Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
File: lUqTUetm2NhiTiDRafdmty9YrMA.mft (raw, json)
Hash identifier: 0gsmJ87J6mLJsjkKxJgnGy4kD0D2QjMuG8YJgRFHRFY=
Subject key identifier: 43:43:92:A7:1D:F4:8F:56:A1:83:3B:3B:FA:7B:0D:11:D0:68:8E:3E
Authority key identifier: 95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
Certificate issuer: /CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Certificate serial: 01A0D1C919BB20A706D5151948780D214C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
Manifest number: 0624
Signing time: Thu 24 Sep 2026 05:00:12 +0000
Manifest this update: Thu 24 Sep 2026 05:00:12 +0000
Manifest next update: Fri 25 Sep 2026 05:00:12 +0000
Files and hashes: 1: Cqp-7RFmWIRhPlRItz8b7WniVM8.roa (hash: WN3y68b5/hiQoqHDZtfcy65p4h2IyPgin5+Be6vlaV0=)
2: lUqTUetm2NhiTiDRafdmty9YrMA.crl (hash: vPQFXOWG/1lA3Ib/bphZkehN10yRkMecBcxZz/jHZR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:19:bb:20:a7:06:d5:15:19:48:78:0d:21:4c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Validity
Not Before: Sep 24 05:00:12 2026 GMT
Not After : Sep 25 05:00:12 2026 GMT
Subject: CN=434392a71df48f56a1833b3bfa7b0d11d0688e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ba:e3:ad:34:a8:59:5b:e4:cf:3a:cc:e3:3e:
0f:22:00:76:2f:bd:5e:c6:cf:95:95:1d:7c:f4:59:
ed:0b:33:36:6e:aa:7e:9a:93:f8:70:ba:bd:44:1b:
1b:b5:7e:17:e4:02:66:82:33:42:4d:e6:90:66:03:
27:f5:4c:90:87:a5:b6:2c:16:83:81:ed:ea:09:57:
9b:19:07:d9:7a:1e:81:f7:c4:c1:e7:c8:99:9b:5a:
f4:ec:75:bc:23:fd:53:5b:f8:94:ea:44:b3:9c:32:
42:7b:df:74:61:16:dc:48:1c:16:a0:cc:cb:bc:e6:
7b:ba:b9:1b:6c:5b:58:f1:9f:63:8d:c0:79:2d:20:
29:ca:98:84:6b:7a:f7:e8:12:78:0e:cc:d0:a3:26:
c7:a9:69:ac:6e:34:6e:12:f2:5f:16:40:9d:ae:7d:
8d:d8:ed:f0:55:76:69:0e:a9:81:1b:38:6b:51:17:
6e:96:5b:83:8a:66:40:00:29:2a:aa:2e:90:df:75:
29:12:73:20:74:07:78:df:1b:23:bf:ec:06:5e:ad:
e9:59:02:c9:e4:84:5d:28:5d:03:3b:01:cf:ea:ff:
32:92:31:9e:5c:d3:55:61:2a:48:f3:61:d4:a5:eb:
f4:28:8c:e3:ab:d2:2c:8f:97:19:73:68:9b:ca:22:
99:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:43:92:A7:1D:F4:8F:56:A1:83:3B:3B:FA:7B:0D:11:D0:68:8E:3E
X509v3 Authority Key Identifier:
keyid:95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d5:e9:30:e8:37:0b:29:cf:d4:09:8b:d6:7a:f8:69:a4:e1:
78:b1:65:91:3d:c7:cf:35:95:90:f6:a1:e4:86:73:04:6d:97:
78:c4:0b:9d:c9:87:d3:ce:5b:67:29:ea:fe:69:54:8b:45:0d:
1f:9b:cd:14:d9:f2:ec:77:17:d2:b4:cd:bb:20:88:4d:9e:7f:
ba:f3:d3:98:6a:63:9d:e4:bc:54:54:dd:4a:ba:02:7c:ad:19:
86:74:1b:8c:59:ee:07:f8:de:d1:92:4e:16:3f:79:c5:1f:61:
3d:14:38:e8:cc:f3:81:94:71:2a:d0:59:58:fb:a0:ad:3c:1e:
ea:6b:d6:6f:70:76:2f:cf:cd:40:dd:31:03:bf:18:fc:6a:76:
01:b0:bb:29:78:d6:61:b9:c8:00:53:28:0c:9c:8b:f1:fc:62:
9d:53:72:b2:6d:d0:bd:a5:b7:7f:e5:95:24:cd:58:ae:71:dc:
b0:ad:da:fa:d3:83:b6:8e:12:75:1e:40:a1:a0:24:55:7d:d7:
d2:12:0f:4d:0a:fa:9c:17:80:b0:e1:0e:36:61:07:79:84:f1:
54:90:57:09:6c:be:74:55:3f:c6:bd:06:e2:6c:98:8b:ef:0b:
92:17:10:93:a0:8e:ac:0e:6c:c4:35:4c:8b:96:13:b1:21:13:
81:db:ba:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:28:54 2026 by rpki-client