Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
File: LuVtTXsdGgbOifdG95tlbHNIxSU.mft (raw, json)
Hash identifier: XxruK7dCksLfte/u0EkTCs6yGU3gPuYwxgPVchgju/U=
Subject key identifier: 65:CE:80:49:42:4F:BC:9C:CD:CF:C3:F2:B1:90:FA:6C:A4:1A:A6:CC
Authority key identifier: 2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
Certificate issuer: /CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Certificate serial: 019F9436700842C4D763EC9519A2B678FB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 13:00:23 +0000
Manifest this update: Fri 24 Jul 2026 13:00:23 +0000
Manifest next update: Sat 25 Jul 2026 13:00:23 +0000
Files and hashes: 1: 8XJI8Ab5Kn4iGwXJ6PSkR-OvFH4.roa (hash: SgXQOVpKdakFip4Eu8vjLUkRXfKk3oyvAOpf3ZBZws8=)
2: LuVtTXsdGgbOifdG95tlbHNIxSU.crl (hash: nn/sBGFWisMUn74ihaw2GWwm2DfQdlUmsr1/0OosMho=)
3: WaELHuLYA_1cefIoTQf80xGonys.roa (hash: rib5YkFr/K/aT3PKl0IuD1KkixxMJnJUccJ5z3LdA80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:70:08:42:c4:d7:63:ec:95:19:a2:b6:78:fb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Validity
Not Before: Jul 24 13:00:23 2026 GMT
Not After : Jul 25 13:00:23 2026 GMT
Subject: CN=65ce8049424fbc9ccdcfc3f2b190fa6ca41aa6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:08:ef:09:48:aa:76:f6:e0:ca:e7:f4:31:f5:
54:84:e0:10:8e:ea:bb:d6:43:fa:67:b8:d3:18:ae:
17:25:78:6d:2a:7c:43:2a:6e:60:a4:e4:7e:bc:1c:
70:3e:55:9d:e3:4e:ef:8d:25:c5:e4:be:47:c5:8a:
d9:0c:a8:83:c6:86:5e:96:0e:b5:66:35:a3:f6:b7:
82:c7:af:16:6e:9d:56:79:bc:89:39:18:44:7a:d6:
00:48:0b:07:24:6c:5e:ea:15:df:8a:98:de:5b:cd:
25:a7:49:d1:a6:aa:70:8f:48:ff:25:21:40:fa:55:
9e:d9:2a:29:2c:2d:43:c8:97:b5:ee:b0:64:e2:39:
55:8e:85:70:3c:2e:46:cd:ae:4f:13:ba:15:95:8d:
96:3b:b6:a4:ca:6d:12:cc:0b:c8:c8:f5:8d:22:39:
72:59:54:08:4c:03:da:33:49:30:83:ca:4f:bd:48:
78:3a:79:d1:a8:98:2d:e9:4b:f2:61:d9:03:fa:73:
0e:07:dd:17:3e:fe:33:53:fb:ae:09:dd:8a:60:f3:
9c:48:6f:1c:25:d7:1f:4d:c4:9a:8b:12:57:2e:00:
90:65:20:26:a1:b5:cf:7a:c6:77:3b:b1:07:8e:a1:
cc:15:35:fc:d8:f2:73:91:c1:e3:fc:a7:e1:e5:b7:
e6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CE:80:49:42:4F:BC:9C:CD:CF:C3:F2:B1:90:FA:6C:A4:1A:A6:CC
X509v3 Authority Key Identifier:
keyid:2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1c:b6:13:95:85:5c:20:86:28:38:d6:59:b2:f3:77:22:7e:
26:db:d7:fe:4a:36:22:3f:a0:df:f4:25:9b:11:12:8a:29:92:
84:b3:90:56:a8:fb:f8:e5:fe:9b:fa:b4:6c:16:0e:f1:18:82:
27:59:cf:29:f7:84:e5:67:46:87:55:90:99:d7:97:2b:31:4b:
5d:1a:18:a8:0f:43:4c:3b:1f:49:eb:78:3d:49:b5:33:69:f9:
02:e7:89:ea:31:79:ed:c4:4c:bc:21:e2:c0:c5:18:a3:7e:92:
2e:f1:d8:64:5a:d7:7a:99:a2:3a:ad:c3:36:82:3b:86:b3:9d:
92:bd:b1:53:2d:57:4c:61:72:df:8d:1a:35:79:6a:49:77:f2:
a9:6e:b9:e4:c7:79:ce:29:a3:7e:9c:b1:e6:b1:15:84:43:a3:
15:06:84:61:bc:9e:4a:0a:b6:8c:03:b9:e5:44:a3:e3:1c:d3:
58:a7:1e:26:5d:ff:21:d8:ff:28:b6:1e:c7:34:ca:c6:69:ca:
4f:de:4e:76:ee:28:12:aa:b0:0b:6b:c0:61:36:3c:e8:79:2b:
03:25:b1:a9:53:7f:76:7b:8c:b3:b5:f8:88:b1:c8:48:e6:66:
d4:eb:c6:24:23:18:2d:dd:43:0f:0f:5e:41:5c:9a:b8:97:ce:
09:ed:4c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:36:13 2026 by rpki-client