Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
File: lugqtki4s_iFdWnDmvlUSt_BfAE.mft (raw, json)
Hash identifier: SeukdJ27iQ+LLW30PaKFC6xavzUfIGNqAmAhPWVMHlA=
Subject key identifier: 02:BF:97:D9:1C:EF:47:21:BF:20:F6:32:64:0B:85:5A:A5:19:B2:ED
Authority key identifier: 96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
Certificate issuer: /CN=96e82ab648b8b3f8857569c39af9544adfc17c01
Certificate serial: 019D9A3E8F00DF2BF3474DB4FA7A34292771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
Manifest number: 0F7E
Signing time: Fri 17 Apr 2026 07:01:24 +0000
Manifest this update: Fri 17 Apr 2026 07:01:24 +0000
Manifest next update: Sat 18 Apr 2026 07:01:24 +0000
Files and hashes: 1: W2ifOrhN8XKMgVXk_yqwQmU4tZA.roa (hash: RoZTZalHouz/5mT7p1eNKVRbeaGCPt3XY2qpyiJFuNE=)
2: lI4f8rZF79xIoZ-qqIUt5k5Mwhs.roa (hash: 2bfMHhj3u9ZNahoNS0bMF6oNHC5FK6pJFUzUS206Uk0=)
3: lugqtki4s_iFdWnDmvlUSt_BfAE.crl (hash: KiZTZXkpHAioeYcIobU9VeMF2mmxz/3zMpj8B6HJ/u8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:8f:00:df:2b:f3:47:4d:b4:fa:7a:34:29:27:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e82ab648b8b3f8857569c39af9544adfc17c01
Validity
Not Before: Apr 17 07:01:24 2026 GMT
Not After : Apr 18 07:01:24 2026 GMT
Subject: CN=02bf97d91cef4721bf20f632640b855aa519b2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:09:67:fe:3d:69:c5:bc:74:bb:f0:18:ab:5d:
81:a5:e1:2b:85:57:b8:04:78:be:4a:92:81:65:c8:
be:bd:44:a6:80:0b:5a:4f:24:0b:e9:8c:88:9e:1c:
a6:3d:c5:7d:26:82:60:67:a9:15:1a:4f:d2:68:ce:
d3:cb:66:ec:3f:09:7f:c3:6f:7e:f7:fa:d0:61:b5:
d7:70:81:d8:e6:c0:1d:e6:81:66:d4:37:ca:ee:c0:
a3:70:85:f9:23:28:7c:fb:ea:7f:ec:d5:24:24:c2:
25:f8:1c:d6:9d:bd:f5:fa:7c:60:6f:24:9a:65:7e:
12:3e:5e:63:bf:0f:0f:f4:18:8b:e6:b6:f2:ac:a1:
fc:41:b9:06:0a:57:cb:79:c0:77:6a:f0:2a:75:e1:
2c:0d:30:93:2e:73:15:f2:b3:c8:49:58:0a:f5:fd:
fd:77:b7:72:07:76:ae:d7:00:65:e5:7b:b0:75:ff:
2d:96:5d:ce:d8:d3:bb:3a:be:fb:df:ef:90:66:b5:
be:a3:ce:1b:79:c8:18:bc:ec:ee:05:05:1e:3a:81:
13:4e:7a:7e:9a:86:28:ff:eb:16:59:70:8d:32:b7:
da:16:47:f8:58:46:99:16:b4:26:50:62:83:e0:06:
d1:4e:78:5b:3b:a2:2d:73:88:e0:cb:c1:3c:3b:03:
ce:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BF:97:D9:1C:EF:47:21:BF:20:F6:32:64:0B:85:5A:A5:19:B2:ED
X509v3 Authority Key Identifier:
keyid:96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:15:48:5d:d0:af:e8:48:99:47:37:7e:f7:76:5e:a4:28:6f:
af:8e:0a:d8:47:31:29:0e:17:c2:26:0a:cf:a1:ba:13:44:68:
0e:64:6d:31:d2:89:25:9a:82:99:fe:f6:18:56:fe:a4:df:79:
d8:77:ec:1e:7e:cb:f2:c4:87:35:1a:4c:0f:8e:54:c3:34:c8:
a6:b9:7c:40:8e:7a:7e:8a:0f:02:9a:80:08:c4:a2:e7:1b:d1:
2b:b9:0c:0c:78:20:76:c0:72:34:6a:22:c8:44:cc:90:49:3e:
f1:78:92:87:62:39:c9:5f:34:35:0e:35:c8:8d:b7:3c:41:98:
2d:29:a2:44:b9:f6:4f:0b:fb:c9:c1:70:2e:ef:6c:95:c0:08:
4a:02:16:41:cb:d1:74:fe:e6:27:b9:65:04:45:95:b5:de:eb:
c2:93:af:78:7e:71:60:43:77:11:e5:6e:92:e9:46:5a:e8:e5:
3d:2c:5e:78:08:c9:a9:c5:6f:f7:50:c3:75:ba:34:a6:92:d6:
97:0f:e6:8a:fc:a3:17:5b:54:e4:90:cc:8e:09:5e:99:78:28:
48:a8:41:98:5d:07:96:80:21:b7:80:ac:b2:a2:03:ee:95:3a:
ff:16:c4:e4:0b:d4:92:60:9b:a7:75:cd:13:0e:4e:20:04:67:
5c:39:b2:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPo8A3yvzR020+no0KSdxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZTgyYWI2NDhiOGIzZjg4NTc1NjljMzlhZjk1NDRhZGZj
MTdjMDEwHhcNMjYwNDE3MDcwMTI0WhcNMjYwNDE4MDcwMTI0WjAzMTEwLwYDVQQD
EygwMmJmOTdkOTFjZWY0NzIxYmYyMGY2MzI2NDBiODU1YWE1MTliMmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwln/j1pxbx0u/AYq12BpeErhVe4
BHi+SpKBZci+vUSmgAtaTyQL6YyInhymPcV9JoJgZ6kVGk/SaM7Ty2bsPwl/w29+
9/rQYbXXcIHY5sAd5oFm1DfK7sCjcIX5Iyh8++p/7NUkJMIl+BzWnb31+nxgbySa
ZX4SPl5jvw8P9BiL5rbyrKH8QbkGClfLecB3avAqdeEsDTCTLnMV8rPISVgK9f39
d7dyB3au1wBl5Xuwdf8tll3O2NO7Or773++QZrW+o84becgYvOzuBQUeOoETTnp+
moYo/+sWWXCNMrfaFkf4WEaZFrQmUGKD4AbRTnhbO6Itc4jgy8E8OwPObwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAK/l9kc70chvyD2MmQLhVqlGbLtMB8GA1UdIwQY
MBaAFJboKrZIuLP4hXVpw5r5VErfwXwBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHVncXRraTRzX2lGZFduRG12bFVTdF9CZkFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yNDI2ZjEtOGYyYS00OWZmLTg2NDMt
MTkzYWQ1Yzc5YjgzLzEvbHVncXRraTRzX2lGZFduRG12bFVTdF9CZkFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8yNDI2ZjEtOGYyYS00OWZmLTg2NDMtMTkzYWQ1Yzc5Yjgz
LzEvbHVncXRraTRzX2lGZFduRG12bFVTdF9CZkFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhVIXdCv
6EiZRzd+93ZepChvr44K2EcxKQ4XwiYKz6G6E0RoDmRtMdKJJZqCmf72GFb+pN95
2HfsHn7L8sSHNRpMD45UwzTIprl8QI56fooPApqACMSi5xvRK7kMDHggdsByNGoi
yETMkEk+8XiSh2I5yV80NQ41yI23PEGYLSmiRLn2Twv7ycFwLu9slcAISgIWQcvR
dP7mJ7llBEWVtd7rwpOveH5xYEN3EeVukulGWujlPSxeeAjJqcVv91DDdbo0ppLW
lw/mivyjF1tU5JDMjglemXgoSKhBmF0HloAht4CssqID7pU6/xbE5AvUkmCbp3XN
Ew5OIARnXDmyfQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:09:33 2026 by rpki-client