Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
File: lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft (raw, json)
Hash identifier: OK+vSsfXkRPYN/SC39uelfA2r08p4IQXvuOpFNLR0lk=
Subject key identifier: F9:4E:83:CC:82:CD:5A:C6:ED:F8:38:D4:18:75:7F:01:FC:96:32:56
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial: 019E1F482749EBAB7DD6C15472E67293DA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
Manifest number: 15E2
Signing time: Wed 13 May 2026 03:01:22 +0000
Manifest this update: Wed 13 May 2026 03:01:22 +0000
Manifest next update: Thu 14 May 2026 03:01:22 +0000
Files and hashes: 1: FitX3sWQ_iHXagZBIm2G09JUo5s.roa (hash: KV5mxaj5PQdSSjX+1QS/5L4FU+fN0JBB9CsJ5gF5o/o=)
2: GJmBjPFiuI9wpLlDRwS9mxb4F6E.roa (hash: EWYqSEaxsJwB3eARQDD/wcNEb9j/xhowyFxphGXlVm8=)
3: k7h4yqZemUb5b2bIFBvdTSgfzyw.roa (hash: Bx4UTl3NXqDp9MQ/LTWLZEsPj6vB0/E0amtRDWqvTIc=)
4: kCAsSIbvKF55PV7u3rulF5069fE.roa (hash: baPIhS+1QRBCYazJ9uYyJZTSmKcZ6uEAV6jyZHcT50U=)
5: lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl (hash: rMORp7zPgO+O2vK8wvdSGOcH6BmamGxNP7h2J0NmSaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:27:49:eb:ab:7d:d6:c1:54:72:e6:72:93:da:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Validity
Not Before: May 13 03:01:22 2026 GMT
Not After : May 14 03:01:22 2026 GMT
Subject: CN=f94e83cc82cd5ac6edf838d418757f01fc963256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:fd:88:24:20:55:1e:21:60:f2:60:ff:57:
ba:b5:23:1f:6a:6e:9e:dd:27:5a:88:bb:6a:41:58:
d6:6b:00:cb:7f:1f:7b:13:94:6b:f3:02:b6:f1:95:
72:a0:61:50:5d:73:6d:52:3a:de:7a:49:59:b3:85:
4d:7f:ef:66:10:a8:cb:7e:07:04:c0:d7:79:4d:0b:
0b:fd:1b:43:e1:ab:f5:d9:dc:dd:33:cc:75:4b:c4:
f6:d5:50:e4:01:24:60:45:de:a5:61:4a:ac:a7:89:
01:7b:dc:e3:cc:de:c4:eb:68:a4:7f:bd:fc:7b:cc:
18:b9:ca:a2:1d:50:83:a8:85:c3:da:5b:74:44:b2:
ac:82:43:3c:7c:ca:2d:82:16:3d:8e:d3:91:6b:a7:
0b:26:77:86:2a:d5:4c:8f:79:8a:9b:2a:90:f7:77:
bb:b8:af:e0:84:c4:1f:56:4b:b4:4f:b2:15:85:12:
72:4a:3a:d6:d7:02:60:da:1f:04:15:a8:b4:67:60:
d2:ab:48:8d:48:e7:07:a7:39:7e:05:51:22:b5:f0:
5f:57:69:8b:69:c2:f9:e0:08:a6:01:df:e5:0f:8e:
5a:5d:f8:af:5b:9f:c4:a3:ed:a6:5b:0a:53:1a:bc:
72:fc:1f:ab:00:a6:58:34:8d:00:50:fd:6b:c1:7d:
81:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4E:83:CC:82:CD:5A:C6:ED:F8:38:D4:18:75:7F:01:FC:96:32:56
X509v3 Authority Key Identifier:
keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a5:34:fa:98:63:5b:6c:62:8f:8b:0b:10:77:25:f4:9c:79:
c5:a9:d6:41:16:fb:49:87:ab:9d:51:7a:59:8e:a7:4c:f0:bb:
d8:81:14:8e:89:79:d6:7b:8d:a3:d2:7a:c4:9e:42:5c:2e:79:
f0:bc:74:6f:e9:ac:e7:6b:45:a7:6f:b8:b2:7a:43:0e:07:2a:
e9:c3:ae:db:86:0d:10:64:32:66:a8:5a:a4:bf:20:14:ae:bc:
17:70:d3:33:da:5c:d0:c1:bf:73:33:81:8a:4c:1e:80:a6:73:
3a:14:62:23:64:29:d7:bf:a7:b5:e3:1c:d1:ad:ee:5b:ef:47:
8b:eb:29:1d:e5:cf:8d:0d:38:e3:95:e1:4a:cc:cc:33:af:4d:
dc:af:9e:5d:59:65:a1:35:ae:56:64:31:94:28:5e:0a:5d:87:
cd:70:d3:b3:6f:5a:29:05:65:1e:aa:d5:25:78:3f:e9:f7:7a:
f0:ee:97:cb:4e:31:a5:91:63:04:93:58:a1:fe:a9:59:ca:d2:
59:ad:91:0b:d9:46:f9:75:f4:01:3b:94:ee:28:09:cc:99:64:
a5:09:b3:12:9b:dd:47:b1:5f:fb:49:5e:98:3b:ac:ea:4d:26:
19:d7:03:d6:64:38:6e:97:4c:46:dd:ac:4a:2a:55:50:d3:64:
84:a8:69:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:48:47 2026 by rpki-client