
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
File: Luu2kbJPKHklPjpqReC1xSZzsJ0.mft (raw, json)
Hash identifier: QxKxxWZ5UiwtcJIw1hOyip3me58C9z4eqzG2ivWRl2I=
Subject key identifier: 32:95:DF:43:AE:FB:38:2C:13:8B:B4:4E:F1:B6:1E:93:A5:3B:82:0A
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Certificate issuer: /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial: 01A0CD7E87902A396B8A89F1CE9CAC83C5EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
Manifest number: 0AD9
Signing time: Wed 23 Sep 2026 09:00:16 +0000
Manifest this update: Wed 23 Sep 2026 09:00:16 +0000
Manifest next update: Thu 24 Sep 2026 09:00:16 +0000
Files and hashes: 1: 6kJGhc3ZtSczUQNlHwfEaoAKI6A.roa (hash: /AXpy1YpXm6wZd3dp3BlNrVWuegkD47mcZNJHab7In8=)
2: A_Gsm_4wOb5bRF9FeIGRJivwiWk.roa (hash: WONLo4ffdGZ7F3KpQJPg5nA7ymG/aYtdHiv4YFfeuRU=)
3: CsbFJodnTTBOteGZYTM_kxh6h4A.roa (hash: 1youDpmPpKqapYaqaUtX7DWp3NhFDZTB5nkz5cNz1/A=)
4: FSD_xSgegT7cc3ZOOtXLgaBRjMs.roa (hash: NjZYQpqM0fGA4f7q8Gmw6Ge+hAZ+q6h+/rmaXtDWmiA=)
5: Luu2kbJPKHklPjpqReC1xSZzsJ0.crl (hash: 1sR1SLHCc98dpDaXk+ScrLnB88TlEC1hxcP8toXgi88=)
6: NBxLrYp1MaNdT6TxvAAYtWfhewg.roa (hash: rPCIzznV2WzQjL2Incul5yMnndBlCUTkN9KZDjWN1Xo=)
7: uOdM0HaYrm9ssDjW8FvHnuA2ea0.roa (hash: 61P08wU4MuXomQI9LNTPbGuYgSvHUpRRhzxSAPpCJWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:87:90:2a:39:6b:8a:89:f1:ce:9c:ac:83:c5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Validity
Not Before: Sep 23 09:00:16 2026 GMT
Not After : Sep 24 09:00:16 2026 GMT
Subject: CN=3295df43aefb382c138bb44ef1b61e93a53b820a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:1c:7f:32:10:1e:c8:b6:b8:32:ef:e6:a5:
4f:08:f0:64:ef:b3:e5:ab:8d:7b:ba:83:32:ac:b4:
ae:bf:3e:33:5a:aa:d1:18:9d:26:05:b1:58:77:6a:
6f:f8:f4:5b:25:6b:69:b9:0a:7b:4e:a7:ff:4c:c4:
6b:d8:b7:e8:46:28:dc:b5:37:3e:ab:58:db:4f:ec:
f6:6e:ea:8e:60:ac:0b:62:5a:26:bf:ef:f3:e4:04:
35:fd:22:e5:33:ad:06:02:13:21:f3:71:54:8e:f0:
5e:2e:0d:63:a1:8d:c8:50:4a:f3:c4:f3:d7:a4:27:
74:b2:01:c7:ea:cb:ac:74:61:54:06:8a:92:29:c7:
7f:4c:ff:7a:07:b9:13:2c:32:a8:8b:fb:93:79:f6:
91:0e:e7:7d:04:5d:cc:b7:cb:b0:ea:98:4c:77:9c:
79:a1:9a:14:4b:59:21:5a:8f:74:d6:cb:70:2a:83:
0b:6e:0f:bc:ed:27:00:eb:08:31:68:70:f8:12:56:
b5:a7:17:ee:19:d4:11:e1:67:c1:9d:cd:0f:36:3f:
5f:ac:3a:d3:b8:49:a3:87:2e:a3:4f:fc:05:e8:0a:
24:27:af:d5:b6:5f:4b:f4:27:a0:14:5f:f0:20:5d:
f1:b1:51:09:d6:3f:05:9a:72:b9:30:b3:7c:94:25:
c3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:95:DF:43:AE:FB:38:2C:13:8B:B4:4E:F1:B6:1E:93:A5:3B:82:0A
X509v3 Authority Key Identifier:
keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e0:26:8d:b0:02:ce:5f:27:21:e5:a3:9f:1f:7f:6e:6f:a0:
26:6a:61:ae:9f:01:7c:5c:5b:5f:40:4a:b7:0e:d7:f1:6a:87:
6a:98:cf:9b:08:b3:8d:57:73:14:9c:c0:a6:75:2a:b6:d0:bb:
45:15:62:b1:b3:8a:7b:f1:83:dc:2f:9e:3b:d9:08:10:d7:96:
d2:b3:ee:c7:22:35:59:5f:2a:da:f7:d6:d7:18:ef:38:77:62:
41:f4:f2:d3:2d:7b:54:b3:18:53:a9:0e:7e:b3:92:fb:5a:6a:
fe:fb:20:78:bf:af:0b:5d:a6:58:61:e2:b9:50:cd:df:e1:f2:
ec:2a:3f:0e:e9:3f:16:62:03:3b:fc:c0:de:16:90:07:66:5c:
1e:97:60:a9:64:f6:5b:18:f3:5e:09:b7:bf:40:bc:dd:c6:44:
80:0e:8f:db:f8:c1:58:d2:82:29:64:e6:10:88:18:66:e6:25:
3a:7f:5b:bd:10:8e:03:c5:d0:34:f2:13:2b:3c:0d:4a:d9:cf:
73:ce:50:ff:af:88:e7:8e:f0:5a:5b:46:00:f1:66:01:3d:85:
f0:cd:ad:2f:b6:09:59:c5:f6:6e:1d:cc:94:46:d7:22:89:98:
94:2f:3c:f4:1a:00:01:29:42:c3:c4:40:25:7f:f4:c7:4e:5f:
14:89:07:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNfoeQKjlrionxzpysg8XrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZWJiNjkxYjI0ZjI4NzkyNTNlM2E2YTQ1ZTBiNWM1MjY3
M2IwOWQwHhcNMjYwOTIzMDkwMDE2WhcNMjYwOTI0MDkwMDE2WjAzMTEwLwYDVQQD
EygzMjk1ZGY0M2FlZmIzODJjMTM4YmI0NGVmMWI2MWU5M2E1M2I4MjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPkcfzIQHsi2uDLv5qVPCPBk77Pl
q417uoMyrLSuvz4zWqrRGJ0mBbFYd2pv+PRbJWtpuQp7Tqf/TMRr2LfoRijctTc+
q1jbT+z2buqOYKwLYlomv+/z5AQ1/SLlM60GAhMh83FUjvBeLg1joY3IUErzxPPX
pCd0sgHH6susdGFUBoqSKcd/TP96B7kTLDKoi/uTefaRDud9BF3Mt8uw6phMd5x5
oZoUS1khWo901stwKoMLbg+87ScA6wgxaHD4Ela1pxfuGdQR4WfBnc0PNj9frDrT
uEmjhy6jT/wF6AokJ6/Vtl9L9CegFF/wIF3xsVEJ1j8FmnK5MLN8lCXDZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKV30Ou+zgsE4u0TvG2HpOlO4IKMB8GA1UdIwQY
MBaAFC7rtpGyTyh5JT46akXgtcUmc7CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAt
ZGEzZTExOTJjZGY2LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAtZGEzZTExOTJjZGY2
LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+AmjbAC
zl8nIeWjnx9/bm+gJmphrp8BfFxbX0BKtw7X8WqHapjPmwizjVdzFJzApnUqttC7
RRVisbOKe/GD3C+eO9kIENeW0rPuxyI1WV8q2vfW1xjvOHdiQfTy0y17VLMYU6kO
frOS+1pq/vsgeL+vC12mWGHiuVDN3+Hy7Co/Duk/FmIDO/zA3haQB2ZcHpdgqWT2
WxjzXgm3v0C83cZEgA6P2/jBWNKCKWTmEIgYZuYlOn9bvRCOA8XQNPITKzwNStnP
c85Q/6+I547wWltGAPFmAT2F8M2tL7YJWcX2bh3MlEbXIomYlC889BoAASlCw8RA
JX/0x05fFIkHJA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:01:41 2026 by rpki-client