Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
File: LUFhUhEtrymCRCUnsPlE5IKFgy4.mft (raw, json)
Hash identifier: UzrxUVXsMB9lo67UpfNzxjEquzYSycE0szMmx7Iqh4U=
Subject key identifier: 56:AA:79:42:FC:7A:57:DD:E6:DE:3A:30:8A:FC:DF:E1:07:42:32:F0
Authority key identifier: 2D:41:61:52:11:2D:AF:29:82:44:25:27:B0:F9:44:E4:82:85:83:2E
Certificate issuer: /CN=2d416152112daf2982442527b0f944e48285832e
Certificate serial: 019D284E17315DCDDA0B670F682235FDF85A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
Manifest number: 080A
Signing time: Thu 26 Mar 2026 04:01:39 +0000
Manifest this update: Thu 26 Mar 2026 04:01:39 +0000
Manifest next update: Fri 27 Mar 2026 04:01:39 +0000
Files and hashes: 1: LUFhUhEtrymCRCUnsPlE5IKFgy4.crl (hash: PQALL6I8uiApBiruRy56/YkotcpmywBQ0873LjZzoq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:17:31:5d:cd:da:0b:67:0f:68:22:35:fd:f8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d416152112daf2982442527b0f944e48285832e
Validity
Not Before: Mar 26 04:01:39 2026 GMT
Not After : Mar 27 04:01:39 2026 GMT
Subject: CN=56aa7942fc7a57dde6de3a308afcdfe1074232f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:1e:c8:23:f3:b5:35:98:85:8f:e4:d4:2b:
8e:36:8a:90:49:5f:b6:0b:ca:08:80:33:cc:3f:04:
c6:7e:8f:e8:55:bc:ea:1e:e7:f5:3f:d8:6f:bf:39:
d8:5c:a3:a8:06:9d:6f:2b:54:92:37:db:08:2d:1d:
0a:38:07:47:95:f0:4b:9a:5a:a6:6a:33:ef:b7:4a:
27:9b:e9:09:24:a6:a8:74:eb:20:6c:7c:9f:97:55:
60:eb:67:a6:9c:b2:14:4d:39:68:8e:81:18:2f:ea:
53:82:0d:82:87:07:ff:f9:1d:c8:c5:67:fc:5e:c4:
2e:a4:5d:16:2f:66:12:14:3c:61:8a:07:48:2d:d7:
a3:04:b2:45:d9:64:f6:07:44:49:67:9d:fc:cb:37:
98:80:e0:14:da:3f:b6:17:08:10:9b:bb:1b:1b:0e:
a9:58:23:f8:67:cd:17:6d:82:66:51:47:78:11:1b:
df:02:46:e7:68:40:26:12:d3:14:c1:d6:17:dc:c0:
27:05:00:0d:9d:44:26:3e:dc:36:74:f7:0e:22:15:
1f:42:0e:06:93:6f:5a:9f:c6:ef:1d:ac:96:57:d2:
a6:41:68:eb:39:94:5b:25:76:f8:31:76:7d:c3:55:
39:91:49:00:97:99:46:be:ac:e3:ea:ec:92:78:40:
71:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AA:79:42:FC:7A:57:DD:E6:DE:3A:30:8A:FC:DF:E1:07:42:32:F0
X509v3 Authority Key Identifier:
keyid:2D:41:61:52:11:2D:AF:29:82:44:25:27:B0:F9:44:E4:82:85:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ea:40:62:2c:93:b6:74:08:24:b2:97:d5:95:ed:0e:0c:38:
90:26:82:d0:61:a5:b8:c3:b5:d3:5e:26:da:c0:26:03:fd:2d:
c8:06:0b:be:7c:23:58:88:e8:a9:f2:08:b0:c0:77:ae:66:07:
62:8a:24:35:9a:12:aa:bc:3a:04:1f:3a:fe:94:ae:d1:1c:7c:
46:ff:1e:aa:ea:e3:8f:6e:4a:e6:51:a1:8f:95:1e:92:61:b2:
66:da:5c:d9:8b:8e:cc:aa:cc:f4:8f:20:3a:51:e5:69:94:bf:
3e:98:66:5a:d7:3e:61:46:26:69:a6:ab:33:66:05:3a:63:db:
48:b8:fd:15:2a:ec:5d:cc:f4:cb:0a:51:bf:1a:d8:f4:c5:1f:
4c:87:5b:1d:c6:cb:44:fd:e3:42:38:73:8e:32:b5:e5:8a:bc:
1b:31:f5:c7:5d:75:20:9b:64:b3:8c:4a:1f:ce:68:7f:fa:69:
04:60:62:cf:b4:02:20:55:c0:d7:0c:ef:1c:7f:22:64:07:ec:
94:c5:b6:e4:5a:79:3c:f9:1d:7e:f6:fa:16:6b:d0:d8:82:81:
33:23:db:07:86:6a:fd:27:bb:6c:b4:96:a7:de:6e:e9:23:e8:
b4:26:eb:dd:5e:7c:08:1e:42:c0:45:24:87:79:70:1f:0f:77:
66:d8:09:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:10 2026 by rpki-client