Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
File: LuVtTXsdGgbOifdG95tlbHNIxSU.mft (raw, json)
Hash identifier: JNfTGXAA4lIv7kRdMs94kZKMPc7KgSqyv0+wSPYhGYQ=
Subject key identifier: 1B:7F:58:A9:8E:A5:29:2F:FF:B5:17:39:89:C0:95:E3:C9:03:06:07
Authority key identifier: 2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
Certificate issuer: /CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Certificate serial: 019F189F04FFF998D7B496ED581D5EB81C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
Manifest number: 198C
Signing time: Tue 30 Jun 2026 13:01:42 +0000
Manifest this update: Tue 30 Jun 2026 13:01:42 +0000
Manifest next update: Wed 01 Jul 2026 13:01:42 +0000
Files and hashes: 1: 8XJI8Ab5Kn4iGwXJ6PSkR-OvFH4.roa (hash: SgXQOVpKdakFip4Eu8vjLUkRXfKk3oyvAOpf3ZBZws8=)
2: LuVtTXsdGgbOifdG95tlbHNIxSU.crl (hash: bq2BhLBaNZzc56jELVkAFa6wU4+I05nGGx0jIP21lOQ=)
3: WaELHuLYA_1cefIoTQf80xGonys.roa (hash: rib5YkFr/K/aT3PKl0IuD1KkixxMJnJUccJ5z3LdA80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9f:04:ff:f9:98:d7:b4:96:ed:58:1d:5e:b8:1c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Validity
Not Before: Jun 30 13:01:42 2026 GMT
Not After : Jul 1 13:01:42 2026 GMT
Subject: CN=1b7f58a98ea5292fffb5173989c095e3c9030607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c2:e6:ea:81:05:a8:f3:0c:79:d0:d5:42:c2:
a8:24:0e:83:ba:ac:86:c7:98:b0:6f:01:03:bf:bd:
90:6b:b6:cc:dc:c1:76:14:1f:7a:01:55:89:78:d0:
37:02:a9:c8:72:d4:4f:00:21:93:3e:29:87:a0:2d:
53:2b:cc:52:c6:77:7e:b0:c3:23:9b:6f:f7:d4:fe:
46:21:ff:e6:17:5a:6e:1f:95:c4:53:87:08:d3:02:
d1:fd:ec:ff:c7:ed:eb:72:55:4e:37:b9:c5:09:c4:
ac:f4:6c:22:c3:af:a2:06:b2:4e:d9:87:90:e4:f3:
ad:10:73:c6:56:13:d3:13:f3:34:c9:23:df:c2:ea:
69:d9:90:3d:aa:de:12:2c:e4:e0:1d:8d:e1:b1:85:
80:74:16:5f:fe:5c:34:a3:c8:17:22:f6:b0:7e:35:
c3:fe:1f:23:f8:20:3f:df:25:b2:c9:f4:47:ff:51:
26:70:15:6e:92:4c:99:5f:74:92:57:55:ec:06:22:
0a:bb:89:01:71:e9:c7:cb:af:d3:d5:cb:c6:c1:4e:
97:85:45:da:0e:bc:3f:5e:3a:2d:08:48:4e:0f:1a:
d9:d9:93:01:8e:72:90:25:36:c3:19:3b:61:ff:ef:
e6:a0:34:33:37:25:7f:c9:f6:1d:5e:86:c0:22:42:
c5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7F:58:A9:8E:A5:29:2F:FF:B5:17:39:89:C0:95:E3:C9:03:06:07
X509v3 Authority Key Identifier:
keyid:2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f7:9c:8f:39:63:69:59:04:59:0f:b1:14:04:ba:e2:c7:97:
1c:44:11:e8:25:29:54:1b:50:b8:13:63:96:25:0b:4e:d6:4a:
ba:a7:ae:8e:8b:1a:c1:8a:8c:a0:f5:33:15:45:bb:48:aa:7c:
68:16:3e:df:f9:43:40:fd:f9:3c:2c:13:89:0e:1f:6d:38:73:
ee:bf:8f:ae:15:77:c4:46:c0:90:ff:09:97:4e:0d:f5:81:f6:
de:c0:71:e6:b2:e3:39:51:a0:a8:26:07:b4:0b:2b:14:86:fd:
58:68:d3:bb:f4:80:ff:4f:a3:28:56:01:b0:08:79:e2:ae:f4:
c1:8d:cf:5c:89:28:5c:82:5f:cd:b0:7f:3b:56:e0:f1:56:0d:
b5:a4:5d:9a:64:10:90:60:2a:09:2b:65:96:f1:f1:5d:5a:9d:
e4:43:76:6f:db:e7:4b:13:aa:7b:c5:a3:f2:ca:4e:17:84:f4:
ea:39:fa:ee:bc:58:c0:3c:b5:80:05:2f:11:b4:03:e3:74:a5:
5f:97:80:85:5e:60:80:8c:6f:2b:4f:e6:16:a8:9c:9d:2b:5e:
02:97:a2:76:b5:c7:09:49:01:12:e6:f5:4f:bb:61:21:49:02:
be:44:ab:82:00:d4:2f:8d:1a:5a:d0:c8:d1:df:75:93:d4:c3:
55:6d:dd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:44:41 2026 by rpki-client