Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
File: lRUfu3HkGy0QY9OxEUGtoahEx_c.mft (raw, json)
Hash identifier: x24S7Kr/zf1v6z9hh0FLaJpS2q+OiiBOYHQyFyLxtgk=
Subject key identifier: C9:DB:AA:FF:CB:3F:15:19:C1:1B:C7:14:B8:11:7F:3A:43:94:E9:75
Authority key identifier: 95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
Certificate issuer: /CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Certificate serial: 01A0ECD5046124F6CEECB1B3776CFB07F588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
Manifest number: 16F1
Signing time: Tue 29 Sep 2026 11:02:58 +0000
Manifest this update: Tue 29 Sep 2026 11:02:58 +0000
Manifest next update: Wed 30 Sep 2026 11:02:58 +0000
Files and hashes: 1: KXQ6A3de6ngkk1WG9cHu1Wh6z8U.asa (hash: 5ZyKxUcShckFXuyMs3UQFf3JSdmvQECqj6DhdV60Ytw=)
2: hQpPRm4erIDWbIY8XQoz9UytcaA.roa (hash: P89VvvMHkJtBVyELR1I2+jkquZR5SiLofVkP3TLWjJE=)
3: lRUfu3HkGy0QY9OxEUGtoahEx_c.crl (hash: fJvNG+yefh//uNhfVHlPISDwLLNs9rULvIY6wMK9JpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 11:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d5:04:61:24:f6:ce:ec:b1:b3:77:6c:fb:07:f5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Validity
Not Before: Sep 29 11:02:58 2026 GMT
Not After : Sep 30 11:02:58 2026 GMT
Subject: CN=c9dbaaffcb3f1519c11bc714b8117f3a4394e975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:68:54:5d:8d:96:c5:1f:48:5f:ab:12:0b:b0:
40:23:8c:b8:6b:29:48:1c:d2:6a:2d:6b:e1:07:39:
48:9e:1d:dc:c0:61:bd:c2:5f:d1:81:9a:e0:b1:d3:
c9:8e:03:85:52:11:ea:5e:e9:81:86:1c:a2:f1:d7:
8b:fc:e9:91:b6:87:c8:2c:e5:45:7b:ba:61:5a:87:
a4:43:ea:ec:4d:c8:ed:ae:24:7c:18:20:be:eb:ff:
54:9b:c0:45:9e:20:2d:05:ad:f4:bb:30:bf:71:36:
bc:d8:8c:3f:2a:ed:a5:a7:ed:5b:f8:7d:4b:2c:fe:
ae:38:fb:84:84:cc:61:ab:b3:e5:da:60:0e:2a:76:
70:32:6b:25:9d:3a:23:75:db:44:f4:1a:5b:52:72:
54:39:c8:10:9f:7a:a6:e6:d7:43:7d:07:f3:d0:00:
66:98:77:34:5e:13:fe:92:ed:17:d1:c4:04:77:d2:
2d:97:e7:5d:b3:e9:4b:b6:65:ed:b5:70:41:e7:13:
ca:65:ad:54:db:1a:db:58:5a:5e:d6:c3:2a:57:21:
99:55:da:93:f2:95:73:fe:76:d2:38:91:ca:e8:20:
fd:13:46:89:41:d2:78:72:fb:77:cb:3a:2d:99:a1:
b6:06:52:62:e4:3e:ed:c9:ab:86:10:4e:30:57:08:
c6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DB:AA:FF:CB:3F:15:19:C1:1B:C7:14:B8:11:7F:3A:43:94:E9:75
X509v3 Authority Key Identifier:
keyid:95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d8:be:42:fa:26:ad:a9:e0:96:ba:0f:16:1a:bf:a9:8a:52:
3b:32:48:80:c3:9f:12:f8:a4:99:1e:09:12:11:23:97:bc:4b:
2f:db:2f:96:13:3a:a2:2c:12:29:e3:05:cb:84:a4:ba:ca:47:
ba:e8:5b:ab:45:0b:81:7e:46:39:f3:52:99:97:8b:b6:21:5b:
c1:f3:98:65:bb:43:f5:75:84:49:6e:54:9d:f5:ef:0f:56:4f:
6e:da:4a:0e:07:4b:d7:0f:83:69:bd:88:60:8f:87:56:4d:85:
74:79:17:09:05:e6:e4:5e:14:f2:e1:18:6d:53:0a:f6:0b:99:
33:0b:4f:34:0b:8d:21:87:fe:56:36:34:01:d1:f0:ca:35:90:
db:fc:b9:96:d1:b8:29:9c:72:ea:61:0e:11:0f:78:06:a3:03:
a4:b8:89:ff:77:08:7b:1e:7c:21:22:0b:95:a5:a5:c6:dc:b2:
44:57:c7:76:82:70:b1:04:c5:e7:28:98:b9:e0:bc:e8:9f:0e:
2a:9b:8e:79:68:09:a1:cb:28:e7:89:54:0b:e0:a5:c2:5c:aa:
73:9f:73:f4:bd:51:b8:20:39:70:f9:04:1f:52:84:cd:8d:17:
7d:4e:fa:21:cb:80:3f:8f:09:d0:fb:9e:48:0e:df:d3:67:c9:
e6:06:a6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:00:41 2026 by rpki-client