Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.mft
File: luqmiIUr9hQfUxdoBoMLTRbHZq8.mft (raw, json)
Hash identifier: o10y7gEoSGdRmffvCnyhliaqioAdDjzq1Y7AylNl+qk=
Subject key identifier: EC:BB:5E:2D:5B:B5:7D:A2:BC:BE:42:98:D4:EE:40:B7:CC:E2:D6:E8
Authority key identifier: 96:EA:A6:88:85:2B:F6:14:1F:53:17:68:06:83:0B:4D:16:C7:66:AF
Certificate issuer: /CN=96eaa688852bf6141f53176806830b4d16c766af
Certificate serial: 019D29295A25225CBE7FC2089585AD6C6259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqmiIUr9hQfUxdoBoMLTRbHZq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.mft
Manifest number: 023C
Signing time: Thu 26 Mar 2026 08:01:08 +0000
Manifest this update: Thu 26 Mar 2026 08:01:08 +0000
Manifest next update: Fri 27 Mar 2026 08:01:08 +0000
Files and hashes: 1: luqmiIUr9hQfUxdoBoMLTRbHZq8.crl (hash: Eph0fWoKGU0s/oPuUKBDNCH5qkVR0EfWn+qIGl+fcsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/luqmiIUr9hQfUxdoBoMLTRbHZq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:5a:25:22:5c:be:7f:c2:08:95:85:ad:6c:62:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eaa688852bf6141f53176806830b4d16c766af
Validity
Not Before: Mar 26 08:01:08 2026 GMT
Not After : Mar 27 08:01:08 2026 GMT
Subject: CN=ecbb5e2d5bb57da2bcbe4298d4ee40b7cce2d6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f7:41:6e:a8:be:ac:f1:8d:7b:22:78:70:b9:
e2:67:72:75:7e:5e:3d:58:45:7a:41:09:6c:90:87:
2f:25:06:20:b6:66:c2:8f:83:9c:0d:c2:c2:bc:c5:
9e:c2:eb:78:6c:f6:38:90:c0:b4:ac:7f:b0:f8:bc:
9d:4f:5f:04:34:e1:6c:37:58:f3:29:e8:2b:6b:4e:
02:5e:83:95:12:d1:9d:29:fc:15:91:83:f7:91:48:
67:ce:85:e7:28:8b:c5:be:af:63:56:e3:99:12:1d:
ee:55:34:d4:18:65:39:36:26:2b:7a:9d:9c:b5:7d:
a1:03:c0:92:c4:c5:c2:6c:f3:4b:1b:37:b0:d9:63:
89:c3:2d:eb:c0:6a:4e:54:bc:0e:d9:33:29:cf:8e:
e9:be:47:dc:24:c8:bf:76:7f:13:17:d1:10:8d:dc:
ce:09:03:41:f6:37:5e:6a:f4:47:be:f9:b5:4c:09:
03:91:d3:86:14:34:ee:c7:6f:f8:72:b2:a5:69:c9:
f8:f2:92:44:80:87:38:b5:68:46:34:7f:35:0b:9e:
dd:31:9d:96:4e:55:df:e2:a6:e2:f4:89:4a:1d:a8:
85:24:39:87:06:db:47:26:6a:4c:96:cd:52:73:18:
61:73:0a:19:76:bb:42:49:c1:09:f7:cd:a4:8f:eb:
d7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BB:5E:2D:5B:B5:7D:A2:BC:BE:42:98:D4:EE:40:B7:CC:E2:D6:E8
X509v3 Authority Key Identifier:
keyid:96:EA:A6:88:85:2B:F6:14:1F:53:17:68:06:83:0B:4D:16:C7:66:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqmiIUr9hQfUxdoBoMLTRbHZq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a8:26:75:a1:a5:36:33:af:d0:47:ab:1e:3c:93:f8:da:f7:
7c:3c:61:50:60:19:e8:4e:c9:77:ef:c2:c7:4f:2b:18:a3:d6:
1a:4e:5c:a2:44:bc:f1:be:94:2e:3a:f2:7b:ff:cc:9d:52:5e:
a2:40:a7:98:7e:06:d7:7b:37:26:b1:3a:42:54:fe:80:94:4b:
5b:40:67:34:97:b8:58:e1:8c:c7:21:ef:21:04:97:d9:21:e3:
0c:47:cf:d7:7e:e1:b0:a9:03:13:0a:51:78:f9:0c:5b:38:87:
b6:c0:fd:11:f1:f3:d2:c0:c8:0c:0f:9b:d8:14:2a:fe:1b:0d:
3f:f0:10:4d:be:b3:92:8d:57:58:a8:20:ff:74:f2:8b:cb:59:
61:6e:33:e3:db:7d:9a:43:a0:c3:c6:23:c5:6b:f8:46:60:44:
8b:33:aa:c9:07:c3:5d:b2:22:fc:06:09:59:c2:48:10:fc:34:
82:64:07:61:a5:36:49:84:dc:e1:ba:b8:3e:eb:47:15:7c:e1:
60:42:ee:35:e9:73:a8:01:d2:c9:31:a2:9d:fa:9f:04:9d:c2:
f7:e1:7f:8d:cb:f3:c0:aa:aa:1e:d8:91:72:60:99:9a:3d:0a:
67:8c:82:ad:4a:3d:5d:73:74:4d:d4:54:9d:e7:88:3f:25:d1:
57:54:ee:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKVolIly+f8IIlYWtbGJZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZWFhNjg4ODUyYmY2MTQxZjUzMTc2ODA2ODMwYjRkMTZj
NzY2YWYwHhcNMjYwMzI2MDgwMTA4WhcNMjYwMzI3MDgwMTA4WjAzMTEwLwYDVQQD
EyhlY2JiNWUyZDViYjU3ZGEyYmNiZTQyOThkNGVlNDBiN2NjZTJkNmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvdBbqi+rPGNeyJ4cLniZ3J1fl49
WEV6QQlskIcvJQYgtmbCj4OcDcLCvMWewut4bPY4kMC0rH+w+LydT18ENOFsN1jz
Kegra04CXoOVEtGdKfwVkYP3kUhnzoXnKIvFvq9jVuOZEh3uVTTUGGU5NiYrep2c
tX2hA8CSxMXCbPNLGzew2WOJwy3rwGpOVLwO2TMpz47pvkfcJMi/dn8TF9EQjdzO
CQNB9jdeavRHvvm1TAkDkdOGFDTux2/4crKlacn48pJEgIc4tWhGNH81C57dMZ2W
TlXf4qbi9IlKHaiFJDmHBttHJmpMls1ScxhhcwoZdrtCScEJ982kj+vX6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOy7Xi1btX2ivL5CmNTuQLfM4tboMB8GA1UdIwQY
MBaAFJbqpoiFK/YUH1MXaAaDC00Wx2avMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHVxbWlJVXI5aFFmVXhkb0JvTUxUUmJIWnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kMjY3MjctYjUxMi00ZDM3LWIwM2Qt
NGM0ZjcwNDMzNzQxLzEvbHVxbWlJVXI5aFFmVXhkb0JvTUxUUmJIWnE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9kMjY3MjctYjUxMi00ZDM3LWIwM2QtNGM0ZjcwNDMzNzQx
LzEvbHVxbWlJVXI5aFFmVXhkb0JvTUxUUmJIWnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq6gmdaGl
NjOv0EerHjyT+Nr3fDxhUGAZ6E7Jd+/Cx08rGKPWGk5cokS88b6ULjrye//MnVJe
okCnmH4G13s3JrE6QlT+gJRLW0BnNJe4WOGMxyHvIQSX2SHjDEfP137hsKkDEwpR
ePkMWziHtsD9EfHz0sDIDA+b2BQq/hsNP/AQTb6zko1XWKgg/3Tyi8tZYW4z49t9
mkOgw8YjxWv4RmBEizOqyQfDXbIi/AYJWcJIEPw0gmQHYaU2SYTc4bq4PutHFXzh
YELuNelzqAHSyTGinfqfBJ3C9+F/jcvzwKqqHtiRcmCZmj0KZ4yCrUo9XXN0TdRU
neeIPyXRV1Tuww==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:45 2026 by rpki-client