Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
File: LuKffz-qSKlAq42iErSxEWiD8nM.mft (raw, json)
Hash identifier: uvvhF9gCxt9SHMtNIc+CrO+O6wOWoL/xZiggxN0vVD8=
Subject key identifier: 40:F2:45:A9:AD:35:2F:F9:DB:85:D2:65:17:07:72:9B:91:AD:DB:ED
Authority key identifier: 2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
Certificate issuer: /CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Certificate serial: 019D9B8779D32371BB7F2AAECF72C65EBDA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 13:00:40 +0000
Manifest this update: Fri 17 Apr 2026 13:00:40 +0000
Manifest next update: Sat 18 Apr 2026 13:00:40 +0000
Files and hashes: 1: LuKffz-qSKlAq42iErSxEWiD8nM.crl (hash: tktpGgUN2XjxZWVguVtTOEgn2uZ3g063gGJ4qmEbbok=)
2: _v7GfhVuqUV1D7sW2SlcrySGsrA.roa (hash: KzmQ49grnGxQlCZ2CCyjpnejNzdZeWdhTo34zMYUN0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:79:d3:23:71:bb:7f:2a:ae:cf:72:c6:5e:bd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Validity
Not Before: Apr 17 13:00:40 2026 GMT
Not After : Apr 18 13:00:40 2026 GMT
Subject: CN=40f245a9ad352ff9db85d2651707729b91addbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7e:91:50:ef:26:7a:86:75:b5:6d:1c:d8:f2:
6e:b4:a0:4e:c5:fb:a6:4d:39:67:b1:24:cd:f0:8d:
94:72:83:7e:a9:dd:b9:18:15:17:3d:df:30:81:56:
1b:d7:26:4c:b8:2e:e9:fe:50:d2:3b:be:b4:ae:82:
a2:ef:3d:1e:fe:85:b5:48:21:16:02:0e:0b:55:16:
ef:a4:7f:fa:a0:0b:a9:d4:ba:2c:d4:42:92:0f:3f:
a2:f2:32:80:f9:ae:0a:60:15:6e:ed:42:63:66:e7:
09:6c:db:03:bb:cb:9e:c0:85:ab:a7:e2:34:d5:4c:
44:ec:ed:3e:03:69:66:a5:a2:a9:bf:2b:1e:4e:b5:
2e:8a:32:66:07:b6:17:15:fd:7a:03:a2:af:be:d8:
85:fe:4e:16:04:0d:ae:d3:d7:7a:8d:9b:a4:30:22:
ea:fa:a4:9e:54:cd:1b:5c:14:61:37:ce:3d:de:db:
66:e9:3e:fd:f9:19:63:21:47:20:ed:6a:2a:07:27:
b7:97:81:f7:25:d0:df:2f:8d:dd:59:f4:0c:a4:e4:
46:e5:da:37:f0:3e:d4:2f:1e:2b:ed:46:9e:bb:99:
ad:63:57:6a:a6:9c:48:cd:0b:2f:61:ac:b8:6e:c9:
90:fe:39:88:67:bf:3d:04:23:d9:f2:c9:25:95:ab:
7f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F2:45:A9:AD:35:2F:F9:DB:85:D2:65:17:07:72:9B:91:AD:DB:ED
X509v3 Authority Key Identifier:
keyid:2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8c:20:b0:2b:d5:5f:25:7c:b4:23:1b:cd:8a:a1:3f:b7:8a:
a4:9a:75:48:28:87:9b:ee:28:1a:ed:e8:4e:34:d3:c7:02:53:
2d:b0:49:76:84:61:a3:64:0d:8f:b5:4f:fc:a4:39:12:2c:34:
19:20:f3:03:fc:b0:f6:a8:03:5e:f8:33:65:cd:a2:ea:74:8a:
a3:61:5f:3c:63:0a:a8:1c:30:34:2b:5f:ee:84:b9:49:71:56:
b4:4d:7f:d0:85:7a:be:a4:80:0b:39:37:2c:6a:5d:70:b3:89:
e1:6e:f1:f6:63:06:80:1c:81:af:4b:da:2b:5c:16:f2:f5:6a:
05:85:e7:11:5e:56:8e:54:c4:e1:e7:9a:f1:76:6f:9c:06:84:
a9:3a:14:42:4e:4b:3a:d8:54:ae:41:f5:e9:f2:c9:0a:96:0d:
40:f4:41:04:f1:1d:44:6f:59:5b:a6:5e:3c:69:b9:72:d7:78:
70:ec:ce:ae:3f:17:d9:d0:05:1d:00:fe:2d:85:d3:ba:1e:3b:
fe:41:9b:da:57:dc:0a:22:f4:81:12:a8:66:f0:91:be:88:bb:
85:ed:9b:2c:0a:d4:78:38:db:dd:f3:24:34:69:fa:ec:26:d7:
ef:6a:8f:f0:6b:7e:89:03:fe:ee:25:02:f2:ff:b1:a6:5b:51:
49:6a:68:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:28:02 2026 by rpki-client