
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
File: LuUlFj3AHc0wibsdz7CRLnftr5g.mft (raw, json)
Hash identifier: tW82WLMbHVoYbThpHLHLQn9x5TmP/RH93CVTlx4REGQ=
Subject key identifier: 87:39:CD:5C:4B:A0:D0:12:A2:AF:1B:62:5B:60:25:66:2F:6F:31:D5
Authority key identifier: 2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
Certificate issuer: /CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Certificate serial: 019F8E6B7698B0D7BBA0D535F4C87D4FF6F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
Manifest number: 19C4
Signing time: Thu 23 Jul 2026 10:00:35 +0000
Manifest this update: Thu 23 Jul 2026 10:00:35 +0000
Manifest next update: Fri 24 Jul 2026 10:00:35 +0000
Files and hashes: 1: LuUlFj3AHc0wibsdz7CRLnftr5g.crl (hash: gsNhyF2s0TitQUD23FyPXkvKHzD4ZRieKCq4CpM6I5k=)
2: SEDWNZbo3pFvXEliK-mlebM2s8Q.asa (hash: NafQwDuHMOdaxwYRGkcpU9cIEXXXpPwc58+KMEjSHWM=)
3: bJdam9pp9M4KoAXNEJaB74-xkH0.roa (hash: uYdGAOnYTnxesXkdC+SoZNMuyPsRhlrSV+UF+OBopIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6b:76:98:b0:d7:bb:a0:d5:35:f4:c8:7d:4f:f6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Validity
Not Before: Jul 23 10:00:35 2026 GMT
Not After : Jul 24 10:00:35 2026 GMT
Subject: CN=8739cd5c4ba0d012a2af1b625b6025662f6f31d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:d3:84:e6:b5:66:e9:0d:8e:85:d0:80:16:
ea:64:d9:54:6c:92:a7:60:03:88:3f:a8:12:18:60:
d0:c3:31:7c:a9:5a:f7:2c:55:8f:29:e9:f0:ab:8e:
bd:1c:3b:fc:13:d3:80:35:e4:c0:bb:41:6f:98:18:
a7:eb:24:24:40:0a:51:f5:66:a7:c5:a1:68:e6:46:
44:a0:b7:6e:43:7c:98:78:1c:60:3a:18:33:e3:3a:
a8:24:63:c9:61:be:22:6c:a7:ec:fe:fa:8c:2f:88:
1d:68:e8:e3:29:86:80:f0:e8:08:14:93:27:f0:d2:
06:68:92:e8:6b:6d:9d:50:46:78:11:9f:75:ee:74:
ea:9d:e0:be:d6:f4:70:79:16:d4:b6:39:70:96:ae:
b7:84:36:83:69:02:9e:12:c1:f5:c9:ac:be:ab:39:
0b:ed:ae:38:f2:48:87:d7:eb:e8:62:70:45:7f:a6:
62:87:03:15:af:57:fe:8f:8b:77:7b:bb:88:ee:25:
bf:75:bf:4b:1f:a8:ba:6b:22:eb:d0:72:ea:01:63:
ae:27:45:31:6d:b1:14:b2:e1:9d:ae:4a:b2:47:43:
45:21:88:fd:1d:9e:02:d8:42:bc:64:5b:a0:fa:4c:
28:c0:f9:7b:cf:30:57:c2:2c:26:56:91:f4:a3:4f:
45:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:39:CD:5C:4B:A0:D0:12:A2:AF:1B:62:5B:60:25:66:2F:6F:31:D5
X509v3 Authority Key Identifier:
keyid:2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b0:96:7c:68:70:78:6e:49:9a:c8:32:55:a1:e3:fd:af:99:
a3:fe:db:18:9f:39:e3:03:8a:7f:01:d8:4d:73:91:d8:04:5e:
49:8e:19:02:15:93:6c:1a:56:ef:c4:06:36:78:6b:d9:4a:92:
32:2a:db:22:79:e4:44:f3:17:ea:a0:0a:78:c9:9d:45:91:93:
70:0b:04:3f:d7:5f:1b:02:51:66:52:19:39:24:15:e7:24:3a:
11:3d:5c:25:b2:41:7a:b3:77:40:31:f9:78:61:81:10:f5:70:
63:16:63:8b:4c:1a:cf:d8:70:d0:46:64:a9:6d:46:d7:64:d0:
ec:51:44:af:90:68:4c:16:4a:68:46:e6:eb:0d:bc:cd:1e:05:
2d:08:5b:72:fb:f4:d1:34:7b:21:e5:29:ce:01:6d:94:09:21:
3b:5f:2f:06:28:5a:79:fd:6a:25:2e:54:f1:bc:a5:72:5a:8a:
46:10:04:b1:1b:e2:0b:04:15:dd:9f:16:1b:a3:da:34:3b:58:
1e:2b:3b:66:92:92:af:32:ee:3c:8f:68:49:c5:d7:21:c3:10:
9f:e3:e0:f3:31:3b:b8:68:ff:e3:dd:d3:33:62:92:6e:d2:40:
80:f4:67:f6:06:ec:bb:4c:b2:af:ad:cb:e4:c6:bf:37:39:5d:
64:e0:fb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:30 2026 by rpki-client