Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
File: lUqTUetm2NhiTiDRafdmty9YrMA.mft (raw, json)
Hash identifier: PeCXD6StBYetDyyyJLGtyxPxbYvFl3mmbQIEHF2uLi0=
Subject key identifier: D4:FA:05:F4:8B:13:90:E6:4D:CE:55:62:7B:21:A6:45:61:C0:A4:6D
Authority key identifier: 95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
Certificate issuer: /CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Certificate serial: 019D273AFACEA5358C8747E437AC3EB9475A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
Manifest number: 043E
Signing time: Wed 25 Mar 2026 23:01:09 +0000
Manifest this update: Wed 25 Mar 2026 23:01:09 +0000
Manifest next update: Thu 26 Mar 2026 23:01:09 +0000
Files and hashes: 1: Cqp-7RFmWIRhPlRItz8b7WniVM8.roa (hash: WN3y68b5/hiQoqHDZtfcy65p4h2IyPgin5+Be6vlaV0=)
2: lUqTUetm2NhiTiDRafdmty9YrMA.crl (hash: lUniTYaXB2LGr2kVtCV6DeQYwe4Ju8mzqRMGA38undg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:fa:ce:a5:35:8c:87:47:e4:37:ac:3e:b9:47:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Validity
Not Before: Mar 25 23:01:09 2026 GMT
Not After : Mar 26 23:01:09 2026 GMT
Subject: CN=d4fa05f48b1390e64dce55627b21a64561c0a46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ba:9a:38:dd:23:40:7e:d6:f7:4d:39:81:03:
44:ad:41:8c:0d:54:48:03:83:4b:b7:78:cb:94:4a:
a3:71:95:21:75:81:d3:c1:d6:fc:d0:2e:ca:c1:db:
5e:ec:cf:6a:b8:a8:99:a7:0b:3f:b4:e7:ba:aa:74:
c9:6b:7a:5b:18:ce:3d:05:45:1f:2b:c8:e3:dd:70:
ff:bb:29:cb:48:a9:bf:ef:b2:42:c0:93:bf:ff:b7:
56:e5:8c:bb:3a:97:4a:7e:af:3e:d6:71:52:ad:eb:
93:b4:8e:a2:1b:b1:ab:3a:54:1a:2e:4c:c7:7d:8b:
5a:68:ad:9c:c4:74:20:51:6d:ad:ca:e7:e3:e3:97:
e8:ea:07:e0:75:d8:fa:a5:4a:38:8f:25:94:8c:e6:
36:96:fc:4d:47:7f:ff:aa:9b:25:97:8e:64:35:fb:
a5:7b:0b:d2:c3:ec:08:65:5d:2e:37:12:eb:a2:05:
c1:60:0e:b6:0a:ea:aa:f1:e1:eb:e1:f1:36:75:80:
71:31:21:12:35:87:ce:34:eb:55:4f:4e:59:60:d7:
14:c8:a5:64:d7:bd:76:a8:6e:d1:f7:f4:62:85:65:
34:28:e7:6d:ac:af:13:10:2a:52:7c:2a:00:76:da:
2b:72:df:60:69:b1:b0:aa:13:71:25:59:c9:ed:76:
d0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FA:05:F4:8B:13:90:E6:4D:CE:55:62:7B:21:A6:45:61:C0:A4:6D
X509v3 Authority Key Identifier:
keyid:95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f7:c6:70:9d:17:a2:fd:cd:76:78:fe:28:ee:2a:52:af:56:
75:f2:36:7a:9f:b5:e7:75:86:b5:55:64:04:37:82:04:75:85:
a9:2f:0f:0a:68:45:82:1b:32:df:af:5a:c7:9a:7a:5a:ed:e8:
d3:eb:29:5e:99:63:81:09:7e:4c:44:32:2d:79:14:e1:cc:b0:
c4:d1:5d:f5:4e:78:bf:5c:b9:e5:ef:f4:5a:c2:95:13:54:78:
34:de:5a:f8:28:c3:ea:e1:8e:48:85:e8:58:6d:21:7c:a2:e6:
59:de:90:33:6a:f3:6f:20:d4:dc:a4:d6:34:c3:21:19:8d:c3:
a5:cc:c4:8c:fb:0c:0f:63:10:f2:58:cc:e3:2b:3a:5f:e8:bc:
89:db:b2:1d:f2:08:dd:8e:54:6b:9a:b0:e6:a6:56:db:57:be:
8a:8e:6f:55:70:9d:d2:b7:7f:42:91:3e:4f:d9:b7:7c:d8:d8:
ff:ec:d9:80:7f:85:6b:f7:8d:40:40:57:4c:a7:de:e7:a4:7b:
8e:37:07:f6:09:76:8d:42:91:37:89:65:a2:ef:c7:48:b2:d0:
76:f7:a0:9a:22:59:ae:85:8b:a2:d4:b4:3c:66:b4:e6:40:4d:
fc:f9:c6:33:59:f1:d7:b9:3a:b5:c8:75:98:d8:bd:ef:ce:d4:
f1:61:df:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:36 2026 by rpki-client