Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
File: LuUlFj3AHc0wibsdz7CRLnftr5g.mft (raw, json)
Hash identifier: 46Wn99lOhGo1onUbe9f3yN2OjYmO+6uYcH6E0NCrqfo=
Subject key identifier: 26:C2:7B:FA:D1:6B:A0:24:4A:B3:5F:B2:44:09:CB:23:DC:91:D9:F8
Authority key identifier: 2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
Certificate issuer: /CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Certificate serial: 01A0D4CB0AD7E452FE75428B0F753C995DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 19:01:11 +0000
Manifest this update: Thu 24 Sep 2026 19:01:11 +0000
Manifest next update: Fri 25 Sep 2026 19:01:11 +0000
Files and hashes: 1: LuUlFj3AHc0wibsdz7CRLnftr5g.crl (hash: EAUujKBvJwb51JRkJXkOcc6ow96GVTzcwxCIWiKDT7Y=)
2: SEDWNZbo3pFvXEliK-mlebM2s8Q.asa (hash: NafQwDuHMOdaxwYRGkcpU9cIEXXXpPwc58+KMEjSHWM=)
3: bJdam9pp9M4KoAXNEJaB74-xkH0.roa (hash: uYdGAOnYTnxesXkdC+SoZNMuyPsRhlrSV+UF+OBopIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:0a:d7:e4:52:fe:75:42:8b:0f:75:3c:99:5d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Validity
Not Before: Sep 24 19:01:11 2026 GMT
Not After : Sep 25 19:01:11 2026 GMT
Subject: CN=26c27bfad16ba0244ab35fb24409cb23dc91d9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:c5:5f:26:dd:cf:c3:0b:4c:03:5d:ad:17:
fd:23:ba:97:e7:ac:8e:02:9f:3f:2e:9e:0a:1a:76:
ad:57:2e:1d:81:86:a8:be:d0:03:aa:c3:cc:d7:7d:
d2:0c:23:10:4d:d5:d8:7f:d0:f1:1d:39:35:a0:40:
a6:5c:eb:36:b9:eb:7e:75:ab:99:24:e3:5a:90:34:
bd:5a:58:32:34:6e:ce:b4:df:55:86:c5:3d:d8:30:
13:f8:b0:67:f2:5e:b6:aa:f8:82:02:86:20:7c:78:
2b:aa:b2:47:12:5a:dc:19:ce:46:16:2d:c3:d0:b3:
6d:33:85:c9:2b:eb:fd:b2:df:4d:70:c7:9b:b2:67:
62:62:9e:a6:fe:d0:34:d5:7f:6c:34:74:45:b2:71:
c8:08:fe:de:50:b7:78:56:3f:f4:24:97:c1:2d:2a:
a6:99:47:6a:6a:51:52:4a:e9:24:70:06:36:4b:34:
e8:79:7e:96:59:d2:61:ca:e6:1a:c0:4b:81:30:bf:
45:27:32:ea:8e:45:5c:30:3e:39:9c:04:a0:34:f8:
2f:bc:e1:d3:8f:2a:d7:3d:e3:60:7c:0d:88:36:db:
46:16:2c:46:6b:7e:00:de:1e:70:86:f0:a3:b5:d1:
02:e8:cd:4b:b6:72:38:f8:d1:58:40:68:27:60:1c:
11:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C2:7B:FA:D1:6B:A0:24:4A:B3:5F:B2:44:09:CB:23:DC:91:D9:F8
X509v3 Authority Key Identifier:
keyid:2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:fb:bc:78:11:14:7f:36:08:f5:76:f0:b6:3e:04:96:3e:7b:
66:61:c3:6f:02:49:50:3d:42:76:94:c8:a8:1d:a5:e9:35:4e:
f0:41:56:85:23:8e:fe:eb:a4:e7:e8:22:aa:ad:54:fc:3c:bf:
14:d2:5a:4a:75:74:11:45:86:30:51:51:2f:37:ea:3e:91:1a:
e8:38:eb:56:89:84:72:d5:b0:33:05:09:5c:de:4c:89:04:6d:
39:fd:18:4c:ae:9b:95:98:53:a3:c6:21:77:db:3e:21:4b:0a:
5f:65:0a:73:2a:f6:6f:f8:38:e6:8c:f6:bf:88:b7:a8:d0:c0:
91:f5:37:9d:23:40:30:01:e0:5e:0c:ab:62:ad:0d:2f:e4:3f:
0c:23:67:d5:04:51:7b:82:52:fb:0f:71:c6:6c:88:cb:6a:86:
db:75:b5:76:e0:da:3f:64:17:e8:c1:cf:8d:e0:38:14:e1:e1:
45:02:41:94:fe:df:c2:8a:c4:6b:61:32:0b:b5:e0:c3:51:75:
b1:29:0f:8e:d4:f2:00:8b:2c:f4:90:3b:b0:a2:7a:03:fa:9b:
26:fa:b4:ef:8d:26:8d:0a:71:8f:d6:9d:56:93:42:92:67:b3:
18:0f:b3:e3:ae:6d:a5:14:2d:5a:7a:b1:e2:c5:61:2b:69:f6:
41:30:ad:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUywrX5FL+dUKLD3U8mV3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTUyNTE2M2RjMDFkY2QzMDg5YmIxZGNmYjA5MTJlNzdl
ZGFmOTgwHhcNMjYwOTI0MTkwMTExWhcNMjYwOTI1MTkwMTExWjAzMTEwLwYDVQQD
EygyNmMyN2JmYWQxNmJhMDI0NGFiMzVmYjI0NDA5Y2IyM2RjOTFkOWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRTFXybdz8MLTANdrRf9I7qX56yO
Ap8/Lp4KGnatVy4dgYaovtADqsPM133SDCMQTdXYf9DxHTk1oECmXOs2uet+dauZ
JONakDS9WlgyNG7OtN9VhsU92DAT+LBn8l62qviCAoYgfHgrqrJHElrcGc5GFi3D
0LNtM4XJK+v9st9NcMebsmdiYp6m/tA01X9sNHRFsnHICP7eULd4Vj/0JJfBLSqm
mUdqalFSSukkcAY2SzToeX6WWdJhyuYawEuBML9FJzLqjkVcMD45nASgNPgvvOHT
jyrXPeNgfA2INttGFixGa34A3h5whvCjtdEC6M1LtnI4+NFYQGgnYBwRRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbCe/rRa6AkSrNfskQJyyPckdn4MB8GA1UdIwQY
MBaAFC7lJRY9wB3NMIm7Hc+wkS537a+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHVVbEZqM0FIYzB3aWJzZHo3Q1JMbmZ0cjVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zNWNmN2ItMDE0NC00NTA3LWJmMzkt
Y2M2OGRjODU0ZTg4LzEvTHVVbEZqM0FIYzB3aWJzZHo3Q1JMbmZ0cjVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8zNWNmN2ItMDE0NC00NTA3LWJmMzktY2M2OGRjODU0ZTg4
LzEvTHVVbEZqM0FIYzB3aWJzZHo3Q1JMbmZ0cjVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACPu8eBEU
fzYI9Xbwtj4Elj57ZmHDbwJJUD1CdpTIqB2l6TVO8EFWhSOO/uuk5+giqq1U/Dy/
FNJaSnV0EUWGMFFRLzfqPpEa6DjrVomEctWwMwUJXN5MiQRtOf0YTK6blZhTo8Yh
d9s+IUsKX2UKcyr2b/g45oz2v4i3qNDAkfU3nSNAMAHgXgyrYq0NL+Q/DCNn1QRR
e4JS+w9xxmyIy2qG23W1duDaP2QX6MHPjeA4FOHhRQJBlP7fworEa2EyC7Xgw1F1
sSkPjtTyAIss9JA7sKJ6A/qbJvq0740mjQpxj9adVpNCkmezGA+z465tpRQtWnqx
4sVhK2n2QTCtsg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 01:19:22 2026 by rpki-client