Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
File: lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft (raw, json)
Hash identifier: 1NAeZGLk1qXtatP915PCSnxufXanrrMVeoDbd0hRKdQ=
Subject key identifier: 4F:A2:A8:1C:6E:4D:7E:AF:06:EC:68:AE:F2:CF:ED:D0:53:3E:E0:F4
Authority key identifier: 95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA
Certificate issuer: /CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
Certificate serial: 019D251583106E7C0C87C2AC968ED87412C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
Manifest number: A2
Signing time: Wed 25 Mar 2026 13:00:59 +0000
Manifest this update: Wed 25 Mar 2026 13:00:59 +0000
Manifest next update: Thu 26 Mar 2026 13:00:59 +0000
Files and hashes: 1: 59LkX4aXBLUMkLAwAs9-rWbuAm8.asa (hash: Z213VKCdnM5+8ee00xrFiP1MjFtseCc8292AQptoZLA=)
2: lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl (hash: FZE5GKQYIyhEBC074ztuSjZ9MpmhCrvBRaJYqn+QlYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:15:83:10:6e:7c:0c:87:c2:ac:96:8e:d8:74:12:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
Validity
Not Before: Mar 25 13:00:59 2026 GMT
Not After : Mar 26 13:00:59 2026 GMT
Subject: CN=4fa2a81c6e4d7eaf06ec68aef2cfedd0533ee0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:df:d3:d4:83:5e:f6:48:33:2a:74:89:bd:
59:08:07:0a:8b:8a:b8:cc:3d:cc:c9:3e:36:fb:de:
ac:e6:9d:e9:b3:fe:54:ba:51:fb:00:26:6c:e8:32:
ee:12:94:c4:0b:8f:6d:90:ec:d8:97:5f:85:1a:50:
45:af:fc:f9:4f:8a:f5:19:b6:eb:77:c7:19:ab:b9:
5e:e4:92:d1:e1:e1:76:e6:77:84:e2:14:0f:ef:43:
3a:e1:cb:f8:09:60:f1:81:02:e4:22:71:54:b9:72:
74:e3:52:cc:a9:e0:ee:56:5c:82:99:7e:8e:39:b3:
28:8c:04:8d:83:e7:2c:3d:8f:fa:d0:3a:15:68:e4:
5f:9b:cc:08:7d:94:30:8c:7e:97:39:58:b0:74:ce:
6a:1c:9e:2c:0a:f6:2d:57:75:bc:eb:16:ad:2c:76:
41:93:fd:70:9e:f6:ee:cc:62:59:89:7c:e1:49:1d:
52:91:58:cb:2b:38:9f:a5:20:db:01:81:dc:11:63:
5b:da:a5:a8:b9:02:c6:bb:46:95:ae:1f:77:09:9e:
e8:ea:fb:9c:5c:9f:a8:8a:be:81:90:1a:3c:3c:c7:
51:cc:5a:e1:1c:50:7c:24:b9:8c:8f:a9:b6:22:71:
5f:c5:60:c3:a8:e7:f5:8a:ef:13:87:00:ef:46:08:
d3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A2:A8:1C:6E:4D:7E:AF:06:EC:68:AE:F2:CF:ED:D0:53:3E:E0:F4
X509v3 Authority Key Identifier:
keyid:95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ae:03:64:2d:d6:f8:a3:4c:f8:9c:a8:b9:5a:f0:10:83:5e:
96:e3:2a:99:2d:c7:af:e2:44:7c:57:73:bf:13:05:d3:4f:8d:
bf:bf:9a:4b:8b:26:95:04:87:75:79:b5:6f:b3:35:b3:af:7e:
ac:d0:b0:fd:e2:c8:80:9e:0e:d2:a8:94:fc:1a:88:91:05:21:
8a:10:bc:2c:74:19:90:44:8d:24:f1:2d:74:d1:b8:d9:84:19:
64:a6:76:46:79:9c:9e:fc:8c:e4:34:ca:3a:0a:f0:e5:a7:9f:
1b:99:01:ed:e9:b6:23:c7:58:a8:1c:07:0a:46:ab:f7:5a:1c:
1f:9d:63:78:7e:ae:e7:d5:33:b1:13:63:c6:c0:61:17:23:5c:
cf:85:3f:5a:fe:ef:74:b5:d9:23:87:1d:19:34:c4:0c:5d:e4:
90:f5:a3:55:8c:14:35:f5:09:f6:dd:d3:6f:d9:ec:fb:84:c4:
38:c8:f0:15:11:a5:ff:e9:49:c6:e2:cd:28:1c:f4:2f:1d:36:
ed:c1:da:cd:e1:62:ea:5f:7a:3d:b7:ee:03:c4:8c:07:25:62:
ee:53:b8:a2:62:f2:49:cd:b1:11:0c:3d:2f:dd:cd:16:42:25:
31:d3:c0:86:98:35:87:28:5b:e5:df:be:88:5b:9c:ca:75:9b:
66:dc:c6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:37 2026 by rpki-client