Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
File: luqxm-wiLHBaHrA6gN80FTnZfxQ.mft (raw, json)
Hash identifier: P/N/kn53QsZQSHe11IiAT28dccz1Rw7+8MVBnwyFUNg=
Subject key identifier: 2E:03:96:99:A4:36:49:46:DB:3B:D7:89:95:FA:A2:0F:18:64:8D:A2
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial: 01A1DCEFE1A6C90D50BE1F1430DB1E31E300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
Manifest number: 1A8A
Signing time: Sun 15 Nov 2026 02:01:10 +0000
Manifest this update: Sun 15 Nov 2026 02:01:10 +0000
Manifest next update: Mon 16 Nov 2026 02:01:10 +0000
Files and hashes: 1: P1-lVsh39b68C2fcHVD1_sjkJwo.roa (hash: rA4I4sxzVTPzctitCPx83L6sgwq9KNqZHwSs09AGUyM=)
2: ZF23aY-CislUcGs4sF1_a5gGqFM.roa (hash: bNrA+qkyY4wPfBF4EpAtk3FnCkzC3b5zjZDfRB+i3ec=)
3: luqxm-wiLHBaHrA6gN80FTnZfxQ.crl (hash: dl7z5q+TYdxInT93QjEmPFLfgxcKMaMLgj8SZR23aQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:ef:e1:a6:c9:0d:50:be:1f:14:30:db:1e:31:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
Validity
Not Before: Nov 15 02:01:10 2026 GMT
Not After : Nov 16 02:01:10 2026 GMT
Subject: CN=2e039699a4364946db3bd78995faa20f18648da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:06:5e:84:31:81:72:c4:53:b3:33:4c:70:
05:82:99:1b:98:f7:39:80:64:ff:94:d8:58:32:ea:
65:f9:03:e1:cd:cd:50:a0:6e:ed:74:b7:81:8d:8e:
33:5d:71:f1:3b:14:15:51:be:72:45:a4:2f:b2:ec:
ad:c3:8c:5d:b8:06:4b:9e:60:c5:4e:41:78:b7:23:
48:8d:93:00:e3:3f:58:70:9e:8d:41:56:a5:7e:b0:
e0:5b:c3:1c:46:f6:ed:35:69:48:31:fa:2e:b7:a9:
d7:00:91:f3:d4:2d:85:2e:10:9c:8c:97:92:d9:85:
a4:de:61:91:f0:fd:7b:4d:29:a8:2d:5d:de:72:c6:
ce:89:d8:16:96:f0:6c:05:82:74:2f:6d:c8:45:72:
79:24:03:ab:13:1a:67:84:ef:24:c4:e8:94:0b:65:
69:31:0b:6a:77:d7:10:b2:72:3c:90:af:2a:8d:7d:
8a:93:b1:4f:49:54:60:fd:40:74:cc:6f:bf:5f:fc:
e7:4d:40:32:e1:5c:8d:80:c2:55:ba:f3:c2:da:91:
ce:37:be:24:71:63:22:fa:3f:07:03:46:91:ad:a5:
ec:02:da:86:f7:d7:ef:fe:0e:32:ee:3d:f1:80:84:
da:97:8b:c9:5c:70:d1:51:a6:b8:b5:fc:67:74:74:
51:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:03:96:99:A4:36:49:46:DB:3B:D7:89:95:FA:A2:0F:18:64:8D:A2
X509v3 Authority Key Identifier:
keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:5f:67:f5:9c:37:72:ed:45:b7:f0:41:37:3b:92:83:77:b3:
8b:eb:9f:95:86:76:f4:e4:a9:54:24:f2:bb:05:a5:51:d5:6b:
f3:d8:db:66:b8:7f:b7:58:84:12:d1:35:31:69:f8:46:8d:16:
a7:cd:9f:2c:37:df:78:5e:ae:27:e1:bc:37:eb:fa:e7:97:fb:
86:39:b2:90:f2:7b:ec:ed:fe:8e:a1:53:f4:09:0f:40:24:d4:
da:fa:f6:2a:43:51:3a:cb:e4:a0:64:16:c2:64:da:90:6d:e2:
49:d4:f1:a3:b7:d2:92:8b:9a:f8:8c:e3:c5:6b:20:04:20:cd:
62:93:fc:94:da:3c:63:3a:62:65:43:07:36:9b:05:b5:33:98:
e9:45:e0:1e:dc:f0:9e:08:8a:10:b1:e1:73:29:49:17:ce:8b:
dc:1d:a5:e6:c5:bd:3b:eb:1a:2d:e4:70:78:d7:a1:b3:d5:df:
f5:5d:4a:f6:ec:a5:08:be:26:cc:0d:6c:94:ca:9f:c5:75:7a:
b7:e0:0c:6d:31:26:34:74:ac:2a:08:48:28:0f:d9:cb:87:09:
ba:a0:84:04:13:a4:b5:f5:8b:3c:4f:4f:77:e8:ef:1d:5d:0c:
b1:c2:1b:8e:a1:62:da:9d:e1:0e:ad:e9:5c:ff:67:4e:96:a5:
9c:c1:5a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:14:18 2026 by rpki-client