Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
File: LuVtTXsdGgbOifdG95tlbHNIxSU.mft (raw, json)
Hash identifier: rXwsL3OuiUshSyZTodxdqTcw70fRsWDWftzR3DmQ6NY=
Subject key identifier: 7A:C5:0E:4D:6C:58:F2:23:B3:D6:8F:74:13:2B:4E:52:D2:F5:D3:52
Authority key identifier: 2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
Certificate issuer: /CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Certificate serial: 019D3608DEA7B2116808E02952656AAEB096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
Manifest number: 1892
Signing time: Sat 28 Mar 2026 20:00:44 +0000
Manifest this update: Sat 28 Mar 2026 20:00:44 +0000
Manifest next update: Sun 29 Mar 2026 20:00:44 +0000
Files and hashes: 1: 8XJI8Ab5Kn4iGwXJ6PSkR-OvFH4.roa (hash: SgXQOVpKdakFip4Eu8vjLUkRXfKk3oyvAOpf3ZBZws8=)
2: LuVtTXsdGgbOifdG95tlbHNIxSU.crl (hash: UZL80rEtxXLxdLBvZK4XT0zwUWdTlZL+JjMrZWWdRNY=)
3: zeRg5rwyVQrQCVsUlLyRvPr9TxI.roa (hash: T17rFq6E9471MLMBhrGLFdRcWoO+rQ0ILITYoqDpgKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:08:de:a7:b2:11:68:08:e0:29:52:65:6a:ae:b0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Validity
Not Before: Mar 28 20:00:44 2026 GMT
Not After : Mar 29 20:00:44 2026 GMT
Subject: CN=7ac50e4d6c58f223b3d68f74132b4e52d2f5d352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c1:c6:79:c2:82:89:69:6b:41:7f:e4:1a:34:
dd:aa:be:f7:fa:48:da:89:01:e9:99:65:09:bf:13:
06:35:86:ac:d6:30:43:a9:48:91:61:f2:a4:04:8f:
f1:95:6c:c8:5e:56:10:e9:82:0d:ac:d5:e0:4b:d1:
48:5f:1f:08:1d:8e:02:e5:d5:19:14:71:0e:22:e3:
01:fe:7b:40:90:9c:ae:8d:e5:3c:eb:9e:f1:13:b5:
52:1b:dc:5d:85:dc:cf:2c:0f:5c:b1:d4:ce:69:f1:
92:cc:e5:de:2d:12:17:c4:69:94:c0:c8:d6:d2:54:
d0:2d:85:73:2b:b2:09:75:5d:49:75:b8:28:ef:98:
40:99:f5:92:12:3e:60:3a:77:fa:d7:df:a2:b4:b4:
68:b5:ba:f2:b9:6c:10:92:db:cc:af:dc:e1:c3:75:
06:e9:2c:98:08:b2:25:5b:36:25:8e:b4:6d:1c:84:
91:a1:d8:3d:b9:6b:fc:1d:f4:a6:32:7a:93:0e:01:
3b:60:10:67:2e:1f:08:38:a1:5d:98:a0:75:74:16:
83:fd:c1:4b:60:a9:45:3e:4b:ea:cf:a3:ee:31:49:
38:d7:8a:d1:90:2b:6c:70:91:a8:67:3a:28:05:9b:
f3:a3:83:74:0a:42:9d:89:d9:a4:c7:8b:30:fa:db:
1d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C5:0E:4D:6C:58:F2:23:B3:D6:8F:74:13:2B:4E:52:D2:F5:D3:52
X509v3 Authority Key Identifier:
keyid:2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d9:ac:23:cd:7e:c4:d6:c7:93:af:7e:75:ba:bd:0d:c8:3f:
d5:30:06:10:64:5d:0c:d5:96:7a:87:4b:66:a5:8b:e7:2a:26:
9b:d6:21:7e:a1:ec:98:9c:cf:1f:56:11:d3:8f:2d:c4:ba:31:
79:14:8c:c2:92:48:bb:88:0e:c7:a5:7a:54:cc:21:a5:c8:3f:
e1:c7:cf:90:30:54:b0:b6:9d:97:2a:0f:e7:3f:2c:a5:e4:c3:
56:51:ad:ac:29:38:bb:1e:2e:75:d2:ef:18:fc:94:4e:bd:05:
64:69:c0:d7:ac:08:82:01:fc:68:2d:7f:e1:2f:bf:be:b2:9b:
78:cd:57:dd:03:47:73:fd:6b:62:0b:5d:4c:c3:17:bf:2d:96:
f6:f4:66:5a:80:9f:29:96:02:84:df:c9:59:c4:98:1f:71:d5:
89:8d:a1:e0:a0:c8:3f:76:5c:d6:54:ef:a4:52:d9:1b:a9:f8:
fd:5d:6c:69:ad:54:3e:3a:8f:d8:c5:35:36:01:4a:0a:d4:f2:
10:59:1c:67:07:d9:c1:3c:9e:0a:7a:3b:30:18:9b:a8:27:f4:
92:21:22:db:9c:d5:9b:70:5a:8b:99:c7:7d:5f:db:8d:fb:af:
eb:e2:b7:64:6a:7b:ae:ea:93:08:90:8d:80:17:79:cb:54:9c:
cc:4c:2e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 02:11:50 2026 by rpki-client