Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
File: LuKffz-qSKlAq42iErSxEWiD8nM.mft (raw, json)
Hash identifier: Atr7fim/xuT47rVzXp+5E41c/zLSEIGinaLhvgQ0MWs=
Subject key identifier: 7E:D0:9B:69:E0:BB:94:9C:CA:39:6B:C3:43:83:F9:55:3B:58:93:F4
Authority key identifier: 2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
Certificate issuer: /CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Certificate serial: 019D27A92F8E2556E79905BC2792A07411A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 01:01:32 +0000
Manifest this update: Thu 26 Mar 2026 01:01:32 +0000
Manifest next update: Fri 27 Mar 2026 01:01:32 +0000
Files and hashes: 1: LuKffz-qSKlAq42iErSxEWiD8nM.crl (hash: L4SHC2Ugs7xXNklD22WnVbS0LIKDttd4NXDpZz5x9CE=)
2: _v7GfhVuqUV1D7sW2SlcrySGsrA.roa (hash: KzmQ49grnGxQlCZ2CCyjpnejNzdZeWdhTo34zMYUN0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:2f:8e:25:56:e7:99:05:bc:27:92:a0:74:11:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Validity
Not Before: Mar 26 01:01:32 2026 GMT
Not After : Mar 27 01:01:32 2026 GMT
Subject: CN=7ed09b69e0bb949cca396bc34383f9553b5893f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:50:6a:bc:b1:41:8c:86:1a:f2:03:8d:84:16:
38:50:1d:c6:09:36:c4:c4:49:92:49:36:8f:3d:93:
29:a6:4d:8f:cc:54:79:33:22:a9:d3:70:75:e9:dc:
3b:eb:b5:3e:43:fa:ec:05:1a:9c:8d:9c:39:b5:d9:
bd:d0:dc:7a:07:67:d3:81:ef:ef:a1:b3:eb:9f:ce:
e2:0e:bb:34:77:54:98:89:f3:5e:72:a1:a0:83:2b:
14:12:55:5c:16:23:f2:03:f0:bf:7e:fa:d6:ab:3b:
e8:71:d6:82:de:b2:55:a0:29:2c:0a:90:a0:77:e4:
58:ca:47:57:bc:01:bb:bf:fd:11:6c:58:51:91:c4:
6e:01:50:48:2f:1c:46:62:ec:d2:7e:57:94:b4:10:
e9:f2:fb:c6:99:52:ec:94:c3:2b:ab:03:78:a1:00:
ec:8d:1a:c8:14:70:c4:9d:bf:89:58:1c:37:71:a1:
79:f2:8d:d8:4c:77:fe:c2:c0:04:b5:91:42:6e:98:
bf:f5:90:a2:6c:ea:78:6b:a9:82:8a:9f:50:24:da:
fd:a9:73:d5:b4:26:9f:7e:4f:fd:de:88:3e:22:54:
0d:50:1b:50:5f:e7:a6:ff:73:b4:aa:be:3a:ca:99:
87:be:03:09:6e:ec:c4:f2:c4:62:c5:61:ba:a2:7b:
f6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D0:9B:69:E0:BB:94:9C:CA:39:6B:C3:43:83:F9:55:3B:58:93:F4
X509v3 Authority Key Identifier:
keyid:2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:fb:23:33:37:d3:b2:02:22:d3:66:69:03:0c:20:51:68:f6:
e1:56:a6:0d:ad:1f:7d:cf:6c:6a:da:c9:a5:0f:fd:8f:f1:bf:
48:04:6a:d6:db:4e:66:8a:4f:7e:45:a6:cb:45:76:75:0f:a1:
ab:8a:56:c8:2c:9a:39:2c:d6:d2:04:b0:58:ba:cb:a0:22:04:
bc:15:05:6b:16:1b:b3:25:58:80:8d:1a:63:b7:58:a2:27:2f:
8c:e0:48:de:23:05:ea:a5:fc:42:16:c2:b2:9b:be:a0:84:7e:
a2:6f:ef:c7:41:89:6b:f3:f3:1f:59:a9:f5:b1:b1:58:fc:30:
7a:36:99:cc:c1:5e:c6:61:28:c4:79:c9:63:4f:3b:1b:07:fc:
7b:05:7a:48:2e:00:f8:a9:08:39:57:22:c1:80:64:a1:25:e9:
1d:e6:e2:cb:0f:30:80:31:8a:bd:bc:f3:51:f7:bf:49:e7:03:
86:44:dc:02:24:06:a1:5b:cd:f9:82:23:f2:87:00:74:64:cf:
e8:4c:93:3c:95:94:39:60:1b:9a:c7:94:4b:81:c5:10:40:22:
9f:9a:cc:6e:93:b7:31:d8:a3:3e:35:eb:0a:22:27:15:79:a7:
77:b9:5d:46:3c:c4:13:52:1d:49:42:05:31:7c:b7:a7:d1:37:
2e:79:7b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:27:45 2026 by rpki-client