Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft
File: LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft (raw, json)
Hash identifier: pT8zBl/Me4LxG3c0cK0C92eIjKN3jps4Oix5iueIU5E=
Subject key identifier: AC:36:F1:73:DD:B6:D8:B0:2F:95:0A:DF:B3:3B:47:A8:3C:D7:CA:E9
Authority key identifier: 2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2
Certificate issuer: /CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2
Certificate serial: 019D2B171CFE06FEB2691F1047C6722BB9B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft
Manifest number: 0FFB
Signing time: Thu 26 Mar 2026 17:00:28 +0000
Manifest this update: Thu 26 Mar 2026 17:00:28 +0000
Manifest next update: Fri 27 Mar 2026 17:00:28 +0000
Files and hashes: 1: LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl (hash: mBS+LEo1gnPYRL4KtmPexep7RreHlqgzeAgUd61IHRs=)
2: ppMWG70dCZCeOuNLM5-3mv7YI8Q.roa (hash: UUUxzcdcUjZU1Xf71QA4yn6XPOOgTpbWk7XiBLQF1jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:1c:fe:06:fe:b2:69:1f:10:47:c6:72:2b:b9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2
Validity
Not Before: Mar 26 17:00:28 2026 GMT
Not After : Mar 27 17:00:28 2026 GMT
Subject: CN=ac36f173ddb6d8b02f950adfb33b47a83cd7cae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d2:e1:51:9b:f6:02:fa:67:25:65:fa:46:bb:
0b:64:eb:27:eb:6d:48:57:cb:84:44:1d:d1:cf:94:
e7:ce:86:90:5a:29:59:7f:1e:24:df:2d:a6:d3:d1:
16:08:c5:d9:a3:ce:19:7f:ab:03:67:b7:21:d6:04:
00:fd:44:0c:88:e5:d3:19:82:c1:36:ed:17:d8:d5:
c6:ce:f5:67:46:1a:fe:cb:28:2b:b3:48:76:cf:bd:
fc:29:f9:4b:95:c7:8c:f4:6a:f5:c6:ad:35:c5:bb:
3a:90:fd:b7:8d:42:c2:15:bc:85:4c:13:37:e6:bf:
5e:0e:32:04:38:c3:8f:64:3d:a4:08:60:b0:7c:f8:
4b:7d:db:8b:15:4f:17:8a:05:01:08:32:1a:da:b4:
60:36:e7:67:18:a9:6a:95:1b:69:5f:64:1f:47:c0:
d8:cf:1d:30:c5:fe:bd:27:c6:0e:e0:86:a1:78:21:
33:52:01:f8:15:0a:bf:6c:02:e0:a1:0d:fb:87:bb:
98:6c:e0:7b:28:f4:bb:10:a6:bb:95:83:d7:bd:08:
0c:e5:41:15:0b:b7:cf:51:9e:1b:bf:37:94:04:69:
25:c5:d7:7f:db:29:c7:69:9c:4c:2e:2f:84:b0:a9:
fd:04:23:ef:50:f2:70:4b:2d:c8:35:ef:7b:bb:36:
79:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:36:F1:73:DD:B6:D8:B0:2F:95:0A:DF:B3:3B:47:A8:3C:D7:CA:E9
X509v3 Authority Key Identifier:
keyid:2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d1:cc:99:04:35:db:87:02:a6:8e:c5:20:57:14:b6:52:a5:
a4:9e:1e:f7:de:ba:88:25:c5:00:56:b1:bf:47:96:47:f4:1c:
6d:5c:0b:2d:4c:8a:a9:b2:fb:d6:03:6a:3e:f8:a4:3a:9c:a0:
fa:a4:1d:f3:f1:24:4e:cd:cb:7d:aa:99:c3:8c:b2:e0:51:54:
6f:8a:85:a3:3c:20:8a:96:6d:9a:33:84:69:9e:bd:8d:5c:9c:
4e:73:c5:91:08:b4:84:0f:d5:0f:a9:8a:43:bf:54:27:37:f4:
7d:26:95:f1:d1:ac:55:90:2d:ae:8d:b9:3a:b3:7c:f8:aa:4d:
3f:10:20:9b:b3:cd:49:ff:29:f7:42:28:83:68:66:6a:0c:cf:
c1:ca:e2:cb:7f:64:83:18:40:22:28:04:ab:d7:6b:c7:53:73:
d9:1d:a8:74:0f:30:3f:43:c0:ac:88:93:15:6c:7c:93:b3:a2:
a0:97:5b:f0:ff:95:4e:b0:9f:28:68:6c:8f:f4:3e:15:49:79:
5e:17:67:41:f6:06:eb:f9:65:14:84:0d:f6:37:17:7e:04:03:
ce:fa:2f:da:0d:e3:ec:78:d0:e6:03:ef:95:bc:2a:73:e7:c3:
ed:90:79:76:ff:80:f5:27:30:5a:0d:37:0b:03:0a:8b:9c:a1:
7b:4e:51:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:03:44 2026 by rpki-client