a5:77:95:82:51:
c2:b9:44:95:70:ce:bf:d8:06:42:2a:69:32:b7:de:
dd:28:45:1c:dd:0b:8b:a6:e9:c7:f1:c8:b9:5d:21:
f9:a5:03:49:a8:26:72:e4:87:1e:67:0c:4e:f8:ef:
ce:9f:15:43:bb:5a:f9:f7:ed:b9:99:de:35:8c:49:
0a:e2:74:72:be:98:d1:e7:3a:af:27:b6:43:04:60:
06:3f:7c:d5:50:c7:99:a0:3c:f1:09:91:6f:10:bb:
fe:d5:4e:36:45:7f:f5:d0:a4:15:4b:fc:7d:37:0c:
da:41:78:17:b6:94:1e:4c:3a:bd:9c:ec:76:32:2e:
8a:89:55:46:d4:d9:08:17:c9:01:24:8c:1c:70:b5:
56:3b:b3:48:cf:82:09:80:b1:ae:f5:ad:c2:55:1c:
3c:5d:a9:d8:85:ba:63:c2:03:a6:53:b1:ce:d2:a7:
49:52:9e:24:10:0c:73:4b:dd:4a:43:77:f1:16:38:
16:6e:9b:58:52:36:9f:77:8f:de:37:e6:54:5e:9d:
b8:35:cc:b6:1c:8d:6c:7a:5e:19:5f:18:13:0e:47:
b9:eb:c5:76:b5:a6:2c:48:c4:54:9d:15:97:f1:5d:
7e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:27:3F:90:A6:61:96:22:41:A4:2B:8C:48:86:6B:74:52:74:2B:BF
X509v3 Authority Key Identifier:
keyid:D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6f:20:f8:cf:98:ae:b0:d0:a3:8c:c4:05:9c:85:39:83:04:
55:9c:f7:ba:40:e2:cb:4d:c2:8d:61:a5:f1:14:c8:17:b7:89:
fd:33:45:69:a6:57:b8:80:5b:9c:c2:a3:a4:2e:0c:f6:9e:76:
ab:76:96:6a:b5:b7:40:4b:6c:84:32:3c:7d:09:84:7d:36:58:
74:71:0b:f3:27:d8:3c:94:78:02:60:54:88:e8:17:61:0a:ff:
12:05:3e:a2:16:3c:67:5b:36:16:85:09:65:e1:42:ea:ae:c8:
69:39:7c:65:7a:52:42:30:c6:d6:00:6b:8a:f4:ca:70:ea:bb:
ba:51:a5:28:96:21:22:49:dd:d8:62:0a:23:35:a1:93:9e:f8:
f3:9f:c6:69:6a:45:19:2f:b5:8f:c5:bd:26:de:7b:82:09:cb:
37:7f:d9:b1:b3:6f:24:dc:85:d4:04:d6:39:42:99:e3:e5:d8:
53:0d:de:8a:f7:06:7b:a8:12:11:54:45:3b:f1:c3:ab:00:93:
6e:fb:2c:99:bf:f8:ea:43:6c:4b:ba:29:42:22:ce:c8:3c:fe:
79:05:97:c8:b9:0c:dd:e7:e2:5b:15:eb:91:3f:74:d1:89:c5:
6f:87:bc:da:f1:f3:48:5d:5c:d6:41:1d:bb:56:c3:45:5a:a0:
c9:01:d7:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzSrl6WcF8SrtSourpB3WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTQwYjUxOGQ3NWZiZWZkNjE2YmZkOTRjZjA1ZmQyNWJh
NDg4YjYwHhcNMjYwMzI1MjEwMTEzWhcNMjYwMzI2MjEwMTEzWjAzMTEwLwYDVQQD
Eyg1OTI3M2Y5MGE2NjE5NjIyNDFhNDJiOGM0ODg2NmI3NDUyNzQyYmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUvQmVnijS1ArAHjU1McGhCY7yu+
IfK1pXeVglHCuUSVcM6/2AZCKmkyt97dKEUc3QuLpunH8ci5XSH5pQNJqCZy5Ice
ZwxO+O/OnxVDu1r59+25md41jEkK4nRyvpjR5zqvJ7ZDBGAGP3zVUMeZoDzxCZFv
ELv+1U42RX/10KQVS/x9NwzaQXgXtpQeTDq9nOx2Mi6KiVVG1NkIF8kBJIwccLVW
O7NIz4IJgLGu9a3CVRw8XanYhbpjwgOmU7HO0qdJUp4kEAxzS91KQ3fxFjgWbptY
Ujafd4/eN+ZUXp24Ncy2HI1sel4ZXxgTDke568V2taYsSMRUnRWX8V1+owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFknP5CmYZYiQaQrjEiGa3RSdCu/MB8GA1UdIwQY
MBaAFNNUC1GNdfvv1ha/2UzwX9JbpIi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFRTFVZMTEtLV9XRnJfWlRQQmYwbHVraUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hY2VlOGUtNzc2MS00MTlmLWI0ODMt
YjMwMTYyZTNjY2MwLzEvMDFRTFVZMTEtLV9XRnJfWlRQQmYwbHVraUxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9hY2VlOGUtNzc2MS00MTlmLWI0ODMtYjMwMTYyZTNjY2Mw
LzEvMDFRTFVZMTEtLV9XRnJfWlRQQmYwbHVraUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVW8g+M+Y
rrDQo4zEBZyFOYMEVZz3ukDiy03CjWGl8RTIF7eJ/TNFaaZXuIBbnMKjpC4M9p52
q3aWarW3QEtshDI8fQmEfTZYdHEL8yfYPJR4AmBUiOgXYQr/EgU+ohY8Z1s2FoUJ
ZeFC6q7IaTl8ZXpSQjDG1gBrivTKcOq7ulGlKJYhIknd2GIKIzWhk57485/GaWpF
GS+1j8W9Jt57ggnLN3/ZsbNvJNyF1ATWOUKZ4+XYUw3eivcGe6gSEVRFO/HDqwCT
bvssmb/46kNsS7opQiLOyDz+eQWXyLkM3efiWxXrkT900YnFb4e82vHzSF1c1kEd
u1bDRVqgyQHXjw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:45:36 2026 by rpki-client