Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
File: LuVtTXsdGgbOifdG95tlbHNIxSU.mft (raw, json)
Hash identifier: nC6Gl2rgufZMOLXNY/bZ6YPjj2bUpVf2NDSXRdQ9mAI=
Subject key identifier: 1E:6A:16:BD:3C:89:23:85:4D:4A:B8:AC:C0:D5:15:23:6B:5E:C3:F6
Authority key identifier: 2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
Certificate issuer: /CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Certificate serial: 019D2C610067A2E6A05FC05DD41319D13320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 23:00:47 +0000
Manifest this update: Thu 26 Mar 2026 23:00:47 +0000
Manifest next update: Fri 27 Mar 2026 23:00:47 +0000
Files and hashes: 1: 8XJI8Ab5Kn4iGwXJ6PSkR-OvFH4.roa (hash: SgXQOVpKdakFip4Eu8vjLUkRXfKk3oyvAOpf3ZBZws8=)
2: LuVtTXsdGgbOifdG95tlbHNIxSU.crl (hash: WVodEvgYACEZYIoWKdps7XaHT6/0n0jvFofdy5YgYeo=)
3: zeRg5rwyVQrQCVsUlLyRvPr9TxI.roa (hash: T17rFq6E9471MLMBhrGLFdRcWoO+rQ0ILITYoqDpgKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:61:00:67:a2:e6:a0:5f:c0:5d:d4:13:19:d1:33:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Validity
Not Before: Mar 26 23:00:47 2026 GMT
Not After : Mar 27 23:00:47 2026 GMT
Subject: CN=1e6a16bd3c8923854d4ab8acc0d515236b5ec3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:c2:31:15:a3:d5:cd:cd:6a:0a:f2:31:22:
2e:b6:73:45:04:19:72:c7:3c:96:65:c4:ed:67:52:
c7:bf:62:42:b2:7f:3d:3c:7e:1f:ee:5e:a9:93:12:
dc:6f:7c:27:ba:b9:2b:53:a8:f5:4f:65:8b:d1:13:
17:21:72:da:0b:29:58:5d:7d:51:23:f3:66:48:6a:
e5:bf:ce:4d:cc:dd:f0:ed:97:5b:68:15:4e:17:ce:
7c:9f:9c:2b:35:0c:cf:dc:0e:7c:56:6e:37:d2:14:
b2:de:e2:20:3b:6b:7c:bc:b3:7b:0f:36:99:df:fc:
78:0d:0b:52:3c:95:32:45:d1:b7:08:31:ab:d7:9d:
50:3f:f5:0f:70:07:0f:79:e9:a8:64:94:77:36:b8:
5b:4b:4d:1f:86:e0:6d:e5:0c:73:f8:d1:0e:e7:8a:
f2:a0:9e:88:c4:12:1f:dc:19:b5:b6:88:29:3d:8d:
0c:66:de:da:7c:98:7a:55:e3:4e:0e:13:08:62:46:
a0:3a:cc:58:97:66:09:24:c0:aa:f3:49:46:a1:e9:
c8:df:d5:7a:6f:0b:e3:a0:13:71:12:25:f1:bc:23:
ef:6d:a5:6c:7e:91:6a:21:6e:53:7c:ae:a5:f0:86:
05:c7:0c:5d:5b:fd:11:a9:62:5d:ae:0d:0b:6f:c2:
83:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6A:16:BD:3C:89:23:85:4D:4A:B8:AC:C0:D5:15:23:6B:5E:C3:F6
X509v3 Authority Key Identifier:
keyid:2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a4:37:fe:c5:a2:aa:e8:e2:6d:5b:a8:28:79:35:00:2a:c8:
50:72:6c:06:ae:87:ec:f1:0a:ec:bb:09:94:55:19:d7:4c:c2:
5d:35:93:d7:43:0b:8e:6e:0c:ce:f1:a9:9b:7b:2e:b0:dd:28:
58:3e:54:fc:5c:72:28:e8:e6:01:b7:2b:d2:0d:3b:ed:18:35:
4b:fa:b4:4f:fa:4c:10:7d:36:c9:33:b3:5c:c9:da:51:d5:a5:
89:26:c3:6e:a2:b7:33:c4:1f:6d:be:60:da:d0:5b:ee:69:b9:
9f:8a:09:e9:c1:03:8c:33:0e:14:1e:f3:5d:09:08:9e:8b:fb:
3c:cc:da:7a:af:e3:93:17:32:ad:17:b9:f5:c4:be:c4:83:9e:
e3:b6:53:24:84:3f:fd:c7:0a:98:4c:15:45:15:6c:e8:79:e1:
18:d8:e7:43:bd:91:2d:7a:01:c7:f9:1e:b1:e7:89:e5:22:24:
07:fe:03:4c:c6:81:bd:86:aa:c8:50:b4:e7:55:66:1e:65:95:
8f:20:9a:2c:41:e9:69:33:ff:9b:8a:64:4f:71:1d:90:61:5c:
da:16:c0:0c:cb:a2:81:2b:b6:29:68:ad:01:6d:85:4b:d9:97:
c8:eb:2b:3b:c9:02:56:c8:7a:5b:b8:a4:26:53:02:55:c1:ab:
49:4d:17:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:07:12 2026 by rpki-client