Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
File: LuVtTXsdGgbOifdG95tlbHNIxSU.mft (raw, json)
Hash identifier: bYyzi4g/p+Qonr5btt63lfkDdemn8pB8YsnHOWqrL4s=
Subject key identifier: 68:B5:19:05:4E:AC:74:AC:CA:07:45:1B:39:5F:E0:1B:C7:1F:9B:E0
Authority key identifier: 2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
Certificate issuer: /CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Certificate serial: 01A0E81C80654163C122A1466138870CB015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
Manifest number: 1A7C
Signing time: Mon 28 Sep 2026 13:02:56 +0000
Manifest this update: Mon 28 Sep 2026 13:02:56 +0000
Manifest next update: Tue 29 Sep 2026 13:02:56 +0000
Files and hashes: 1: 8XJI8Ab5Kn4iGwXJ6PSkR-OvFH4.roa (hash: SgXQOVpKdakFip4Eu8vjLUkRXfKk3oyvAOpf3ZBZws8=)
2: LuVtTXsdGgbOifdG95tlbHNIxSU.crl (hash: rIrGgg5859xqwcTY5G+oWAighd960kuwDlv8VhMGsr0=)
3: WaELHuLYA_1cefIoTQf80xGonys.roa (hash: rib5YkFr/K/aT3PKl0IuD1KkixxMJnJUccJ5z3LdA80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:80:65:41:63:c1:22:a1:46:61:38:87:0c:b0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Validity
Not Before: Sep 28 13:02:56 2026 GMT
Not After : Sep 29 13:02:56 2026 GMT
Subject: CN=68b519054eac74acca07451b395fe01bc71f9be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c2:86:1a:db:74:37:81:2b:f1:c6:b1:be:b9:
54:3d:3e:a3:c3:5a:1b:99:0c:a3:ef:7d:61:4e:6c:
cd:91:11:d2:e3:05:fe:8a:b9:bf:1b:3c:05:6e:e8:
e2:91:84:ab:ea:c0:80:dc:41:c3:af:54:ee:5c:71:
4f:ec:e0:98:66:ad:fc:a6:44:cd:5d:d0:0a:16:a1:
99:08:46:86:8f:f6:22:ad:9b:e3:21:56:60:c4:7b:
8a:74:95:3e:16:53:80:76:44:c3:4d:17:83:d9:e2:
2b:67:2e:24:a4:95:0c:79:0a:62:86:b3:c7:22:8f:
99:de:1b:ab:0a:8a:50:ab:60:23:92:6a:7e:8f:71:
8f:7b:6a:70:59:88:75:d4:79:7d:f2:c2:44:af:61:
31:b7:8e:1d:b5:54:a4:d7:52:76:f4:90:01:2c:99:
ac:0e:72:d7:08:d0:46:66:3b:4c:19:da:2e:6e:97:
b5:e2:2f:17:fd:54:5d:34:f1:c2:2b:9c:9f:0a:8b:
bf:9f:54:dd:2c:26:2a:95:4a:ab:94:9d:e3:e2:51:
f6:44:e2:55:89:84:4f:7e:a6:8a:e6:5a:f3:ea:7b:
fb:52:12:b2:36:cc:62:8e:73:4f:21:e5:03:95:61:
7f:22:e4:f3:72:3d:aa:e9:69:37:06:ae:01:1a:b5:
63:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B5:19:05:4E:AC:74:AC:CA:07:45:1B:39:5F:E0:1B:C7:1F:9B:E0
X509v3 Authority Key Identifier:
keyid:2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:bb:28:5a:49:2b:c5:1b:d7:ab:d3:1e:b6:77:9f:f4:5a:d4:
65:17:4b:e6:b2:af:c1:35:88:1d:57:ca:01:09:88:eb:5e:b3:
03:03:ec:23:fc:98:9e:45:d7:46:0b:0c:3c:4d:8b:24:dd:98:
ac:26:6d:e6:bc:a4:74:5b:87:f1:47:3c:39:67:05:cd:9b:41:
e4:3a:93:7d:b3:86:67:1e:11:2e:23:f0:de:4b:2b:90:84:b6:
cc:5a:56:eb:24:2b:27:ca:d3:84:53:83:ed:f3:d5:40:9b:d5:
de:2f:e1:10:20:73:2a:6a:d8:ce:56:02:31:44:58:37:1e:57:
c1:c1:04:87:2c:7e:b0:b9:43:16:ea:93:f4:26:4e:2f:8c:52:
34:ad:b1:30:61:e6:12:39:51:cd:1f:50:5c:e5:3c:36:57:e2:
55:6b:d2:d5:c9:60:72:23:43:b3:0c:ab:ed:0a:f0:d8:b6:84:
89:4a:7a:4d:9f:88:7e:fc:6c:33:a8:54:a4:3d:f8:44:b9:b3:
72:b2:58:a1:1e:3a:e6:c2:3b:0b:2f:73:cc:e9:45:44:28:a4:
15:be:e8:de:6a:a0:1c:42:c1:37:e8:60:8c:94:0b:c4:01:d8:
b3:12:02:e4:03:b0:74:af:01:d6:63:a8:36:f5:30:c8:0a:86:
7c:bb:94:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDoHIBlQWPBIqFGYTiHDLAVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTU2ZDRkN2IxZDFhMDZjZTg5Zjc0NmY3OWI2NTZjNzM0
OGM1MjUwHhcNMjYwOTI4MTMwMjU2WhcNMjYwOTI5MTMwMjU2WjAzMTEwLwYDVQQD
Eyg2OGI1MTkwNTRlYWM3NGFjY2EwNzQ1MWIzOTVmZTAxYmM3MWY5YmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8sKGGtt0N4Er8caxvrlUPT6jw1ob
mQyj731hTmzNkRHS4wX+irm/GzwFbujikYSr6sCA3EHDr1TuXHFP7OCYZq38pkTN
XdAKFqGZCEaGj/YirZvjIVZgxHuKdJU+FlOAdkTDTReD2eIrZy4kpJUMeQpihrPH
Io+Z3hurCopQq2Ajkmp+j3GPe2pwWYh11Hl98sJEr2Ext44dtVSk11J29JABLJms
DnLXCNBGZjtMGdoubpe14i8X/VRdNPHCK5yfCou/n1TdLCYqlUqrlJ3j4lH2ROJV
iYRPfqaK5lrz6nv7UhKyNsxijnNPIeUDlWF/IuTzcj2q6Wk3Bq4BGrVjUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGi1GQVOrHSsygdFGzlf4BvHH5vgMB8GA1UdIwQY
MBaAFC7lbU17HRoGzon3RvebZWxzSMUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHVWdFRYc2RHZ2JPaWZkRzk1dGxiSE5JeFNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9lMGI2N2UtMjY5MC00YTg4LTlkMTYt
MjJlOThkZTI2MTA2LzEvTHVWdFRYc2RHZ2JPaWZkRzk1dGxiSE5JeFNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9lMGI2N2UtMjY5MC00YTg4LTlkMTYtMjJlOThkZTI2MTA2
LzEvTHVWdFRYc2RHZ2JPaWZkRzk1dGxiSE5JeFNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLsoWkkr
xRvXq9Metnef9FrUZRdL5rKvwTWIHVfKAQmI616zAwPsI/yYnkXXRgsMPE2LJN2Y
rCZt5rykdFuH8Uc8OWcFzZtB5DqTfbOGZx4RLiPw3ksrkIS2zFpW6yQrJ8rThFOD
7fPVQJvV3i/hECBzKmrYzlYCMURYNx5XwcEEhyx+sLlDFuqT9CZOL4xSNK2xMGHm
EjlRzR9QXOU8NlfiVWvS1clgciNDswyr7Qrw2LaEiUp6TZ+IfvxsM6hUpD34RLmz
crJYoR465sI7Cy9zzOlFRCikFb7o3mqgHELBN+hgjJQLxAHYsxIC5AOwdK8B1mOo
NvUwyAqGfLuU8w==
-----END CERTIFICATE-----
Generated at Mon Sep 28 20:58:57 2026 by rpki-client