Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
File: lRUfu3HkGy0QY9OxEUGtoahEx_c.mft (raw, json)
Hash identifier: XgCONLe239I28D9nspDKZa5a6iTtyzv6aJK9gyG89A0=
Subject key identifier: 78:09:95:40:FE:62:7B:74:98:6E:17:1B:FE:3C:B3:38:C4:AC:6B:0E
Authority key identifier: 95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
Certificate issuer: /CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Certificate serial: 019D25BAE770D09FE436C348E4778D76D42C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
Manifest number: 14FC
Signing time: Wed 25 Mar 2026 16:01:37 +0000
Manifest this update: Wed 25 Mar 2026 16:01:37 +0000
Manifest next update: Thu 26 Mar 2026 16:01:37 +0000
Files and hashes: 1: 43DpV7xrZKIPgR3LXQiPDkxuS6g.roa (hash: Pz+pBSh7qLUtOCsg2X6KXkUs5v6TAPEm46EKWek5QPQ=)
2: KXQ6A3de6ngkk1WG9cHu1Wh6z8U.asa (hash: 5ZyKxUcShckFXuyMs3UQFf3JSdmvQECqj6DhdV60Ytw=)
3: lRUfu3HkGy0QY9OxEUGtoahEx_c.crl (hash: 1K5N95JLK6Eo4C5y+GT2Izg0vfe/ma860715gX3VSsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:e7:70:d0:9f:e4:36:c3:48:e4:77:8d:76:d4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Validity
Not Before: Mar 25 16:01:37 2026 GMT
Not After : Mar 26 16:01:37 2026 GMT
Subject: CN=78099540fe627b74986e171bfe3cb338c4ac6b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:38:36:31:2c:fb:95:8f:48:e4:95:0d:d8:88:
67:6f:15:9b:e7:6e:1f:4b:ea:6b:67:5e:cc:14:75:
1a:7f:36:33:cf:19:63:20:ca:eb:3c:bd:ee:d0:c5:
ed:64:81:9b:05:da:24:e5:58:85:46:24:21:ee:56:
02:a1:d1:81:65:cf:2f:a7:f9:ee:8b:a4:2f:72:92:
86:c6:26:dc:5f:0b:2d:b2:60:11:ab:12:72:fc:cd:
cb:ca:96:d2:e6:c3:11:19:af:e3:66:37:8a:8a:65:
93:b5:f0:fd:0f:c9:d4:e0:59:d1:74:5c:88:a4:27:
d1:d0:7d:6d:25:de:e7:9e:46:d0:8a:32:cc:5b:73:
a7:64:52:5f:6a:29:de:0f:39:d1:b2:a7:00:d4:b5:
fd:cf:19:37:92:5b:e3:f9:9a:7b:80:9c:4d:e0:a0:
b7:e9:a0:e2:01:29:0a:7f:ed:f1:80:d8:3c:05:fd:
0d:d4:dc:84:74:6b:d1:91:96:51:a6:df:89:c3:ee:
9a:98:a6:3c:4e:88:35:8a:ff:cb:1b:49:2c:c4:c1:
75:ef:29:dd:5d:d7:c9:76:aa:3a:d0:48:af:d9:03:
44:62:f9:24:4f:d9:1b:fd:ad:45:60:20:42:a0:ac:
0e:3b:28:69:bb:70:78:b0:c6:c9:05:83:ce:87:73:
f9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:09:95:40:FE:62:7B:74:98:6E:17:1B:FE:3C:B3:38:C4:AC:6B:0E
X509v3 Authority Key Identifier:
keyid:95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f9:31:ea:8f:ed:4d:5a:9c:15:76:f7:7a:12:77:1c:3f:60:
ac:c2:fe:66:de:49:58:40:73:c6:05:3b:23:2b:e4:e4:5d:9f:
56:b8:78:72:54:ac:7a:54:43:9d:59:41:d1:51:7b:2f:ed:af:
b2:03:b4:b4:bd:f2:f5:51:57:83:34:96:29:6a:c5:bb:6a:c6:
15:ef:3d:80:af:e0:48:69:f1:67:98:83:53:47:7d:65:32:3c:
5e:87:d1:e9:65:66:f4:d8:3b:df:48:38:21:03:a6:a5:ac:0c:
79:81:d3:a3:6f:fd:20:06:f7:b4:f4:57:20:84:16:c9:74:50:
aa:f8:24:fe:ae:73:d4:a6:16:b9:21:11:5e:90:51:5e:15:ef:
ad:5f:db:52:38:6a:e0:08:e6:f1:52:cd:cc:af:f2:a7:2b:0e:
9d:12:06:18:c5:e8:99:00:f8:69:28:77:a5:af:5c:fd:14:f5:
f2:6a:42:59:0a:fa:fb:cf:b0:a7:67:1e:45:52:e4:fd:07:48:
52:c7:16:5c:d6:a7:a7:74:f5:f9:99:13:a1:a8:75:07:3f:d7:
71:7c:78:53:4f:89:6c:c1:4a:f9:c1:66:88:59:76:f2:8f:f0:
0a:25:59:52:d5:9b:b9:f5:de:b2:dc:4d:1f:39:db:13:6f:85:
d4:2f:75:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:46 2026 by rpki-client