Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
File: lugqtki4s_iFdWnDmvlUSt_BfAE.mft (raw, json)
Hash identifier: vrpSva3B5qjcQdiGykrSl5B43bZ8aXdRsLuOEUR4TeA=
Subject key identifier: 02:F3:E3:66:58:34:D9:91:E8:D4:E3:AD:19:BE:E7:6C:5B:47:FC:A2
Authority key identifier: 96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
Certificate issuer: /CN=96e82ab648b8b3f8857569c39af9544adfc17c01
Certificate serial: 019CAAC6641B6BDDD77C586823499EE0E536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
Manifest number: 0F02
Signing time: Sun 01 Mar 2026 19:00:54 +0000
Manifest this update: Sun 01 Mar 2026 19:00:54 +0000
Manifest next update: Mon 02 Mar 2026 19:00:54 +0000
Files and hashes: 1: W2ifOrhN8XKMgVXk_yqwQmU4tZA.roa (hash: RoZTZalHouz/5mT7p1eNKVRbeaGCPt3XY2qpyiJFuNE=)
2: lI4f8rZF79xIoZ-qqIUt5k5Mwhs.roa (hash: 2bfMHhj3u9ZNahoNS0bMF6oNHC5FK6pJFUzUS206Uk0=)
3: lugqtki4s_iFdWnDmvlUSt_BfAE.crl (hash: l5xI38WxFiL2FBEROF/yJTytLEMCfEd+YwpyhgTjaqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:64:1b:6b:dd:d7:7c:58:68:23:49:9e:e0:e5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e82ab648b8b3f8857569c39af9544adfc17c01
Validity
Not Before: Mar 1 19:00:54 2026 GMT
Not After : Mar 2 19:00:54 2026 GMT
Subject: CN=02f3e3665834d991e8d4e3ad19bee76c5b47fca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:3b:75:52:b3:55:8c:66:d0:95:69:ba:d5:
ed:7f:75:91:76:c4:cd:ac:50:20:d9:78:eb:80:2e:
58:f4:1b:4c:4f:29:31:69:53:90:42:11:d5:dd:50:
84:8b:17:b5:d0:5e:b7:96:92:9e:64:d8:8d:60:ea:
0a:22:8a:e0:e0:3d:b2:89:2a:29:c7:60:fa:95:51:
e5:27:87:2a:e2:3d:18:41:d4:b8:43:f6:ad:4f:6a:
71:10:8c:bf:ea:00:14:f8:ce:5b:ae:1f:02:16:b9:
12:57:4f:27:9e:01:d6:c7:5a:5a:b5:1f:85:cb:fc:
0b:33:d9:9e:77:f4:56:a2:39:36:59:7a:c5:f5:b8:
c2:f2:0c:02:2f:8f:28:e9:da:58:c7:19:46:74:b2:
2d:44:f1:19:e8:76:a1:2f:a9:55:47:23:f6:59:47:
7b:7a:46:43:42:d9:1d:41:f2:9f:d0:b0:5d:26:e0:
69:2e:be:40:61:d6:6c:5b:0e:83:fe:60:79:da:ca:
44:a2:41:14:79:18:38:c5:bd:40:72:f9:84:fd:95:
8d:a6:78:d2:59:e4:bb:1b:5c:d8:ba:1c:d3:b7:9e:
2c:0e:3e:48:6d:c4:e2:f7:71:a9:3b:5d:a8:96:e2:
24:f4:bb:a0:ec:c3:7c:e6:7c:ad:98:af:e3:26:5a:
32:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F3:E3:66:58:34:D9:91:E8:D4:E3:AD:19:BE:E7:6C:5B:47:FC:A2
X509v3 Authority Key Identifier:
keyid:96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b8:3a:4e:14:ad:86:b3:f5:ff:84:68:a7:1f:05:23:bc:d6:
0c:2f:09:84:43:d3:0b:25:d7:a8:8d:7f:77:a1:b8:4a:6e:f4:
71:8d:db:91:06:ac:ab:c3:3f:b9:a8:b8:13:c7:84:51:d9:52:
eb:ba:d6:12:b3:40:33:ae:05:85:03:26:07:fc:a5:51:09:24:
e8:88:0f:54:73:d4:67:6d:53:ec:29:05:a8:a4:ac:c0:96:96:
20:f9:06:5b:e9:20:f8:af:7a:8f:b4:b6:31:3f:34:ff:3d:61:
9c:c3:de:fe:75:b7:85:b7:28:09:d5:49:a8:a3:84:1a:a3:94:
db:2c:19:69:d4:93:72:28:30:d6:ac:a4:cf:cc:d2:15:21:e1:
7c:ef:5d:92:a8:cb:bb:f9:74:74:d1:87:71:b5:ed:2d:50:33:
73:7e:fe:95:f7:29:fe:b3:21:1f:1a:16:a8:22:69:75:2c:0a:
53:b3:02:6a:2f:f2:d4:15:35:b6:21:11:29:b8:17:04:54:45:
ae:a6:87:e3:63:db:f5:8c:ec:7b:6e:87:e0:91:b1:5e:e9:07:
02:90:e4:12:e2:23:1e:c8:47:cc:ee:91:f0:bd:b1:72:f8:f6:
35:bb:82:56:8a:6e:9e:f7:9f:0a:7e:75:6e:57:a6:09:62:51:
1b:cf:ac:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:43:35 2026 by rpki-client