Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
File: luqxm-wiLHBaHrA6gN80FTnZfxQ.mft (raw, json)
Hash identifier: 2c4n2kyy4eQs4djoc205jFrn6UdH/djUIhYlr3q+Lfo=
Subject key identifier: D1:F4:64:2D:3E:2D:97:C2:44:F5:49:D4:EE:B2:AF:80:F0:B3:9C:EF
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial: 01A0D45D00571E6FB03C4EE4DEDC555B3341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
Manifest number: 1A01
Signing time: Thu 24 Sep 2026 17:00:59 +0000
Manifest this update: Thu 24 Sep 2026 17:00:59 +0000
Manifest next update: Fri 25 Sep 2026 17:00:59 +0000
Files and hashes: 1: P1-lVsh39b68C2fcHVD1_sjkJwo.roa (hash: rA4I4sxzVTPzctitCPx83L6sgwq9KNqZHwSs09AGUyM=)
2: ZF23aY-CislUcGs4sF1_a5gGqFM.roa (hash: bNrA+qkyY4wPfBF4EpAtk3FnCkzC3b5zjZDfRB+i3ec=)
3: luqxm-wiLHBaHrA6gN80FTnZfxQ.crl (hash: 25+dGhnGzilhjTCUdJ3dHk/G+uSKovBq8DPIUXiZSvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:00:57:1e:6f:b0:3c:4e:e4:de:dc:55:5b:33:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
Validity
Not Before: Sep 24 17:00:59 2026 GMT
Not After : Sep 25 17:00:59 2026 GMT
Subject: CN=d1f4642d3e2d97c244f549d4eeb2af80f0b39cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:03:63:8d:32:d4:c6:28:48:03:01:65:ab:9c:
58:87:f0:f5:5f:02:ab:07:1c:c9:d6:b1:c5:a8:1d:
6a:a4:af:af:4d:46:da:3e:b8:b3:ab:cf:db:e9:15:
f6:d6:01:01:92:69:fb:0f:45:2a:99:db:de:42:53:
7e:37:a4:f3:a4:4d:1c:6b:ba:c7:69:df:5e:e8:4e:
bc:7b:c6:70:29:3f:d5:43:85:d8:53:8a:a1:a1:f2:
18:e8:ef:69:10:c8:b3:e5:db:aa:cf:bc:42:62:aa:
57:f8:fb:c8:a8:a2:fd:05:4a:51:22:a7:d9:ea:2f:
12:dc:60:6f:e1:01:28:22:08:70:14:1c:2a:23:f6:
57:48:0e:49:87:0f:14:eb:f7:8c:f3:86:c4:6d:d9:
ed:9e:04:59:18:a2:d8:82:0a:0f:d8:b7:fe:56:8e:
c9:85:f5:1d:1e:63:96:ca:92:62:7c:2f:71:23:31:
f3:83:0a:db:bd:0e:ef:c7:45:57:e4:50:e1:3d:a2:
49:eb:7b:31:19:21:91:58:2b:26:64:e8:70:9c:1b:
3c:60:22:2d:b4:fc:5b:cd:3d:31:c5:01:16:2d:e7:
a5:fe:95:5b:e3:ce:8b:9a:43:d3:a1:24:6f:9f:19:
c6:72:2f:83:26:bc:48:91:54:e5:5e:57:a8:51:39:
1a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F4:64:2D:3E:2D:97:C2:44:F5:49:D4:EE:B2:AF:80:F0:B3:9C:EF
X509v3 Authority Key Identifier:
keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d8:9c:fd:86:8c:a9:98:40:96:4d:a4:73:12:35:a8:9e:21:
db:af:47:9f:9b:6c:bf:8f:17:57:4b:6c:9e:01:35:40:62:3a:
8a:01:1d:ca:68:b0:81:6e:61:66:62:4e:a8:59:57:28:17:88:
a1:ee:11:83:98:7a:3b:e1:91:17:fa:00:92:76:ec:11:d1:45:
30:f7:61:29:1e:a2:d9:ca:6e:8c:1a:3c:f0:cb:8b:7b:f9:bb:
e6:83:ed:89:75:0e:64:0f:45:e6:e6:f1:db:72:74:53:bf:2d:
0d:9e:e5:82:ed:cb:49:1a:61:0d:c7:3e:48:9a:14:62:54:d1:
43:20:d7:5c:90:eb:f3:38:d0:a8:92:91:2d:e3:33:f2:62:10:
9f:31:85:22:3f:f5:5b:4f:81:62:07:65:69:f7:1f:32:8b:68:
d3:5b:fc:75:22:7c:90:55:ff:52:3d:3c:75:e1:99:37:41:17:
be:b1:20:83:5f:d3:3f:da:4f:db:f0:c4:86:8e:d0:5d:10:93:
40:85:bc:2e:bb:57:02:94:fa:08:c3:92:d1:30:31:08:f6:59:
94:c4:86:47:ae:02:cf:cf:9b:5f:c3:0d:d7:3a:b8:81:92:b6:
c3:65:a4:ef:25:c6:91:ea:d5:51:b6:2b:a2:70:f8:f6:01:94:
f5:1e:ba:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:49:36 2026 by rpki-client