Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
File: luqxm-wiLHBaHrA6gN80FTnZfxQ.mft (raw, json)
Hash identifier: KH8mg+Um1E6SmjJ5oyxRwm6m919kY6lOE91DyJuZUCI=
Subject key identifier: 32:82:15:15:BF:EA:EF:DB:1D:7E:3A:71:B5:FE:D3:9E:ED:0D:F3:0B
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial: 019D27E01E326DB9577B4C5152398D1C393B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
Manifest number: 181A
Signing time: Thu 26 Mar 2026 02:01:32 +0000
Manifest this update: Thu 26 Mar 2026 02:01:32 +0000
Manifest next update: Fri 27 Mar 2026 02:01:32 +0000
Files and hashes: 1: P1-lVsh39b68C2fcHVD1_sjkJwo.roa (hash: rA4I4sxzVTPzctitCPx83L6sgwq9KNqZHwSs09AGUyM=)
2: ZF23aY-CislUcGs4sF1_a5gGqFM.roa (hash: bNrA+qkyY4wPfBF4EpAtk3FnCkzC3b5zjZDfRB+i3ec=)
3: luqxm-wiLHBaHrA6gN80FTnZfxQ.crl (hash: aIZYs6tSP0JYd14DA+qyoLnNk6gDZ9m6EhC8FVkQ6cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:1e:32:6d:b9:57:7b:4c:51:52:39:8d:1c:39:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
Validity
Not Before: Mar 26 02:01:32 2026 GMT
Not After : Mar 27 02:01:32 2026 GMT
Subject: CN=32821515bfeaefdb1d7e3a71b5fed39eed0df30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ae:d7:c6:59:32:32:91:74:82:ca:5b:d5:24:
27:78:26:6e:0b:7a:dc:58:e1:45:12:bd:cc:76:3f:
e7:07:f0:77:e6:17:93:75:2d:80:e6:ff:4a:2a:be:
77:7e:18:ac:92:18:d6:b9:24:04:13:ac:3e:fb:da:
ca:cf:4b:e5:f6:5b:c9:f7:a6:b4:bb:b7:fb:e3:9d:
9a:58:aa:a2:8f:6b:68:99:da:fd:c6:19:eb:b1:83:
32:b0:25:2e:70:39:1d:61:a0:23:b1:58:fa:1b:54:
23:73:a2:d5:e7:b7:68:fc:44:b6:7f:2c:9a:5e:41:
76:35:20:26:f6:63:99:9d:3e:89:67:c7:10:88:e0:
d9:83:ea:fb:ef:f8:04:0f:95:c9:0e:66:dd:a7:23:
58:fb:03:ef:a9:e2:ad:e6:e5:40:9a:1d:b6:97:c2:
f7:4f:17:d4:50:98:3b:65:32:25:f7:a8:34:f4:99:
b5:2d:20:c7:40:4b:77:a6:1c:23:f9:a5:86:f2:e3:
9e:19:70:80:07:0b:9c:3d:29:c3:1d:e2:e9:d4:b5:
48:c8:3d:f2:ec:d0:25:c2:a1:54:17:d3:1a:8a:36:
1f:60:9c:2e:e5:af:fe:24:16:ba:45:56:37:f9:26:
b2:57:22:bb:f5:c6:a8:fe:e2:d0:5c:0d:7c:b3:9a:
d5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:82:15:15:BF:EA:EF:DB:1D:7E:3A:71:B5:FE:D3:9E:ED:0D:F3:0B
X509v3 Authority Key Identifier:
keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:95:be:ea:73:aa:44:37:c3:c7:28:63:2d:fa:80:71:1a:d2:
69:24:02:f3:c5:cc:10:c4:e3:26:7d:37:66:56:fc:74:a0:b4:
36:4c:fd:61:96:ba:84:af:21:4f:e5:8d:15:5f:cb:ad:9f:d0:
b2:0c:19:1d:04:fb:fd:73:b8:f0:ea:c1:da:fd:27:d1:16:56:
87:e7:35:f0:3b:a7:03:bb:3b:e6:4b:3c:b0:39:a9:33:c6:f8:
b9:7a:f7:c9:5d:65:04:b2:95:30:5f:d5:81:7c:6a:8d:2e:e3:
f2:59:58:7e:b4:41:8b:f3:3e:c6:f3:36:84:22:b3:84:c5:f0:
07:a7:be:6d:03:10:07:92:37:98:10:02:61:ef:75:94:e9:06:
6e:aa:a5:81:ac:1f:f0:e2:2e:a5:64:fb:31:d6:05:7b:cc:d7:
f3:54:71:0e:c0:b4:78:c0:0c:58:bd:52:89:e2:22:3d:45:d1:
db:a2:2a:89:28:25:44:dd:ee:49:75:4f:5d:3e:19:4d:37:23:
45:92:c3:73:c3:b2:fc:8f:ce:ff:ae:d5:f5:94:c5:f6:f3:98:
26:58:14:84:88:56:9e:4f:65:93:b4:1f:d8:24:8e:16:8a:30:
a6:4a:10:02:25:b7:29:96:5f:ea:7a:f9:f4:7c:8e:c0:b2:47:
c9:c8:70:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:37 2026 by rpki-client