Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
File: lRUfu3HkGy0QY9OxEUGtoahEx_c.mft (raw, json)
Hash identifier: muAfzBSUSzr0br97nQxwys08ehkQmpCkB05FuXsBAQ4=
Subject key identifier: E7:A7:57:B2:9C:41:8B:A6:13:07:D6:4D:E0:3B:8B:28:96:17:14:57
Authority key identifier: 95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
Certificate issuer: /CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Certificate serial: 019E1CEB85FFF01A39C41495D438AC9FE345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
Manifest number: 157C
Signing time: Tue 12 May 2026 16:00:57 +0000
Manifest this update: Tue 12 May 2026 16:00:57 +0000
Manifest next update: Wed 13 May 2026 16:00:57 +0000
Files and hashes: 1: 43DpV7xrZKIPgR3LXQiPDkxuS6g.roa (hash: Pz+pBSh7qLUtOCsg2X6KXkUs5v6TAPEm46EKWek5QPQ=)
2: KXQ6A3de6ngkk1WG9cHu1Wh6z8U.asa (hash: 5ZyKxUcShckFXuyMs3UQFf3JSdmvQECqj6DhdV60Ytw=)
3: lRUfu3HkGy0QY9OxEUGtoahEx_c.crl (hash: jF8y8BHIFrlo+7RSLiFrZ3oGBVkT7Vq6emennGaIttw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:85:ff:f0:1a:39:c4:14:95:d4:38:ac:9f:e3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Validity
Not Before: May 12 16:00:57 2026 GMT
Not After : May 13 16:00:57 2026 GMT
Subject: CN=e7a757b29c418ba61307d64de03b8b2896171457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c1:09:3a:14:d6:4a:c7:f7:17:e4:9d:b9:29:
2d:6a:07:7d:7d:0e:12:31:35:ba:34:18:84:7e:29:
af:2f:c5:e4:a1:16:23:f8:56:ba:9f:7c:26:d6:7a:
5c:b4:ab:34:de:bf:1e:bd:d0:b7:cc:ae:9b:62:dc:
d4:84:e1:6f:7d:c5:36:7b:45:9c:08:3b:ad:1d:2b:
e1:0f:11:e9:78:e1:c7:3b:ee:0d:52:57:1a:0d:f7:
3e:da:9e:d4:9e:dc:4a:2f:ba:fe:55:84:90:5b:8c:
1d:ce:c2:a6:9c:ea:06:ef:fd:58:b8:bf:37:0b:b4:
a9:e3:bf:00:f4:4b:02:ad:9b:09:4f:73:54:58:57:
ed:29:57:86:dd:00:9f:ac:05:ad:54:b8:82:81:73:
2f:2c:7d:fc:ff:28:d4:33:87:c2:1b:32:71:9b:c0:
91:e8:71:3c:56:02:2e:e2:87:09:54:ff:09:8b:31:
68:cf:a4:82:f9:04:3c:25:04:49:f8:30:3c:aa:47:
33:ce:73:cd:61:48:6b:1e:78:7d:c6:76:df:33:7c:
13:08:47:83:41:b2:f9:5e:26:86:f4:2b:fb:e4:84:
77:1b:45:7e:96:c3:4b:b4:54:c2:2c:25:ac:89:b0:
4f:6b:6c:80:e3:94:00:d3:0d:13:b4:32:a5:b0:81:
c5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A7:57:B2:9C:41:8B:A6:13:07:D6:4D:E0:3B:8B:28:96:17:14:57
X509v3 Authority Key Identifier:
keyid:95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c6:9c:5a:fb:72:49:58:8a:46:9c:3f:9d:e6:1a:a5:f2:63:
ce:11:e3:22:71:16:f5:3f:ad:8c:e3:61:be:30:d1:e6:36:a9:
fa:9f:5c:07:e8:db:d7:65:0e:d5:a6:11:10:f0:15:4f:19:53:
f5:53:2f:0a:34:d0:7f:5c:ec:d9:6e:1a:6d:c9:bf:12:d5:f0:
77:d8:dd:91:e0:b0:8d:0a:be:2d:55:94:3a:8c:e7:80:25:3a:
c7:b9:50:f4:37:0b:bc:db:f1:bf:de:42:44:ea:1a:66:1b:c1:
89:93:d5:7c:ea:b4:52:df:f9:e6:59:33:c7:a6:49:62:7a:8c:
80:f6:1d:34:8b:61:af:f5:1a:d1:b0:41:5b:03:ce:2a:34:0a:
9d:ef:bb:45:f6:9d:c6:53:c0:3d:45:e8:fc:2a:34:ef:44:41:
18:02:f3:2b:e8:73:c0:82:3e:91:a1:9c:47:b2:01:ab:71:7c:
75:56:48:9a:4a:03:81:e5:61:ad:cf:04:ee:5f:06:f5:34:42:
55:7a:00:8b:cc:36:ac:16:99:5a:ba:5e:6b:c6:60:1f:d2:ce:
b8:f0:01:e2:76:46:64:ee:92:69:7f:fd:d4:7d:72:dc:52:d1:
84:3a:7d:d1:13:ef:c2:d6:6a:d7:36:88:de:4d:80:38:d6:a4:
8a:07:f5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:51 2026 by rpki-client