Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
File: LuVtTXsdGgbOifdG95tlbHNIxSU.mft (raw, json)
Hash identifier: LCoAt1LbiHpkCqxUaWredTk8mbQs6F5J0/DpoAPwSZI=
Subject key identifier: EE:E1:8D:00:8F:21:69:A6:DD:CD:D3:9C:D7:98:39:32:6C:28:8B:B0
Authority key identifier: 2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
Certificate issuer: /CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Certificate serial: 01A110A90B78ADB35B92679F60A6AC31CF9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
Manifest number: 1A91
Signing time: Tue 06 Oct 2026 10:01:16 +0000
Manifest this update: Tue 06 Oct 2026 10:01:16 +0000
Manifest next update: Wed 07 Oct 2026 10:01:16 +0000
Files and hashes: 1: 8XJI8Ab5Kn4iGwXJ6PSkR-OvFH4.roa (hash: SgXQOVpKdakFip4Eu8vjLUkRXfKk3oyvAOpf3ZBZws8=)
2: LuVtTXsdGgbOifdG95tlbHNIxSU.crl (hash: IdLT3TNhZYmXv2AEhRvmxQ4u1ZukvNb6BOIDkaNTvYw=)
3: WaELHuLYA_1cefIoTQf80xGonys.roa (hash: rib5YkFr/K/aT3PKl0IuD1KkixxMJnJUccJ5z3LdA80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:a9:0b:78:ad:b3:5b:92:67:9f:60:a6:ac:31:cf:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Validity
Not Before: Oct 6 10:01:16 2026 GMT
Not After : Oct 7 10:01:16 2026 GMT
Subject: CN=eee18d008f2169a6ddcdd39cd79839326c288bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3d:61:0d:45:87:13:f4:65:9c:73:21:e2:3d:
d8:21:a2:ae:1c:73:11:e9:aa:32:9c:7c:57:9e:71:
dc:ba:41:c7:05:47:bf:6a:89:ee:dc:9f:18:b1:70:
34:28:4b:72:26:08:4a:e0:26:d3:97:70:02:e5:49:
e3:a0:6f:d1:3b:ae:2d:90:1a:0b:b3:7d:be:63:5e:
46:49:3b:57:6f:cd:21:6a:a9:97:ce:19:90:01:0c:
e9:c3:bb:15:82:5e:d6:0e:d4:62:66:80:74:18:d2:
75:2f:f1:87:b9:45:f4:9a:6c:fb:ae:b0:e1:40:08:
ba:a0:99:4a:7b:69:38:b2:ad:12:7b:cb:c7:08:ea:
7b:be:6e:a2:f5:db:ed:8d:28:02:79:af:e6:75:89:
7a:60:d4:8f:0b:85:95:5a:1a:a8:e5:d9:2f:98:b7:
8f:12:6c:fd:db:63:b1:7c:08:8f:3a:78:f0:6e:60:
f2:23:38:fa:9e:40:27:f4:99:75:b2:c1:bd:42:b4:
14:a0:7a:62:b3:c0:2f:1c:2b:c8:64:9e:4f:8f:1d:
5e:c1:9f:f8:50:8f:2a:01:ee:9b:6c:a5:74:6b:9e:
01:12:19:03:41:41:11:69:ae:7c:d8:90:a0:6b:e8:
8d:57:ae:a3:dd:45:24:e5:14:47:8d:5d:93:e3:bd:
be:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E1:8D:00:8F:21:69:A6:DD:CD:D3:9C:D7:98:39:32:6C:28:8B:B0
X509v3 Authority Key Identifier:
keyid:2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:6f:80:f6:23:24:7b:8b:98:c2:1e:72:a7:ab:8b:da:dd:42:
af:73:4b:8b:1a:3d:1a:ae:9e:54:45:ca:81:4b:88:16:c6:a1:
a2:29:fc:e6:b5:f2:a2:ab:97:2f:cc:1c:8b:46:a9:22:e9:0b:
5e:d2:fb:27:df:b9:47:51:9f:da:50:bc:a0:aa:e5:b0:ee:77:
91:46:df:cc:5a:00:33:29:f6:12:bd:fd:21:81:55:ae:d0:1f:
86:a9:bc:33:98:fc:fb:fc:d0:50:e5:9e:83:61:b1:3b:92:a9:
27:4f:f2:30:a8:1f:13:fb:48:4f:fe:ee:6a:cc:1e:39:3f:f9:
37:3c:ff:31:05:9b:96:4a:14:bf:cc:66:aa:95:b8:8e:9c:1b:
d6:60:f9:ef:e5:85:6a:d2:11:3a:94:dc:4d:ce:41:77:bb:94:
ea:3e:69:62:46:56:cf:d2:15:55:b5:2e:31:7a:e2:d1:ae:98:
6a:ce:0a:05:cc:40:82:62:38:f4:00:5c:da:5f:24:e3:d2:bf:
08:f1:b0:5e:8c:99:23:53:b7:f5:34:39:5e:7d:0c:15:92:8c:
a4:f7:58:db:49:7b:5b:f1:2f:44:3f:0e:22:8f:ce:a6:43:ea:
fd:9f:f1:ad:b1:2b:2e:ca:01:b5:c1:c5:2a:7a:0e:d5:8a:b6:
51:d8:bd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 13:41:29 2026 by rpki-client