Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
File: luqxm-wiLHBaHrA6gN80FTnZfxQ.mft (raw, json)
Hash identifier: MM6czhytLBxwQmz4M/y4TvGnd7VpSB/BazEqnwZ5xm0=
Subject key identifier: E8:7D:A6:D3:AA:E4:81:EE:0C:08:AA:3C:59:94:19:3D:AF:C7:7E:E5
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial: 019DA378E7C95E77EBD4552F6591BCF0EEAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
Manifest number: 185A
Signing time: Sun 19 Apr 2026 02:01:42 +0000
Manifest this update: Sun 19 Apr 2026 02:01:42 +0000
Manifest next update: Mon 20 Apr 2026 02:01:42 +0000
Files and hashes: 1: P1-lVsh39b68C2fcHVD1_sjkJwo.roa (hash: rA4I4sxzVTPzctitCPx83L6sgwq9KNqZHwSs09AGUyM=)
2: ZF23aY-CislUcGs4sF1_a5gGqFM.roa (hash: bNrA+qkyY4wPfBF4EpAtk3FnCkzC3b5zjZDfRB+i3ec=)
3: luqxm-wiLHBaHrA6gN80FTnZfxQ.crl (hash: 3fgjzYjjGuLnTSE9zAQIcW4LgW35C3zbKvepFPSHW7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:e7:c9:5e:77:eb:d4:55:2f:65:91:bc:f0:ee:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
Validity
Not Before: Apr 19 02:01:42 2026 GMT
Not After : Apr 20 02:01:42 2026 GMT
Subject: CN=e87da6d3aae481ee0c08aa3c5994193dafc77ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4d:67:4d:80:30:73:29:5e:58:3d:e7:54:2e:
dd:05:06:7c:d8:52:4c:b2:07:d7:a3:0e:e3:4e:ad:
c9:e4:35:b5:71:df:3c:b4:ee:3e:5a:59:25:a6:e5:
a0:da:34:57:d1:bf:20:cc:dd:35:77:83:72:4e:fa:
87:0c:9a:88:2d:88:09:57:77:37:1f:f4:8b:d0:f4:
17:64:8a:22:49:34:0c:d2:fa:78:5b:03:13:b9:ce:
53:45:64:87:00:27:66:05:a4:fd:c8:e0:7c:ea:d0:
5a:65:24:25:78:7b:27:82:42:00:7a:53:d4:4e:95:
f9:b6:a7:53:47:0e:d9:9d:b3:ef:fa:79:ac:d6:c1:
6e:0a:82:74:00:9b:02:8b:73:a4:4f:18:7e:4d:49:
e4:ab:15:6e:ad:e2:e1:43:32:48:1d:71:c5:d7:36:
2e:f3:8d:dd:ec:f3:c0:88:46:bb:7a:3c:59:16:47:
80:85:93:51:f9:6e:ed:38:dd:02:e7:60:5c:fb:12:
02:9a:87:e2:a0:de:3e:9c:6d:f0:aa:2d:47:d4:f6:
c7:aa:71:39:98:1e:e3:ce:af:f8:7d:91:2d:75:38:
89:07:51:f9:94:b5:37:8e:d0:2d:c8:e9:03:57:bd:
a2:24:8d:29:d1:2c:45:41:7a:95:0b:46:f5:b3:f5:
6b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7D:A6:D3:AA:E4:81:EE:0C:08:AA:3C:59:94:19:3D:AF:C7:7E:E5
X509v3 Authority Key Identifier:
keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2b:fc:e8:ea:dd:c5:4c:e3:79:ae:7a:1e:db:df:2f:bf:de:
5d:3b:f5:8b:c1:41:fe:45:f1:80:bc:eb:31:6a:08:de:7a:4f:
59:c5:d5:cd:1f:a4:03:35:a3:c0:f0:7a:33:92:a0:1e:b7:ab:
0c:a4:81:be:6c:cc:97:0e:14:50:0b:3e:b8:4f:db:8d:b6:5b:
07:ac:1f:ab:98:a7:c9:79:69:26:e9:34:99:21:6c:63:e0:58:
5f:91:06:36:69:ed:97:f2:0b:df:7c:54:78:a4:a0:7c:ab:e7:
8b:2f:61:42:c3:85:c8:bf:05:6e:2a:94:4e:ea:04:27:1f:9e:
34:4d:ba:fa:42:69:ad:3f:85:8e:86:69:d1:59:ad:a5:81:d7:
8b:d0:3b:99:ac:85:50:9f:40:84:01:c4:41:a1:dd:3f:7b:bb:
ba:c9:d6:2f:b7:83:98:24:82:ea:6a:86:ca:8b:d6:b0:e4:fa:
f1:da:8f:b8:32:7b:cf:b9:bc:f6:38:22:e8:b1:b7:57:62:26:
d6:04:d7:63:58:af:19:f0:1f:79:27:0d:12:45:28:06:6c:a8:
01:60:a4:61:96:7e:f5:ba:e6:60:fd:03:00:67:36:4c:64:59:
4c:bf:df:20:16:05:d8:16:de:1c:fe:bf:2a:05:b7:19:72:c4:
20:21:79:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:44 2026 by rpki-client