Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
File: u-LMINabMN3hjsDQAs4vkUm_sG0.mft (raw, json)
Hash identifier: IozFfRP78PVY0YreAVmi+LXieDP+lvk+6FtCunuA1j4=
Subject key identifier: A1:3A:26:6C:6F:8B:05:A1:00:48:B1:C4:2A:DB:52:B9:55:07:0F:65
Authority key identifier: BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D
Certificate issuer: /CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
Certificate serial: 019D2704735149E7FB2EB227AEA62CC6B1CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
Manifest number: 0328
Signing time: Wed 25 Mar 2026 22:01:36 +0000
Manifest this update: Wed 25 Mar 2026 22:01:36 +0000
Manifest next update: Thu 26 Mar 2026 22:01:36 +0000
Files and hashes: 1: DXWKP3MB1lGDghFM-NJLvzILH4w.roa (hash: xZDooqBAiwnUkw67O91/SNOlEYAoGsWqbl+tv4wSxjk=)
2: IvYaWiyU4-mF6Hfr6yvUs-TfOx8.roa (hash: vzEeCN8mv8JAbDyh2EAs7UGT1vMJ7VBIlnfY4XE6ETA=)
3: iYgL9YAcXTZTdezPKH7kUPhkmN0.roa (hash: +UrmUxN9VwigyNaXGlHJ5mAa5ZCnHwM1WUcwK+R8j8E=)
4: u-LMINabMN3hjsDQAs4vkUm_sG0.crl (hash: 2vjMSyPVcRC0ExCP2Mbu14S664XeiWeXJZypfqD2dVQ=)
5: yFDUf6JsuvyfXz0jEUOsaieGxCw.roa (hash: zP6gz/6pp44KQYvi0+M6T/CexJqf4xQ7LrlyWEsXUQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:73:51:49:e7:fb:2e:b2:27:ae:a6:2c:c6:b1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
Validity
Not Before: Mar 25 22:01:36 2026 GMT
Not After : Mar 26 22:01:36 2026 GMT
Subject: CN=a13a266c6f8b05a10048b1c42adb52b955070f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:db:84:e4:db:f4:a3:45:c6:dd:14:2a:be:43:
2b:7b:6b:2d:a9:b8:af:c7:00:81:0f:90:78:64:3d:
a4:f2:ec:61:53:81:89:49:f9:96:e9:fb:04:5f:17:
53:a9:2d:0a:ab:17:e8:70:0d:0a:2f:df:64:80:fa:
66:c7:32:b8:d6:81:38:6a:14:4b:d9:cd:8f:1b:d9:
b1:06:99:96:58:51:09:90:5f:52:73:69:cd:c1:70:
d7:69:e5:42:9d:c6:9e:dc:17:f6:6d:5e:4e:ad:d8:
3c:b4:ba:51:c4:47:1d:58:70:e5:60:be:f0:10:06:
e5:26:af:65:55:33:81:93:6d:4a:a7:a9:48:7f:32:
bf:61:57:54:e6:78:53:0e:ef:d2:b3:d3:8a:7e:c6:
f8:1f:50:ae:c5:55:f9:79:91:fb:d8:6f:c3:29:fd:
25:b6:29:be:b0:b7:3b:ed:08:90:f3:b8:61:41:60:
76:24:be:35:32:66:8d:90:56:2c:f7:69:90:d9:4b:
90:9a:56:c3:8e:13:d3:ce:1c:96:05:bb:47:ab:e3:
ac:06:38:ff:24:00:9a:9f:10:82:29:ff:6d:66:dc:
15:d0:f1:65:e1:97:59:5a:f8:5a:46:3b:e7:67:e0:
3b:d3:53:11:c2:cd:d6:3a:17:d6:ed:3e:42:78:f4:
6a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3A:26:6C:6F:8B:05:A1:00:48:B1:C4:2A:DB:52:B9:55:07:0F:65
X509v3 Authority Key Identifier:
keyid:BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:8a:7b:99:2a:df:94:0d:94:92:5a:ff:d1:7a:25:26:31:67:
39:f9:07:da:ed:b1:df:f6:15:84:7b:03:c6:c2:b5:f3:f4:b4:
c0:74:a6:74:b3:42:79:8e:8c:59:6c:3d:0a:cf:b0:e5:5b:88:
ba:dd:ad:fc:1f:52:0b:96:a4:ba:3b:b1:fa:97:26:2c:86:c8:
13:67:40:47:2e:f7:9d:d3:95:b4:76:3a:04:73:2c:b2:65:ac:
f4:50:8a:91:41:68:52:df:0f:3c:94:5b:1e:85:78:d7:b1:9d:
b4:00:2a:73:7a:b3:b3:31:eb:5f:9f:ad:d3:a5:48:a9:95:23:
8c:9e:97:4b:18:5c:33:bb:59:0f:69:8d:49:4c:05:da:63:35:
22:2e:82:92:6b:e6:e0:2c:69:05:0c:0e:a4:d2:a9:02:56:80:
b3:80:ee:fe:5e:b5:7e:20:a4:b8:22:72:5e:26:c6:6b:64:33:
61:63:7a:9c:22:ae:72:52:3e:31:b9:fc:8a:db:79:cf:cc:f1:
f5:76:fd:75:6d:57:dc:fd:3e:77:2a:9d:50:6c:f9:fc:75:bc:
5d:0e:14:24:ff:ae:81:c3:41:e0:d3:a0:51:c4:8b:4f:6a:88:
25:6f:d8:72:a0:5c:c7:ce:8f:94:ca:be:07:51:15:2e:be:ea:
02:c1:2b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:47:27 2026 by rpki-client