Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
File: LuVtTXsdGgbOifdG95tlbHNIxSU.mft (raw, json)
Hash identifier: ClrmNk3aVQqbN3tRlEW2A32e6uanZ7WJr65mMRCmy8o=
Subject key identifier: C5:22:98:24:5F:40:6C:4D:66:51:92:AB:08:5E:D4:79:A0:CB:39:D8
Authority key identifier: 2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
Certificate issuer: /CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Certificate serial: 019CACEBF7AEEC4D99D35AF0100DCDC6A3D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 05:01:11 +0000
Manifest this update: Mon 02 Mar 2026 05:01:11 +0000
Manifest next update: Tue 03 Mar 2026 05:01:11 +0000
Files and hashes: 1: 8XJI8Ab5Kn4iGwXJ6PSkR-OvFH4.roa (hash: SgXQOVpKdakFip4Eu8vjLUkRXfKk3oyvAOpf3ZBZws8=)
2: LuVtTXsdGgbOifdG95tlbHNIxSU.crl (hash: PxIVbm4NivM+fE9qLMPda6ZiDy6/cfTnecGLNh0jXH0=)
3: zeRg5rwyVQrQCVsUlLyRvPr9TxI.roa (hash: T17rFq6E9471MLMBhrGLFdRcWoO+rQ0ILITYoqDpgKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:f7:ae:ec:4d:99:d3:5a:f0:10:0d:cd:c6:a3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Validity
Not Before: Mar 2 05:01:11 2026 GMT
Not After : Mar 3 05:01:11 2026 GMT
Subject: CN=c52298245f406c4d665192ab085ed479a0cb39d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8d:5b:21:27:72:3f:f3:3f:74:07:a1:96:85:
73:bb:bb:39:09:8c:bd:d0:76:05:06:4c:85:96:4c:
44:a5:aa:45:2d:9d:47:e4:2e:86:d4:16:fb:8c:6b:
ac:8b:c5:ff:5a:cf:bb:52:43:20:1a:a3:6e:d9:e1:
ef:c1:ba:cd:46:93:b7:27:56:ae:29:14:a8:48:db:
4a:27:a2:15:62:68:5d:81:cd:0d:77:1f:a0:9e:69:
81:6c:36:73:b3:ef:bd:1e:4d:3f:7c:06:64:a4:25:
7b:16:5b:dc:02:f4:03:12:d7:61:49:6c:a5:ee:ea:
b6:48:24:45:75:39:84:2d:6b:1c:54:09:f3:26:40:
ec:5b:55:7b:5c:c5:23:74:cc:0b:96:10:29:47:8a:
a2:ba:5f:c0:53:2e:88:b5:32:5a:7d:e6:ff:5c:df:
3b:fe:86:27:16:50:33:fc:76:67:ad:de:23:3f:d7:
34:fc:2c:32:9e:ec:eb:8a:86:55:1b:70:91:02:f5:
e0:68:9f:36:9e:b4:fa:d1:b7:74:ee:54:a4:9e:aa:
94:ea:01:ad:e3:fb:bf:bf:71:bb:92:2e:99:47:3f:
5c:fe:71:a4:01:7c:e9:e3:0b:06:88:39:5a:9f:e3:
c4:64:a1:a0:e5:f3:dd:b6:36:9a:19:cc:c0:84:92:
3b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:22:98:24:5F:40:6C:4D:66:51:92:AB:08:5E:D4:79:A0:CB:39:D8
X509v3 Authority Key Identifier:
keyid:2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b6:35:e4:f0:0d:c2:30:eb:b8:59:c7:84:36:8c:14:e9:1c:
01:52:23:8b:0f:db:d3:d8:bf:3b:b5:c1:5c:e2:78:02:b3:7d:
48:11:7c:be:10:4b:91:9c:40:0b:42:54:88:c7:ce:cc:37:81:
25:60:d2:4f:95:f9:5b:a2:66:e2:c3:58:0a:b3:88:3b:4a:f0:
00:04:ec:9f:7a:c2:15:c2:3b:72:81:fc:b8:ff:f8:df:3f:08:
f8:b7:97:ac:9c:92:6f:7b:b6:1e:a8:36:39:c5:dc:2e:8e:00:
dc:3e:39:f1:fe:ef:f5:3d:76:2c:de:c3:c7:f2:15:67:d3:e0:
74:3a:ff:10:a5:65:bb:3f:b5:6f:b8:52:3f:55:7c:9f:2e:97:
9a:2e:d2:c0:f9:e3:ee:cf:76:58:b8:d0:4f:23:78:c4:7c:b4:
14:ea:c2:3f:fc:a6:8e:6f:29:91:0c:92:af:88:9c:e1:89:a0:
fb:a1:5c:f7:5c:d3:c0:b7:f2:57:6e:ff:51:ca:2d:30:f7:3b:
96:d9:f9:9d:6f:e6:83:96:f7:8e:7c:92:93:ec:c6:bc:21:93:
9e:00:7b:23:2f:bb:43:b4:73:2d:ed:b4:a5:08:0d:1c:5a:cc:
85:8b:b6:25:d8:5a:97:3f:ab:16:83:de:d8:15:45:f0:a7:61:
42:ca:91:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:26:18 2026 by rpki-client