Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
File: lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft (raw, json)
Hash identifier: hjz9Dlpx5c21j/+ePqeNh8sqibm76Kv3kYI97kNtmGw=
Subject key identifier: 78:FD:C3:E9:A3:4C:FA:48:48:2A:F2:C0:B6:5D:36:1C:1F:24:9E:92
Authority key identifier: 95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA
Certificate issuer: /CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
Certificate serial: 01A0D94C8ACA451B1F560C41D0D68D6E5E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
Manifest number: 028D
Signing time: Fri 25 Sep 2026 16:01:07 +0000
Manifest this update: Fri 25 Sep 2026 16:01:07 +0000
Manifest next update: Sat 26 Sep 2026 16:01:07 +0000
Files and hashes: 1: 59LkX4aXBLUMkLAwAs9-rWbuAm8.asa (hash: Z213VKCdnM5+8ee00xrFiP1MjFtseCc8292AQptoZLA=)
2: lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl (hash: FlG5wDoaoFrORDkhxRDnqqcXFVecB8lcZHPW4dNXKdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:8a:ca:45:1b:1f:56:0c:41:d0:d6:8d:6e:5e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
Validity
Not Before: Sep 25 16:01:07 2026 GMT
Not After : Sep 26 16:01:07 2026 GMT
Subject: CN=78fdc3e9a34cfa48482af2c0b65d361c1f249e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:47:88:e1:22:d8:fc:b3:92:32:e1:87:d9:
c9:19:94:23:9e:9f:91:42:83:7f:80:a8:e6:74:d6:
1d:6b:1e:01:06:cc:71:31:be:96:81:25:d2:5c:74:
fe:af:ae:3a:4a:b2:da:72:bf:80:2d:a4:9c:84:24:
35:6f:cd:16:31:27:02:cd:88:ac:b3:dc:dc:02:7e:
cf:5f:86:f4:0c:30:eb:0b:ed:df:08:8c:c2:a5:1c:
1c:8e:0a:fb:0e:96:d1:cb:17:6a:2b:be:b8:aa:a8:
a2:03:26:aa:e1:72:4f:95:b9:05:0b:6f:b5:75:13:
fe:8f:58:ad:5e:e7:dc:10:df:8d:e7:df:a6:b9:e0:
d7:e3:fd:8f:ce:09:d5:14:eb:74:cf:2a:e8:76:62:
cb:e6:3e:07:a7:95:d9:ca:dd:08:e1:e8:52:0b:c2:
06:d5:e4:21:63:08:6e:40:0a:66:8d:4d:9b:ba:89:
f6:f6:de:b6:b2:57:85:b0:48:a0:3e:0c:da:94:3d:
d3:c6:f5:20:24:cb:bf:5b:f5:d8:43:4f:b7:5d:41:
c1:cd:dc:6c:2d:c6:b9:a9:03:e2:98:43:99:9e:11:
20:2e:6f:6d:87:85:10:d9:09:cb:2a:4f:c4:ff:84:
f0:8f:40:83:42:5b:54:01:83:65:34:31:98:d6:2c:
29:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FD:C3:E9:A3:4C:FA:48:48:2A:F2:C0:B6:5D:36:1C:1F:24:9E:92
X509v3 Authority Key Identifier:
keyid:95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:43:71:ee:19:f4:29:3e:7e:e9:a7:ab:4a:2a:0f:d1:da:b9:
72:00:68:69:7e:3c:2b:7e:a8:e8:e4:d7:b9:06:43:15:08:0d:
21:e9:cf:34:df:a2:01:be:36:ba:75:90:d8:42:df:6e:a9:5f:
53:5d:4e:3e:49:ab:8d:a4:9f:96:71:1e:ba:61:3b:db:bc:dc:
d4:5b:1d:a9:ab:64:27:32:a0:19:e8:2c:c5:d1:e9:ff:1d:4b:
80:89:14:9c:56:9e:c4:a4:37:87:8b:b3:5d:c2:60:44:9f:29:
bd:e5:22:a8:76:c7:9c:83:29:c3:70:8d:83:01:a0:71:2a:f8:
25:3d:8e:bb:6b:3a:9f:93:bf:0a:d2:72:d1:ec:03:eb:f0:31:
68:cd:68:54:80:b4:aa:f0:65:79:45:79:c2:8a:77:8d:60:e8:
f3:40:d9:7a:20:b2:ce:91:7b:aa:27:d3:ec:16:fd:ae:b9:a0:
26:b5:98:b5:de:96:95:79:34:32:da:9f:ce:65:ea:f3:ae:a2:
8f:81:1c:9c:bc:f5:30:32:51:2b:ad:5b:fd:af:68:d5:c3:d0:
34:e9:c3:66:12:21:29:63:48:9e:54:11:96:de:7f:54:84:c1:
87:0f:5d:71:5b:e4:05:9a:70:8a:6b:52:0a:be:37:fe:87:48:
26:7b:ea:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:07:39 2026 by rpki-client