Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
File: luqxm-wiLHBaHrA6gN80FTnZfxQ.mft (raw, json)
Hash identifier: e7IkWEbxEOF/VHAtxSTshyZpJP039jDwX/LOS3LF5GQ=
Subject key identifier: AA:AC:2D:E4:E6:FC:90:2E:09:C2:86:B6:FC:D1:E8:C4:6C:E5:C0:FC
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial: 019FAAF5DCFA8C37AC75A9667B3CA3895053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
Manifest number: 1967
Signing time: Tue 28 Jul 2026 23:01:07 +0000
Manifest this update: Tue 28 Jul 2026 23:01:07 +0000
Manifest next update: Wed 29 Jul 2026 23:01:07 +0000
Files and hashes: 1: P1-lVsh39b68C2fcHVD1_sjkJwo.roa (hash: rA4I4sxzVTPzctitCPx83L6sgwq9KNqZHwSs09AGUyM=)
2: ZF23aY-CislUcGs4sF1_a5gGqFM.roa (hash: bNrA+qkyY4wPfBF4EpAtk3FnCkzC3b5zjZDfRB+i3ec=)
3: luqxm-wiLHBaHrA6gN80FTnZfxQ.crl (hash: 5lA2AYdvb/AcZPVxIOOP+CODPCIhU2hBnInOGaHQX34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:dc:fa:8c:37:ac:75:a9:66:7b:3c:a3:89:50:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
Validity
Not Before: Jul 28 23:01:07 2026 GMT
Not After : Jul 29 23:01:07 2026 GMT
Subject: CN=aaac2de4e6fc902e09c286b6fcd1e8c46ce5c0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c8:fe:90:e8:39:fc:b1:7b:08:c7:32:dd:4a:
c1:11:43:bc:00:10:62:4f:2e:00:3a:78:6a:22:d7:
fb:b3:a4:9e:8e:4f:1a:1f:cc:72:db:9b:ac:88:8c:
36:c1:fe:2b:10:3d:48:00:5e:89:b9:aa:ca:72:96:
da:38:1e:3d:08:53:1b:a1:b8:2d:27:32:2c:89:a2:
ed:e1:7e:85:80:6d:0e:11:65:29:7b:82:7a:56:8c:
d7:be:90:35:29:de:74:b6:1a:18:4e:91:7c:16:76:
f0:25:a0:ac:ad:bd:bb:68:16:c2:68:55:94:5a:14:
9f:b7:ac:d0:cc:79:0a:82:a5:77:0c:15:ec:73:3e:
30:68:b5:5c:95:3e:bf:49:26:ea:49:d5:38:c8:89:
d1:72:d0:87:10:80:19:0e:d0:59:71:46:e3:5f:5e:
45:85:26:fd:35:68:04:be:69:84:dd:8e:ce:bf:4b:
42:2e:93:26:ef:ac:00:9b:31:d5:cd:ee:d3:04:f1:
dc:b3:0f:2f:7b:bf:27:71:af:b7:d5:d0:29:c3:65:
fe:c8:06:be:e0:b8:94:64:4c:50:6e:eb:fc:bc:a5:
24:f2:62:74:10:17:ae:fd:35:7a:19:d8:d5:e2:66:
b5:1d:07:90:33:92:e0:39:6f:92:cf:79:0f:d0:54:
a5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AC:2D:E4:E6:FC:90:2E:09:C2:86:B6:FC:D1:E8:C4:6C:E5:C0:FC
X509v3 Authority Key Identifier:
keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:28:65:bc:c8:55:99:d8:48:f3:52:96:55:cc:91:2c:73:1c:
0c:d8:ff:50:58:8d:b9:f1:15:33:c0:4d:51:19:90:d2:f9:91:
ee:9c:8c:52:2d:c6:4f:af:11:bb:51:f4:77:24:cf:57:2d:ae:
2e:30:05:7a:42:12:36:7e:99:19:9f:e7:e6:95:2b:00:99:b7:
3a:9e:09:60:b3:ef:71:67:26:44:1c:92:3c:08:1a:90:c5:c7:
5d:26:e5:5e:51:b8:87:03:bb:ae:c9:d4:9a:2d:aa:f1:ba:dc:
f4:ff:83:43:f5:4d:67:68:8f:28:f9:3f:84:91:38:ff:45:e4:
06:2f:ec:47:af:c6:fa:37:b8:13:66:90:58:ad:b5:b8:b9:09:
f2:e6:cf:d7:24:4b:15:27:8c:67:fb:21:5f:3c:fa:55:2e:97:
3d:7c:09:08:af:8d:72:d5:6f:86:8d:53:12:c3:d5:f9:f5:04:
88:cf:37:07:96:1d:2a:4e:07:31:4a:ab:9e:61:39:80:0a:e8:
2e:06:91:10:dd:0e:5e:19:5a:a7:31:a2:fc:74:53:cc:85:8f:
97:fb:7f:eb:18:28:0a:77:b8:fa:14:26:eb:de:cf:af:77:25:
3e:34:1a:67:fd:da:f4:6f:f3:d4:81:b1:c6:08:27:46:d7:33:
ee:db:e6:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9dz6jDesdalmezyjiVBTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZWFiMTliZWMyMjJjNzA1YTFlYjAzYTgwZGYzNDE1Mzlk
OTdmMTQwHhcNMjYwNzI4MjMwMTA3WhcNMjYwNzI5MjMwMTA3WjAzMTEwLwYDVQQD
EyhhYWFjMmRlNGU2ZmM5MDJlMDljMjg2YjZmY2QxZThjNDZjZTVjMGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Mj+kOg5/LF7CMcy3UrBEUO8ABBi
Ty4AOnhqItf7s6Sejk8aH8xy25usiIw2wf4rED1IAF6JuarKcpbaOB49CFMbobgt
JzIsiaLt4X6FgG0OEWUpe4J6VozXvpA1Kd50thoYTpF8FnbwJaCsrb27aBbCaFWU
WhSft6zQzHkKgqV3DBXscz4waLVclT6/SSbqSdU4yInRctCHEIAZDtBZcUbjX15F
hSb9NWgEvmmE3Y7Ov0tCLpMm76wAmzHVze7TBPHcsw8ve78nca+31dApw2X+yAa+
4LiUZExQbuv8vKUk8mJ0EBeu/TV6GdjV4ma1HQeQM5LgOW+Sz3kP0FSlbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqsLeTm/JAuCcKGtvzR6MRs5cD8MB8GA1UdIwQY
MBaAFJbqsZvsIixwWh6wOoDfNBU52X8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kNzdhNjAtMTIyNy00ZGU3LTk3YmIt
NDEwMDYxZTM1NzZhLzEvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9kNzdhNjAtMTIyNy00ZGU3LTk3YmItNDEwMDYxZTM1NzZh
LzEvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPShlvMhV
mdhI81KWVcyRLHMcDNj/UFiNufEVM8BNURmQ0vmR7pyMUi3GT68Ru1H0dyTPVy2u
LjAFekISNn6ZGZ/n5pUrAJm3Op4JYLPvcWcmRBySPAgakMXHXSblXlG4hwO7rsnU
mi2q8brc9P+DQ/VNZ2iPKPk/hJE4/0XkBi/sR6/G+je4E2aQWK21uLkJ8ubP1yRL
FSeMZ/shXzz6VS6XPXwJCK+NctVvho1TEsPV+fUEiM83B5YdKk4HMUqrnmE5gAro
LgaREN0OXhlapzGi/HRTzIWPl/t/6xgoCne4+hQm697Pr3clPjQaZ/3a9G/z1IGx
xggnRtcz7tvmng==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:28:57 2026 by rpki-client