Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
File: lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft (raw, json)
Hash identifier: /34Su//HZu8xA78k3tbPiF9CP1j+9FiiICs47gwN5d4=
Subject key identifier: C3:87:BB:0B:AD:43:43:5B:06:D2:48:72:F7:93:78:05:0C:A7:A4:99
Authority key identifier: 96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A
Certificate issuer: /CN=96edc682a944005117b8febed6dc8bac060f329a
Certificate serial: 019D273AAE6170C05EF081BE55EF35424571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
Manifest number: 077B
Signing time: Wed 25 Mar 2026 23:00:50 +0000
Manifest this update: Wed 25 Mar 2026 23:00:50 +0000
Manifest next update: Thu 26 Mar 2026 23:00:50 +0000
Files and hashes: 1: DErivx0e-6b56vQq7Hodx5LXJgM.roa (hash: Qu7V6jf5xYIpOAX8Mui4oAi/eNqnZVmhkF0lUX59mwE=)
2: lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl (hash: HLaNGC8ThvqARPwvNgDTXZpDdN6OrAUB94Ex9VZpX9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ae:61:70:c0:5e:f0:81:be:55:ef:35:42:45:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96edc682a944005117b8febed6dc8bac060f329a
Validity
Not Before: Mar 25 23:00:50 2026 GMT
Not After : Mar 26 23:00:50 2026 GMT
Subject: CN=c387bb0bad43435b06d24872f79378050ca7a499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:63:2a:ed:c6:cf:25:1f:35:db:02:59:ba:
3b:18:88:63:9b:95:32:82:e6:79:43:ea:ad:ac:62:
4d:77:ac:5d:72:70:2a:6c:6a:02:25:56:87:de:d0:
cb:ff:22:93:61:89:c5:05:5f:3a:6c:e0:2c:81:b2:
41:49:79:bf:3c:5b:9a:78:ab:92:73:fe:32:8f:1d:
46:22:43:47:ee:d0:4d:a5:66:7e:a2:ac:44:ec:a4:
45:bc:f8:e1:ce:a2:1b:25:e3:0e:b1:33:d9:6c:2e:
83:e3:b4:da:f8:3c:ef:55:10:bb:63:9e:49:a2:6a:
2f:60:26:11:2f:2a:a6:50:61:c2:f7:bd:25:80:ac:
5a:67:4f:94:99:a1:90:94:7e:ca:2d:dd:de:ab:d6:
66:c8:a9:08:db:0a:cd:42:0b:2e:c1:0d:77:dd:c8:
d7:c3:93:bb:da:16:41:18:e2:07:8f:17:57:09:19:
a2:88:6e:b1:c1:25:21:9f:55:ac:ce:85:90:e1:e8:
25:1e:46:3a:83:66:8f:1b:bc:0a:30:50:bf:43:6f:
94:85:a5:e7:09:77:82:c2:8e:06:a7:1e:5d:37:83:
c1:e1:17:2b:b3:59:15:96:5e:25:c1:78:7b:bc:5c:
7d:9a:ba:c4:26:6e:ff:44:5d:b2:d7:76:f6:e7:f6:
f9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:87:BB:0B:AD:43:43:5B:06:D2:48:72:F7:93:78:05:0C:A7:A4:99
X509v3 Authority Key Identifier:
keyid:96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:32:8c:5a:31:d9:a2:27:86:26:7f:af:24:51:d6:74:58:6c:
17:54:a4:eb:6c:24:5d:81:42:74:77:93:9e:1e:23:11:bc:5c:
c2:97:1c:92:89:99:83:cc:77:8c:eb:48:5c:2e:ee:8d:81:83:
95:5a:36:77:c5:75:ff:dc:46:97:a9:35:77:76:24:41:9b:cd:
84:17:09:bc:df:31:f5:aa:26:0e:32:73:46:42:3e:38:88:6d:
ee:2b:4a:03:0f:60:fd:87:a4:11:fe:18:7d:10:f9:e6:53:28:
9f:e9:03:2c:db:99:9f:53:d6:ed:74:b8:69:a3:ae:e6:d7:55:
55:f6:80:21:bc:2f:29:b9:65:21:bc:db:df:78:e6:63:65:88:
a7:44:58:bb:2b:cd:21:3d:28:19:20:c2:9d:c8:15:fe:9f:c6:
0a:86:b4:ca:90:11:29:a8:be:47:12:ef:53:27:c4:d4:f5:c0:
59:45:21:ab:6b:c5:19:3c:af:3e:24:96:56:3c:3c:77:e6:32:
64:a3:dc:04:47:c1:f9:bc:dc:27:46:9c:dc:2e:04:f1:15:6d:
e0:35:b5:ac:9f:bc:28:ca:43:50:e4:02:ce:aa:c4:de:78:2c:
72:96:a0:8d:eb:9c:a9:02:af:80:64:4b:f9:b8:f4:91:61:7a:
fd:23:80:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:59 2026 by rpki-client