Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
File: lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft (raw, json)
Hash identifier: mhjtZnOA2SO8lnwcHZW+FiDkyVZ5Dcur8wONu/n0mC4=
Subject key identifier: 5F:50:ED:43:2C:D9:2A:7D:9C:1E:CE:AB:7E:00:1C:3D:DD:14:8D:A4
Authority key identifier: 95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA
Certificate issuer: /CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
Certificate serial: 019E1E357E4613A67FC5AF0B78BDED7F99E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
Manifest number: 0123
Signing time: Tue 12 May 2026 22:01:22 +0000
Manifest this update: Tue 12 May 2026 22:01:22 +0000
Manifest next update: Wed 13 May 2026 22:01:22 +0000
Files and hashes: 1: 59LkX4aXBLUMkLAwAs9-rWbuAm8.asa (hash: Z213VKCdnM5+8ee00xrFiP1MjFtseCc8292AQptoZLA=)
2: lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl (hash: t50ACjktF3wdUEuEeN0Smep3gq8ReMXgMxsQPQR8Nq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:7e:46:13:a6:7f:c5:af:0b:78:bd:ed:7f:99:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
Validity
Not Before: May 12 22:01:22 2026 GMT
Not After : May 13 22:01:22 2026 GMT
Subject: CN=5f50ed432cd92a7d9c1eceab7e001c3ddd148da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2c:4b:66:05:56:66:0a:ed:e8:67:b8:61:0f:
ba:fc:b8:35:00:51:c8:14:76:8e:dc:2e:34:5f:dc:
cb:7b:80:e2:25:a8:ff:3f:3d:03:17:63:ea:60:30:
06:86:61:83:3b:ab:46:fa:29:40:b9:00:58:b9:4e:
98:09:53:36:53:30:c3:12:a4:36:1a:9e:95:05:ae:
b9:de:71:ee:89:34:53:e3:14:b3:0b:81:a1:b9:a6:
5d:de:5c:35:36:47:cb:a6:a2:19:8f:83:88:21:63:
75:1e:27:de:b6:2f:29:e8:9b:d8:b9:21:1e:37:a6:
e8:9c:49:4e:3e:77:e3:06:63:80:e6:64:67:b9:89:
32:44:ac:f9:bf:ab:94:d0:09:6c:35:e4:17:17:20:
31:fd:b6:a8:02:6c:35:92:4d:b4:60:85:bf:39:81:
02:68:57:dd:74:59:fe:de:e1:38:fa:cd:69:7a:3b:
5c:d1:71:35:77:aa:32:70:7b:d5:ad:2c:a1:e7:03:
f3:bc:89:ea:2a:9d:78:16:c9:99:8c:cd:5c:be:2d:
74:cd:13:35:f5:78:76:6a:17:b0:9e:37:18:ba:12:
65:ce:bb:3f:a8:42:05:ad:d6:a3:56:1e:e2:46:e9:
16:f6:59:f7:06:d1:60:33:d7:59:9e:88:9f:b0:b1:
2f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:50:ED:43:2C:D9:2A:7D:9C:1E:CE:AB:7E:00:1C:3D:DD:14:8D:A4
X509v3 Authority Key Identifier:
keyid:95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3a:be:62:ec:ac:2f:bb:ef:40:e5:58:c2:41:93:a8:70:64:
dc:e1:d6:56:1a:06:24:a9:a0:3a:2c:24:bc:0f:3a:df:3a:af:
b2:d6:17:e2:87:50:78:ed:21:a8:27:96:82:62:46:eb:7d:14:
cb:27:66:db:49:4d:4d:19:0b:c6:72:0d:07:e7:6e:41:a2:13:
45:4e:d7:7f:99:8f:3b:08:f6:9d:01:d4:59:bf:92:7d:57:63:
9c:02:71:94:0a:46:d8:8e:c5:05:87:53:73:64:fb:2e:9f:02:
7c:8a:62:10:68:e7:cb:de:ff:ec:ee:bd:37:f1:30:f4:ed:59:
c1:b1:de:03:62:d9:d8:ce:29:56:dd:68:99:81:f3:ac:56:51:
73:8e:4e:39:0f:58:d7:bd:e2:d1:7a:7f:b5:86:e3:64:a2:b7:
46:21:d0:e7:2c:cb:57:fa:7d:e1:c9:bd:a9:2e:90:e0:71:d8:
d4:c6:9e:b0:28:86:8b:cc:00:0e:8d:42:ef:2a:3e:89:b9:71:
5c:a4:44:1a:fb:e5:a0:99:72:23:dc:2e:a1:b5:ac:1e:b6:0c:
5a:89:13:95:ab:54:ec:cb:fd:52:86:4a:3d:6d:a2:9c:e9:5f:
02:b9:f4:98:e7:0e:34:e9:d7:00:61:85:22:43:5a:d6:74:67:
ca:6c:fd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:12:00 2026 by rpki-client