Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
File: luqxm-wiLHBaHrA6gN80FTnZfxQ.mft (raw, json)
Hash identifier: X7GOtVlzwOUs2C+n2hxXYNsgm6alPRPhdAF98bt6kU4=
Subject key identifier: FB:85:9C:A6:41:66:4D:C7:0B:BC:15:11:99:9B:45:FB:C1:F5:73:B7
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial: 01A0D07F681D465D16ECAE9ED07F619245E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
Manifest number: 19FF
Signing time: Wed 23 Sep 2026 23:00:05 +0000
Manifest this update: Wed 23 Sep 2026 23:00:05 +0000
Manifest next update: Thu 24 Sep 2026 23:00:05 +0000
Files and hashes: 1: P1-lVsh39b68C2fcHVD1_sjkJwo.roa (hash: rA4I4sxzVTPzctitCPx83L6sgwq9KNqZHwSs09AGUyM=)
2: ZF23aY-CislUcGs4sF1_a5gGqFM.roa (hash: bNrA+qkyY4wPfBF4EpAtk3FnCkzC3b5zjZDfRB+i3ec=)
3: luqxm-wiLHBaHrA6gN80FTnZfxQ.crl (hash: gWQgjtRRNH6q9WCJb/oWSp6BVwB/i0AyIZUxv9yLnr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:68:1d:46:5d:16:ec:ae:9e:d0:7f:61:92:45:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
Validity
Not Before: Sep 23 23:00:05 2026 GMT
Not After : Sep 24 23:00:05 2026 GMT
Subject: CN=fb859ca641664dc70bbc1511999b45fbc1f573b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:52:47:a1:3a:de:71:68:e1:35:95:08:04:d7:
90:74:32:f2:ee:a8:95:a9:c6:a4:7a:f2:f0:eb:2a:
f5:7e:81:ed:39:60:7c:bf:88:85:ae:87:28:80:33:
03:8b:de:79:82:35:09:31:ab:eb:e4:ac:f9:85:33:
80:2c:f8:98:b8:55:e6:2e:f3:1c:e8:d1:a2:3a:80:
7c:7d:5e:6a:8e:18:be:21:da:76:24:3e:eb:94:f6:
9f:8d:3e:73:2d:98:5c:37:18:c7:d9:6a:78:68:70:
9c:9b:bc:74:ec:8c:23:97:32:54:d7:5a:69:06:e1:
75:31:5b:1a:c3:43:62:b6:16:a3:ab:a6:5f:7a:c3:
21:0f:de:c3:64:03:44:f5:d0:ec:64:43:ba:4d:30:
4b:3c:c6:f6:a3:47:03:b3:f8:23:b9:06:de:5d:62:
ce:d9:dc:61:d4:77:c1:ea:04:d7:a2:37:88:ef:41:
4a:26:d2:e2:a4:e9:22:67:17:f9:39:71:f0:63:f8:
94:90:e7:61:0d:d2:64:45:9b:7f:33:a7:bd:3e:77:
e6:de:72:48:2c:4f:fd:d6:8d:09:3e:a8:41:38:cb:
20:ef:f0:e9:55:47:fc:57:e5:b9:70:1e:58:e3:a7:
85:a1:3c:6a:0f:6e:e4:2d:a6:ca:56:4c:34:d1:e6:
25:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:85:9C:A6:41:66:4D:C7:0B:BC:15:11:99:9B:45:FB:C1:F5:73:B7
X509v3 Authority Key Identifier:
keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:da:03:97:32:65:ff:04:5d:55:b7:22:c7:6c:92:1a:0f:3e:
52:29:23:45:45:e1:95:b8:ec:e0:b9:87:5d:67:cf:31:5b:97:
bd:9f:19:2e:f0:cc:64:e2:9f:3f:7d:04:24:d3:45:d6:7c:8d:
2a:a1:c4:eb:4a:c3:6b:c5:ea:b6:d0:c8:04:5c:32:d7:68:83:
ca:a3:4b:55:11:7b:5a:69:f9:a6:5a:80:b9:76:f2:cd:34:42:
9c:2a:ca:1d:c1:b7:89:bf:97:14:57:89:5a:12:b6:af:7f:7b:
9b:82:2e:e9:7b:bb:a9:7c:87:a7:6b:40:2d:20:45:7d:fa:1a:
cc:8e:ba:73:4e:0e:1f:6a:ea:be:65:ea:6f:ad:d0:f3:b5:01:
a5:2f:04:2e:f2:1e:d1:af:02:de:b5:b2:28:a9:ea:74:61:92:
94:90:cb:39:cd:15:90:1f:8a:33:f0:16:72:13:f1:39:ae:06:
bc:c2:94:88:54:ac:e9:ad:72:68:b0:6b:fd:77:60:2f:4a:68:
fe:c7:24:8a:76:10:81:49:03:c9:7d:4b:4e:bf:72:3d:3b:93:
3d:aa:b9:4a:f4:38:9a:a4:80:fb:f1:7e:4f:a0:34:ed:56:85:
53:21:1e:a6:07:cd:18:f8:47:97:98:cb:34:88:43:1a:0c:88:
d7:dc:01:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:06:21 2026 by rpki-client