Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
File: LUUkZslYX29anMHDDo17Fu1HSkg.mft (raw, json)
Hash identifier: A9d6T9GlO20v/3Y1oz4iCDGomqeRjnbwUYKA/CpwXLQ=
Subject key identifier: 04:43:1D:6B:37:4B:16:87:0E:78:46:55:43:64:04:72:C0:A2:C3:E3
Authority key identifier: 2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48
Certificate issuer: /CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48
Certificate serial: 019D2771F4A92897512CDCC7FAD277231C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
Manifest number: 08F9
Signing time: Thu 26 Mar 2026 00:01:12 +0000
Manifest this update: Thu 26 Mar 2026 00:01:12 +0000
Manifest next update: Fri 27 Mar 2026 00:01:12 +0000
Files and hashes: 1: LUUkZslYX29anMHDDo17Fu1HSkg.crl (hash: JTVMHyRgw21Qjys3JQ/vnFTXyB1mOS9Q1ZPr+sVq54M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f4:a9:28:97:51:2c:dc:c7:fa:d2:77:23:1c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48
Validity
Not Before: Mar 26 00:01:12 2026 GMT
Not After : Mar 27 00:01:12 2026 GMT
Subject: CN=04431d6b374b16870e78465543640472c0a2c3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:af:46:05:03:be:cf:25:47:33:f7:c6:35:7e:
e4:5e:a9:75:9d:01:0b:c4:5f:2f:7e:a3:be:59:72:
6c:04:f3:e2:49:cc:47:33:0f:18:5f:7a:e6:e8:9c:
34:6e:7c:c5:ee:9d:6b:63:5b:d4:de:36:e4:e8:8b:
8d:14:a5:10:89:73:85:9f:93:d1:49:cb:d8:e8:34:
f6:e8:5b:92:85:28:83:e7:5a:5b:53:22:3c:4e:60:
a9:ff:23:94:ac:9a:30:86:c5:9c:f0:96:29:74:5c:
54:16:b0:16:00:a7:b1:e6:14:6b:9e:84:85:55:6c:
bc:f0:4b:80:fd:be:88:1b:4e:ba:89:1a:2e:95:b9:
da:78:e2:56:a9:c9:69:de:04:0b:bc:4b:05:43:16:
80:55:bf:4a:f5:8f:88:34:67:1d:86:ea:27:4f:9f:
66:db:01:d4:1b:8a:d3:0b:ac:63:ff:2b:f5:49:04:
be:2f:d6:ac:99:26:b9:cf:9a:0f:4f:f4:f0:b4:45:
4c:eb:88:3b:3d:2b:91:d7:f3:8e:e7:67:70:87:3c:
78:50:ee:00:d5:ee:23:56:43:2b:c9:5e:78:3d:2c:
65:1d:34:66:2a:d0:c7:d5:cb:c3:49:4e:96:5a:1e:
07:ed:4c:25:42:a7:8a:f4:b1:14:95:1c:4d:94:91:
fd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:43:1D:6B:37:4B:16:87:0E:78:46:55:43:64:04:72:C0:A2:C3:E3
X509v3 Authority Key Identifier:
keyid:2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:9b:15:20:d6:54:17:ac:e8:86:38:30:96:94:6b:9c:2e:be:
89:95:ed:bf:70:d4:71:a3:7d:e1:5f:5c:7a:bf:e6:5b:fb:98:
5a:43:f0:bb:3d:df:45:6c:b9:a5:fc:28:37:72:5a:4d:ea:e4:
70:2f:ac:93:90:ac:30:c5:ca:b7:de:9d:fb:77:a7:09:9b:72:
57:12:97:29:4f:99:5d:e2:c9:1a:bf:07:9e:65:1d:58:02:11:
ff:7a:35:e7:a7:b4:17:b7:f4:7f:ba:4c:7d:28:4e:9d:2e:3d:
26:7c:69:7c:af:d6:fe:8b:d8:1d:7c:64:f9:0f:91:fe:79:af:
2b:77:39:5a:d5:1c:7f:9a:d6:79:0a:0a:10:e6:b7:a7:88:68:
30:69:ed:b5:5c:41:c5:c2:f4:ad:40:f3:7a:3f:1d:2f:17:32:
7a:95:ef:02:8f:ef:80:fc:38:ea:5e:23:06:87:72:7d:f9:fe:
d1:5a:b1:56:8b:77:cb:7a:d9:2d:69:f7:54:4c:be:5d:2c:f7:
c5:3b:ff:7e:d8:ca:ea:a1:7a:be:01:3b:78:b2:0f:8f:5b:2d:
65:a3:eb:13:58:db:dd:96:db:d2:04:ca:da:ed:8b:84:68:58:
d5:b3:d4:ee:0d:ff:bd:45:11:f9:71:07:95:b5:b6:e0:24:67:
c3:42:f0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:13 2026 by rpki-client