Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
File: lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft (raw, json)
Hash identifier: klmKFt0Nj12EQmr9BvjWvCgq0XjYgiquOvTDMbb0Qxo=
Subject key identifier: FF:3E:30:7A:8C:4D:4C:A1:B7:92:4D:69:3C:40:03:DA:B0:E7:60:35
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial: 01A0EDAFC7910247FD4AFF2E0E92A35DA517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
Manifest number: 1756
Signing time: Tue 29 Sep 2026 15:01:55 +0000
Manifest this update: Tue 29 Sep 2026 15:01:55 +0000
Manifest next update: Wed 30 Sep 2026 15:01:55 +0000
Files and hashes: 1: FitX3sWQ_iHXagZBIm2G09JUo5s.roa (hash: KV5mxaj5PQdSSjX+1QS/5L4FU+fN0JBB9CsJ5gF5o/o=)
2: GJmBjPFiuI9wpLlDRwS9mxb4F6E.roa (hash: EWYqSEaxsJwB3eARQDD/wcNEb9j/xhowyFxphGXlVm8=)
3: k7h4yqZemUb5b2bIFBvdTSgfzyw.roa (hash: Bx4UTl3NXqDp9MQ/LTWLZEsPj6vB0/E0amtRDWqvTIc=)
4: kCAsSIbvKF55PV7u3rulF5069fE.roa (hash: baPIhS+1QRBCYazJ9uYyJZTSmKcZ6uEAV6jyZHcT50U=)
5: lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl (hash: 1M4KnEk4E9Vt30zU5sExtZ639Q1T4QdAwmzqbIB/8m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:af:c7:91:02:47:fd:4a:ff:2e:0e:92:a3:5d:a5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Validity
Not Before: Sep 29 15:01:55 2026 GMT
Not After : Sep 30 15:01:55 2026 GMT
Subject: CN=ff3e307a8c4d4ca1b7924d693c4003dab0e76035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:70:2d:f4:74:fc:9e:25:0e:41:fd:27:79:55:
3f:6b:42:32:65:99:d1:d0:9f:08:cc:90:65:93:d7:
2a:d3:1f:51:1e:0c:24:7a:f7:2e:6b:82:ca:45:4e:
04:b8:ec:3a:ff:db:99:97:6e:b5:34:f2:06:d5:fa:
ef:4a:80:ce:80:46:f6:9c:3b:39:9f:eb:ae:aa:bc:
f4:25:6a:79:39:2f:40:7b:e3:43:0f:46:1f:96:11:
41:b8:fd:46:91:34:56:70:46:b4:40:29:64:e1:3b:
67:a0:a9:a2:48:ff:9e:53:06:ee:29:9a:1a:4e:03:
df:e2:91:72:3f:ba:63:0e:d1:8e:26:4f:ab:16:21:
be:29:c1:5e:71:d8:b6:5d:e8:f7:c0:b3:cc:81:80:
e1:ec:66:47:c1:c5:3f:f0:6b:18:59:dc:00:c3:80:
b0:59:77:1d:92:2b:34:85:23:96:9a:95:93:38:c2:
b6:e9:02:d0:9c:67:46:93:56:79:2d:d2:8b:42:22:
92:56:c7:47:46:2f:83:62:64:aa:3f:a3:74:1a:64:
6c:48:fe:05:5c:46:b4:a0:96:c3:16:ea:44:83:d0:
c2:a2:14:4d:7a:93:d3:97:a5:9f:e6:d8:14:56:99:
f9:37:56:0b:1f:99:87:62:3b:4f:c8:e6:a1:6d:76:
2c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3E:30:7A:8C:4D:4C:A1:B7:92:4D:69:3C:40:03:DA:B0:E7:60:35
X509v3 Authority Key Identifier:
keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ec:21:f5:c0:74:5d:ab:2c:5d:11:29:aa:9b:02:5f:66:54:
23:8d:4d:b7:53:f3:a8:ac:eb:99:63:5e:16:86:14:b1:9d:b8:
26:1f:3a:45:19:25:ba:20:b3:90:f6:8b:8b:71:74:de:35:aa:
b3:af:0f:95:56:fd:b5:88:d7:88:8c:f8:d7:a9:8e:49:cf:cf:
95:3e:75:4b:d0:22:8d:8d:da:f7:54:a1:53:96:55:51:86:76:
1f:40:ed:3c:06:d0:53:00:38:db:e6:da:a2:16:4f:a2:92:8d:
69:7d:e3:66:b5:0d:1e:1f:1a:99:9d:0d:39:0b:b5:0f:ef:5d:
f3:ec:94:28:77:02:fd:bc:ba:58:3c:ee:9f:8f:2d:c5:ed:99:
a8:be:fa:09:23:e9:71:c8:37:8f:d3:fe:10:d4:6d:68:76:ef:
d8:d8:c7:cd:90:88:17:83:9e:ae:8b:ad:c4:35:ac:69:ca:93:
3f:59:7b:68:c2:ca:6e:4c:71:9d:68:6d:fc:0f:c7:02:e7:33:
0e:90:41:3b:ab:ef:74:34:56:29:d1:ad:30:92:85:35:bd:99:
a2:56:6d:9a:4f:77:6b:4d:b3:f9:f2:f5:15:6c:eb:bd:ea:fb:
e2:9e:17:c7:d9:aa:c9:2f:3a:a6:e2:9b:56:e1:44:4b:60:50:
39:06:95:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:28:15 2026 by rpki-client