Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
File: LuKffz-qSKlAq42iErSxEWiD8nM.mft (raw, json)
Hash identifier: 5/KOwkpAF6f6gxm4Y1d5BHBHdDu5eY2biWQSc6S5hlM=
Subject key identifier: 4C:59:C6:E7:30:28:B6:84:76:D1:96:66:7A:87:F7:89:F4:40:A7:54
Authority key identifier: 2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
Certificate issuer: /CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Certificate serial: 019F91A41B0C7C068AC4BEE223ABD1F92D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 01:01:18 +0000
Manifest this update: Fri 24 Jul 2026 01:01:18 +0000
Manifest next update: Sat 25 Jul 2026 01:01:18 +0000
Files and hashes: 1: LuKffz-qSKlAq42iErSxEWiD8nM.crl (hash: Lme8WeMiP1ilh5qiV4Ol1IXk4eNLao2DeGeqCvPBT+s=)
2: _v7GfhVuqUV1D7sW2SlcrySGsrA.roa (hash: KzmQ49grnGxQlCZ2CCyjpnejNzdZeWdhTo34zMYUN0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:1b:0c:7c:06:8a:c4:be:e2:23:ab:d1:f9:2d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Validity
Not Before: Jul 24 01:01:18 2026 GMT
Not After : Jul 25 01:01:18 2026 GMT
Subject: CN=4c59c6e73028b68476d196667a87f789f440a754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:1d:32:65:51:1b:36:96:9b:f0:57:35:2f:
cd:9c:34:75:03:bb:18:d5:7b:ae:4d:74:18:1d:1d:
47:61:2e:6f:a9:31:cd:2f:a6:95:6f:78:97:9f:ea:
2b:20:c5:b8:11:35:92:9f:d3:05:5b:48:2a:d7:ee:
15:06:a1:f7:0b:6c:ed:99:fd:ee:9c:2e:8b:35:22:
3f:4e:62:dd:b8:05:65:2a:b6:7a:ca:1e:00:6a:56:
1c:65:db:1a:42:d2:08:81:f6:d5:99:c0:05:d7:d4:
32:89:dd:1c:58:9e:62:1e:72:7b:b4:bb:9c:4b:84:
46:20:53:0e:58:54:d9:76:04:7a:64:b3:b9:c7:25:
43:93:f2:0b:87:35:92:b6:a9:10:30:d5:59:8c:97:
79:c0:dd:70:27:9d:a3:b4:36:21:c8:74:50:41:98:
92:0b:8e:03:0e:3d:35:60:ba:6d:03:f5:a1:d4:6a:
71:76:fd:85:2c:fd:6d:ee:ca:73:cd:6c:f8:b5:d2:
3e:50:c4:e1:74:37:7b:ca:f7:69:8c:5a:e7:08:3d:
92:14:40:3a:2a:f1:a0:81:f4:4a:21:19:ea:4f:0f:
53:a2:2e:78:76:4a:df:ce:22:56:7d:87:6c:74:95:
c9:cd:6c:56:30:1a:4f:83:62:37:34:7b:a2:4f:6e:
67:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:59:C6:E7:30:28:B6:84:76:D1:96:66:7A:87:F7:89:F4:40:A7:54
X509v3 Authority Key Identifier:
keyid:2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:71:e7:ef:3a:74:05:b3:eb:01:ff:2f:42:9a:af:3d:ff:f7:
2c:4e:b2:39:10:79:95:a0:c8:b9:5f:16:56:c0:5f:c6:ac:6c:
ee:0b:96:24:f5:5e:e9:8d:95:3a:2d:e0:d3:34:31:c0:52:6c:
47:a6:75:89:72:57:9f:e4:f5:12:60:8c:24:b8:4a:e9:89:da:
9b:c4:c9:76:4c:a9:dd:33:e7:b4:43:74:3d:f5:4e:ad:e3:dc:
75:18:32:f2:0a:cd:91:5f:58:28:66:d9:8c:67:75:76:f6:c9:
58:0a:be:61:49:b4:99:eb:98:14:ec:ae:f1:ad:b9:3b:e7:d0:
a6:04:c2:a2:af:80:66:b9:0a:9a:df:5c:4a:51:f4:22:ed:c5:
7f:5e:eb:d1:65:32:7e:31:d0:2e:92:66:cb:4b:3a:58:4f:f6:
f1:ce:6c:f4:a7:8e:59:33:b9:26:45:fc:f9:7c:7a:d3:29:4d:
ac:bc:b6:91:28:b4:e3:b1:af:9d:8b:45:cd:6d:93:24:04:28:
11:15:80:bb:d3:69:35:fd:dc:c5:a2:5a:1e:83:b1:e5:86:32:
a7:fb:99:d8:70:8c:b3:ce:6a:c4:b3:69:10:db:9f:57:55:b5:
bd:3d:82:bf:e1:59:11:79:a1:9e:6d:7c:6b:4d:ac:12:5f:4e:
0f:d5:3d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:42:03 2026 by rpki-client