Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
File: lUqTUetm2NhiTiDRafdmty9YrMA.mft (raw, json)
Hash identifier: Ev+qmYnWQsZ232yhxiK9/uO4EHcuMTgFLYs3iy9pdwA=
Subject key identifier: 95:B0:9B:9D:F9:35:FC:8C:3D:5B:25:9D:60:FE:2F:61:BC:E9:B6:86
Authority key identifier: 95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
Certificate issuer: /CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Certificate serial: 019E1E6C50A29D3E3465845CF112E00A17F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
Manifest number: 04BE
Signing time: Tue 12 May 2026 23:01:15 +0000
Manifest this update: Tue 12 May 2026 23:01:15 +0000
Manifest next update: Wed 13 May 2026 23:01:15 +0000
Files and hashes: 1: Cqp-7RFmWIRhPlRItz8b7WniVM8.roa (hash: WN3y68b5/hiQoqHDZtfcy65p4h2IyPgin5+Be6vlaV0=)
2: lUqTUetm2NhiTiDRafdmty9YrMA.crl (hash: lFnAuiD/7j4CZ7BmhXcc9W3DJaoZB1qU135eEGGPY+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:50:a2:9d:3e:34:65:84:5c:f1:12:e0:0a:17:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Validity
Not Before: May 12 23:01:15 2026 GMT
Not After : May 13 23:01:15 2026 GMT
Subject: CN=95b09b9df935fc8c3d5b259d60fe2f61bce9b686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:7f:cb:2a:62:46:a8:4e:c2:a6:bb:f3:d8:
04:f8:08:fb:d8:b1:19:27:9d:58:d3:1e:b3:48:98:
f9:dd:b6:43:d8:53:ec:dd:ed:d4:94:55:4f:a8:f3:
ae:33:c5:0c:c9:87:91:45:a2:12:fe:d6:51:9b:df:
91:75:6d:e8:50:0c:eb:24:bc:de:3f:26:1f:f7:08:
01:25:e4:3b:64:5b:45:38:dc:f8:89:a5:9a:f7:c6:
00:d0:87:48:e4:6f:85:22:8e:a0:26:1f:f3:33:51:
c9:a3:69:a6:88:06:b7:42:22:70:f8:d1:aa:58:00:
8c:1a:56:bf:15:00:52:90:9f:6c:66:05:81:cb:83:
c8:46:2c:eb:fe:5d:a2:85:99:bd:83:e4:31:84:0f:
9c:a6:af:18:cc:39:70:6e:0b:5f:74:05:92:b4:fa:
44:9b:95:c8:8c:32:23:97:9c:b4:5f:40:64:a4:fc:
f5:6d:46:24:41:0b:01:12:cf:07:d4:5f:5c:76:b3:
53:b1:87:bd:60:d2:26:b2:03:9e:5b:83:c8:05:af:
92:9c:0c:13:7b:70:6c:93:4b:cd:fc:86:9e:d3:51:
9c:1e:96:91:25:be:af:90:d3:10:cb:32:80:6a:51:
69:72:9f:3b:87:dc:9d:16:76:a1:8d:0a:26:9d:45:
4d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B0:9B:9D:F9:35:FC:8C:3D:5B:25:9D:60:FE:2F:61:BC:E9:B6:86
X509v3 Authority Key Identifier:
keyid:95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:34:8b:8f:41:2e:8f:6c:62:40:fd:42:e7:27:de:d8:ef:41:
09:f1:fd:cc:32:b3:a4:4a:98:77:b6:8e:4b:61:cf:10:38:67:
63:a6:60:96:b2:7d:89:7c:9b:3d:18:e5:5e:c6:82:9e:46:1d:
12:e8:2b:e3:24:5e:d7:1b:39:22:bb:01:ec:a3:ba:a5:a8:b4:
8f:e8:b3:62:51:b5:d9:07:d7:be:c6:93:fc:4d:34:ae:01:3e:
9a:e4:c2:28:9f:85:32:d6:30:87:95:e9:3b:3e:db:5d:3b:20:
e3:bf:37:69:09:d4:64:23:fb:80:80:d9:c9:83:08:13:a7:83:
5e:1c:cd:4b:86:dc:fb:b2:c1:80:5e:fd:5f:24:23:f9:b9:93:
9d:0a:16:ec:37:d7:f4:3a:a6:c2:b6:b6:4f:68:9b:6e:1e:69:
b0:5c:19:c9:a1:a9:54:02:2d:a3:36:ae:ee:41:60:82:38:68:
c6:3c:de:98:00:12:33:0e:f3:07:bf:9a:53:f4:4c:2c:0c:1a:
a1:44:4f:0a:8e:48:f2:53:2e:d5:56:a9:14:22:b1:c6:5a:fa:
36:a7:33:95:e5:03:81:ab:56:79:ca:99:48:07:e0:e4:f7:b7:
6a:87:34:2c:66:5f:bc:db:bd:7a:de:81:9e:2d:ef:ee:e7:d0:
ae:82:fd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:15:06 2026 by rpki-client