Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
File: mLU7husfGdCufACxMul8A6lL_2E.mft (raw, json)
Hash identifier: gkaH4+Y0QlMKs0uEzTa+1SzriuAY8SMNn8jpCJc8fKI=
Subject key identifier: EB:51:77:51:D5:E1:4A:05:BD:EF:65:BF:9D:A0:48:8D:C6:7F:65:08
Authority key identifier: 98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61
Certificate issuer: /CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61
Certificate serial: 019D273A94705D3825F9A5A5AD501DF6964B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
Manifest number: 160C
Signing time: Wed 25 Mar 2026 23:00:43 +0000
Manifest this update: Wed 25 Mar 2026 23:00:43 +0000
Manifest next update: Thu 26 Mar 2026 23:00:43 +0000
Files and hashes: 1: QxbuEgaCbRaD-slTv7YdUYD7rWQ.roa (hash: d2KUx7esd7yDYioAhXgs0Rm4+uRrblcxg8RCa82DopQ=)
2: mLU7husfGdCufACxMul8A6lL_2E.crl (hash: lV6AH/GbM5jEXiaHJMo7F+Y+FXl0IkQroVSgTpdpZdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:94:70:5d:38:25:f9:a5:a5:ad:50:1d:f6:96:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61
Validity
Not Before: Mar 25 23:00:43 2026 GMT
Not After : Mar 26 23:00:43 2026 GMT
Subject: CN=eb517751d5e14a05bdef65bf9da0488dc67f6508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:06:39:5c:59:69:60:3a:2e:78:0d:89:cb:8f:
2c:4c:37:0e:6e:51:b2:38:4e:c7:0c:42:52:92:99:
ff:a6:04:28:c0:0b:27:0e:07:d7:31:0a:53:bc:20:
f2:39:81:d2:e7:54:7e:7f:f7:2d:84:c6:4e:60:f2:
8b:98:fa:da:23:72:6b:27:11:ee:12:5f:6e:0b:4b:
d2:f0:04:9a:ac:49:de:fd:33:92:b6:8b:69:bc:ba:
b6:ab:55:fd:83:a7:35:f5:45:c2:84:17:a9:1a:e7:
ea:60:c9:6f:7c:f8:54:cd:c2:0f:6b:74:94:15:aa:
91:c0:83:a5:5e:dd:47:72:e4:80:43:c2:f3:7e:77:
c8:25:dc:a2:32:6a:6e:74:5b:57:58:f2:91:4c:37:
64:0d:61:0b:76:ca:59:e5:d2:1b:2a:d7:4e:0d:70:
df:32:71:1a:5a:ee:aa:f7:56:4a:29:ed:e0:17:b7:
15:4c:2d:f5:5a:a6:0f:09:f2:6a:9f:19:f0:f7:5e:
69:06:59:96:22:64:97:63:2d:c2:71:4c:fd:5f:c5:
50:18:fb:a0:fe:77:ac:1e:19:dc:27:62:8e:e2:19:
56:9d:30:33:7d:40:de:85:0b:71:5a:d5:7a:cb:56:
f9:54:d7:32:2e:91:fe:36:8c:e7:45:33:d9:3c:7a:
a7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:51:77:51:D5:E1:4A:05:BD:EF:65:BF:9D:A0:48:8D:C6:7F:65:08
X509v3 Authority Key Identifier:
keyid:98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:6d:59:f5:ac:d1:15:6f:26:3c:c9:88:aa:77:36:d5:d8:70:
03:ad:90:e7:de:90:90:01:3e:3a:ce:59:a7:ae:a8:45:90:1f:
c4:fa:99:17:4e:44:6a:58:e5:b5:81:df:e4:38:88:4e:d0:cd:
04:8d:06:b0:ee:5c:2d:df:0f:f8:78:32:ed:fb:d4:b7:4a:66:
50:18:db:8d:da:a4:eb:1a:1d:fb:3f:7f:4d:4e:40:7b:54:1e:
2e:07:da:e0:a9:a0:e1:09:2b:96:a6:c3:1d:68:25:72:39:31:
f0:7d:79:9e:0a:c3:5b:e7:e4:b3:a2:0b:7d:a0:44:8e:60:dc:
99:84:a3:77:e6:ce:d0:86:77:13:74:e2:41:19:c3:51:51:1f:
a4:ba:e2:03:f2:72:a2:1e:4b:b8:5d:09:f4:fb:6e:08:8f:0e:
5f:19:d9:d3:88:8a:d9:c5:fe:49:31:97:eb:ac:76:9c:07:92:
6e:a6:1b:35:0b:b2:51:90:df:ab:83:83:65:77:8f:f9:13:f2:
e9:1c:a2:87:98:1d:bb:d0:67:78:6d:7a:34:5d:70:d9:65:ad:
cb:a3:b8:12:80:6f:f0:f2:8f:78:0e:63:14:e1:56:1f:2b:28:
c0:c5:c8:ec:8d:0e:d0:ca:77:74:a3:88:a1:c4:82:a3:dd:52:
be:23:c1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:55:11 2026 by rpki-client