Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
File: LuVtTXsdGgbOifdG95tlbHNIxSU.mft (raw, json)
Hash identifier: 1dsexpgRb/x4R3P04Lbbq+pPdVfbld1sjCS7QjhgxZk=
Subject key identifier: 7D:CE:67:AA:89:2E:0E:A3:F2:10:6A:9A:D8:98:1C:B9:D8:D7:21:7B
Authority key identifier: 2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
Certificate issuer: /CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Certificate serial: 019D9C6330250A4A978F2954C90EE85E4F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 17:00:39 +0000
Manifest this update: Fri 17 Apr 2026 17:00:39 +0000
Manifest next update: Sat 18 Apr 2026 17:00:39 +0000
Files and hashes: 1: 8XJI8Ab5Kn4iGwXJ6PSkR-OvFH4.roa (hash: SgXQOVpKdakFip4Eu8vjLUkRXfKk3oyvAOpf3ZBZws8=)
2: LuVtTXsdGgbOifdG95tlbHNIxSU.crl (hash: sFOQOCjufHqsKoY/qIwBpfohdCp7lUll9eoMu5klSOA=)
3: zeRg5rwyVQrQCVsUlLyRvPr9TxI.roa (hash: T17rFq6E9471MLMBhrGLFdRcWoO+rQ0ILITYoqDpgKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:30:25:0a:4a:97:8f:29:54:c9:0e:e8:5e:4f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Validity
Not Before: Apr 17 17:00:39 2026 GMT
Not After : Apr 18 17:00:39 2026 GMT
Subject: CN=7dce67aa892e0ea3f2106a9ad8981cb9d8d7217b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0c:5c:7d:b5:12:fc:e5:8d:86:ae:eb:1b:1f:
8c:cd:0e:0e:65:44:23:4f:e5:5f:d8:34:22:53:7d:
01:fe:89:d8:c0:f3:a0:b5:a6:14:c5:83:91:d9:53:
ad:f8:50:da:53:bb:28:94:ce:a3:94:84:8b:ea:a9:
2d:3c:10:0a:c1:57:d8:9d:6d:12:a7:22:2b:e0:31:
63:81:d1:3f:41:55:cd:6a:60:fc:86:ce:bc:e5:47:
32:2a:32:66:48:a2:cb:76:91:4a:83:cb:17:47:45:
c5:6a:23:e2:e6:e9:9b:58:48:c3:30:48:a4:84:27:
47:4d:c0:5f:93:a3:da:9a:43:ee:14:cd:6a:f1:12:
06:a4:7d:48:4e:b3:f0:46:39:10:27:77:6b:a2:37:
35:38:02:0b:e3:00:d4:49:67:e4:5f:7b:42:ad:93:
a7:c1:47:ec:2c:31:fe:14:5b:24:ab:00:0e:09:57:
64:14:a2:eb:1d:ce:b1:5d:a2:6b:ad:7c:0f:34:bb:
9c:e3:fc:d3:7f:bc:35:ed:d2:18:68:12:14:f7:37:
2e:7d:26:bd:0d:d9:d2:58:45:6c:f9:28:e4:de:c3:
82:3d:ee:9e:70:d8:b5:ed:d7:75:2d:b3:20:aa:ba:
c8:95:9a:5b:a8:03:ee:79:47:7c:dc:5f:be:fc:c6:
12:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CE:67:AA:89:2E:0E:A3:F2:10:6A:9A:D8:98:1C:B9:D8:D7:21:7B
X509v3 Authority Key Identifier:
keyid:2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3f:df:b3:61:8f:f8:01:39:55:f1:f7:51:81:b3:bf:6b:7d:
76:d6:36:67:a3:10:a1:d1:d7:12:f1:ff:e3:63:0c:51:39:1b:
21:62:5d:63:0d:34:f0:2b:95:57:3c:5b:c5:04:a7:af:f1:2e:
d8:3a:31:96:0f:bf:23:e9:f5:58:00:db:bd:ea:be:0b:d5:ba:
90:71:94:c1:6d:aa:64:05:08:5d:cf:2f:02:40:37:88:62:e9:
5a:ea:96:27:a4:40:cb:61:43:50:11:83:35:74:ce:bd:b2:93:
7c:c0:45:00:27:65:aa:df:4a:b9:bb:09:c6:18:6b:be:db:c5:
88:37:75:8d:a3:6c:39:90:66:e3:eb:04:85:f1:09:4a:e5:03:
bd:8e:17:9a:07:af:e7:da:cd:4f:c5:28:00:40:0c:d4:f8:68:
31:7c:9a:e6:d5:bf:ae:4b:71:92:7e:9b:5e:90:0c:90:22:24:
18:2c:14:be:33:b9:92:88:27:07:37:d9:d0:81:52:13:29:28:
7b:64:ee:af:e9:59:97:9b:93:e6:d6:0c:66:9b:ad:20:04:6d:
ed:28:98:0d:a7:c7:98:31:bc:72:e7:22:96:27:98:2e:bf:af:
67:e4:da:a0:bd:ad:de:09:f8:c5:c5:35:c8:8d:61:5b:ba:57:
e0:5e:4c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:43:52 2026 by rpki-client