Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
File: luWtU7_HOEDEJXEcAQRTVxBX3CM.mft (raw, json)
Hash identifier: tEqwE/0qtsfMLYVNWIB24iW2XiFsB8DUW6tyQmXpZNE=
Subject key identifier: 98:F7:BF:80:4D:2B:64:94:A3:D3:E0:17:D4:A0:FB:10:33:F3:C4:51
Authority key identifier: 96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23
Certificate issuer: /CN=96e5ad53bfc73840c425711c010453571057dc23
Certificate serial: 019D981899D215E080192697D6CFF4E2E057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
Manifest number: 07AA
Signing time: Thu 16 Apr 2026 21:00:41 +0000
Manifest this update: Thu 16 Apr 2026 21:00:41 +0000
Manifest next update: Fri 17 Apr 2026 21:00:41 +0000
Files and hashes: 1: Y8PMGb7a4QUK3mSZ5k3bsYLTUzk.roa (hash: lJBNAotuivDf99O5O2/2MLFjTpeWzRblk6WWXgUzJz4=)
2: luWtU7_HOEDEJXEcAQRTVxBX3CM.crl (hash: RJVJoRTgoERPWELyQAYU5wrP8fxqIC7z0wyJBNxXlLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:99:d2:15:e0:80:19:26:97:d6:cf:f4:e2:e0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e5ad53bfc73840c425711c010453571057dc23
Validity
Not Before: Apr 16 21:00:41 2026 GMT
Not After : Apr 17 21:00:41 2026 GMT
Subject: CN=98f7bf804d2b6494a3d3e017d4a0fb1033f3c451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:0b:ab:de:66:a4:59:ee:a0:81:f1:9c:da:
a0:7a:dd:07:ad:16:9a:91:db:42:ae:d7:e0:a7:ad:
f1:d6:11:09:71:cf:fe:bb:5e:95:79:d1:06:7d:7a:
4f:81:4f:a3:b8:21:d7:28:fd:49:31:e6:7d:f2:36:
e9:da:53:7d:62:a7:ab:69:df:7b:1c:d4:9c:a9:de:
05:e9:9b:b4:e5:6c:53:ea:cd:fb:d3:07:74:ed:ab:
cb:3a:1f:10:4a:19:31:48:af:25:76:7f:dc:37:d5:
f7:0e:0a:a0:59:01:5d:ff:31:60:59:e8:dc:96:df:
e0:30:f5:c9:db:1c:6a:3e:ab:16:4e:d9:6b:71:70:
40:8a:3a:1a:c5:36:a7:85:f6:cf:f7:ad:31:2f:77:
15:5e:47:96:e5:d1:33:8c:d2:0d:58:8e:34:94:da:
68:65:e1:b5:55:fc:a8:cd:43:ff:37:82:f1:26:00:
ee:0c:51:3d:c1:9e:21:9a:0c:07:ab:42:ea:a8:a9:
af:db:d2:3e:03:d1:e8:fa:cc:2b:8d:8c:f2:3c:f8:
06:83:a3:eb:bb:57:02:b4:fc:75:af:ca:22:07:90:
a7:f2:13:1f:44:7e:ce:9a:67:82:57:b3:7d:74:1c:
5c:42:a4:53:7d:64:39:0a:d3:cd:68:33:66:1b:75:
22:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F7:BF:80:4D:2B:64:94:A3:D3:E0:17:D4:A0:FB:10:33:F3:C4:51
X509v3 Authority Key Identifier:
keyid:96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:89:f4:dc:ae:ca:50:07:c4:33:be:9c:77:0f:ee:2a:08:60:
33:dc:4d:0e:b7:f6:e0:69:45:a7:1b:09:29:d0:d5:95:ff:12:
f0:09:8b:e3:a2:39:71:fc:af:3b:78:03:c7:5f:39:75:28:cb:
34:9a:a5:cc:49:0d:95:3e:b8:2f:cb:8f:51:7b:9c:cd:43:47:
2f:cb:1e:6b:1f:f7:2f:33:90:4d:9e:1b:83:00:2d:44:82:f4:
cd:28:ae:2f:56:ee:5b:e4:70:a7:26:0e:e8:45:39:45:dd:78:
bc:43:81:fe:f2:24:d5:54:4d:66:42:22:4f:2e:a3:19:79:48:
8b:91:3d:f2:40:42:67:55:1a:d7:ec:da:b9:cd:94:75:1a:64:
38:bd:3d:31:4f:3d:88:02:87:2b:31:c4:76:c8:16:9c:ce:c0:
a5:fa:47:3c:f1:ec:36:f4:2e:99:a0:c9:27:c5:04:ee:95:1a:
b8:10:cd:63:66:e3:9c:6f:ff:29:3b:2d:e7:ae:c4:cc:63:32:
22:63:90:b7:a7:ae:d6:9d:8d:9d:85:d2:b3:ba:be:ef:a0:c2:
61:17:60:93:ea:cc:54:53:4d:53:2d:42:82:b2:94:89:75:f0:
c2:68:84:f8:0a:72:57:43:6e:35:17:c2:72:ec:10:b3:26:d3:
13:9b:46:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:23 2026 by rpki-client