Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
File: luqxm-wiLHBaHrA6gN80FTnZfxQ.mft (raw, json)
Hash identifier: vswPpjhiLl0lWSZxOAGOu7gr78No/Zc7op/7anSfUfg=
Subject key identifier: DE:5A:86:0C:E9:70:89:D8:19:15:10:0C:78:CD:3A:47:B5:94:3D:E8
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial: 019CAA590CE6FD74A47870E3E344F4D11D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
Manifest number: 17D9
Signing time: Sun 01 Mar 2026 17:01:28 +0000
Manifest this update: Sun 01 Mar 2026 17:01:28 +0000
Manifest next update: Mon 02 Mar 2026 17:01:28 +0000
Files and hashes: 1: P1-lVsh39b68C2fcHVD1_sjkJwo.roa (hash: rA4I4sxzVTPzctitCPx83L6sgwq9KNqZHwSs09AGUyM=)
2: ZF23aY-CislUcGs4sF1_a5gGqFM.roa (hash: bNrA+qkyY4wPfBF4EpAtk3FnCkzC3b5zjZDfRB+i3ec=)
3: luqxm-wiLHBaHrA6gN80FTnZfxQ.crl (hash: EXOJcLwrpZN0kkoWhgXmqfWYl9mMFvY8KXjmO/90UMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:0c:e6:fd:74:a4:78:70:e3:e3:44:f4:d1:1d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
Validity
Not Before: Mar 1 17:01:28 2026 GMT
Not After : Mar 2 17:01:28 2026 GMT
Subject: CN=de5a860ce97089d81915100c78cd3a47b5943de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2b:e5:4f:f3:9c:c6:16:a5:e0:38:b1:36:8c:
dc:14:cd:30:55:cc:fb:bd:02:fa:32:43:28:7d:c3:
09:da:b4:5c:61:14:81:a2:96:c1:63:3a:6e:d9:c9:
8e:8a:0e:85:56:a8:43:5e:e4:b4:78:44:a9:06:3a:
15:3b:58:40:70:ce:53:cd:16:f5:be:f1:47:97:ac:
30:03:0a:8f:67:2c:4d:e2:35:49:dd:ae:82:79:06:
47:f7:76:cb:54:84:22:94:0b:df:77:89:ff:89:f1:
6d:1e:58:d2:a7:56:dd:9d:48:33:0a:57:3c:e9:77:
c4:bb:09:88:68:f8:41:42:42:12:12:89:0d:08:68:
33:6a:a5:e4:21:58:b9:e8:ef:b4:8f:71:81:52:03:
56:59:a6:55:fc:0c:9f:91:d7:db:cf:ff:af:c1:e3:
12:25:c8:d1:fb:43:8a:3b:4f:ca:e3:16:96:71:82:
32:87:d2:62:90:06:57:1b:83:56:bc:64:8b:81:04:
ce:f5:00:9d:30:d2:7b:92:2d:a0:e5:77:e6:e7:93:
9d:8f:aa:36:32:5f:3a:b5:e9:a2:25:8d:81:cf:72:
24:8e:29:1b:59:ba:86:96:a0:a7:42:b0:53:56:b2:
89:c9:b2:90:d3:d9:18:39:a9:85:6d:07:18:44:e6:
c6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5A:86:0C:E9:70:89:D8:19:15:10:0C:78:CD:3A:47:B5:94:3D:E8
X509v3 Authority Key Identifier:
keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:fc:68:12:6a:3a:07:70:4f:4f:fa:fe:89:f9:51:c3:73:21:
89:a4:99:f0:15:9b:28:61:05:34:62:04:15:02:d2:c5:53:a1:
00:85:26:4a:56:4c:5b:8a:7f:f2:ee:5a:85:15:19:4c:15:83:
fb:e0:89:89:fb:38:9c:54:c7:2c:df:eb:76:b8:e8:64:8e:94:
ad:92:bb:fb:19:76:74:6a:79:b4:67:61:cf:a2:7d:5e:be:d8:
58:22:52:bd:be:cc:0f:8c:4f:46:9e:3e:34:bb:b3:45:e0:fa:
2f:62:e4:2a:1c:04:26:6c:45:89:36:be:a1:1f:df:e4:d8:47:
42:a5:2d:36:a8:23:4f:27:fb:5f:84:fc:04:b5:fc:54:22:55:
2c:0c:c9:8b:35:46:41:30:81:c7:14:59:b0:ba:1e:97:2f:fb:
2a:7c:49:67:cb:61:f8:b7:08:44:2f:07:34:e2:b7:09:c6:d2:
4f:02:33:a7:33:4a:8b:05:54:87:3c:b1:7f:86:f7:61:5c:8f:
22:78:8f:07:46:52:fe:71:61:a1:34:3c:fb:93:56:21:d5:b1:
0c:55:be:04:72:52:64:83:46:eb:12:ea:2c:8d:08:7b:57:9e:
62:e6:61:01:f7:50:57:12:d5:fe:8b:5f:2d:e9:9b:e9:1e:02:
99:89:37:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:33 2026 by rpki-client