Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
File: luqxm-wiLHBaHrA6gN80FTnZfxQ.mft (raw, json)
Hash identifier: 7/iiWJXKq5peBR/BbM6rlX439FTgOJMolkQl23o6reQ=
Subject key identifier: 9A:FD:B3:89:ED:12:D4:BE:92:3C:C3:79:A6:05:4A:0A:89:D7:83:5C
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial: 019CE44835CD223528B3F00B129650F4F958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
Manifest number: 17F7
Signing time: Thu 12 Mar 2026 23:01:03 +0000
Manifest this update: Thu 12 Mar 2026 23:01:03 +0000
Manifest next update: Fri 13 Mar 2026 23:01:03 +0000
Files and hashes: 1: P1-lVsh39b68C2fcHVD1_sjkJwo.roa (hash: rA4I4sxzVTPzctitCPx83L6sgwq9KNqZHwSs09AGUyM=)
2: ZF23aY-CislUcGs4sF1_a5gGqFM.roa (hash: bNrA+qkyY4wPfBF4EpAtk3FnCkzC3b5zjZDfRB+i3ec=)
3: luqxm-wiLHBaHrA6gN80FTnZfxQ.crl (hash: hFgBve7lScTTqMT2Y4fBDx9Ek++dWt8rsCQ1brGZguE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:48:35:cd:22:35:28:b3:f0:0b:12:96:50:f4:f9:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
Validity
Not Before: Mar 12 23:01:03 2026 GMT
Not After : Mar 13 23:01:03 2026 GMT
Subject: CN=9afdb389ed12d4be923cc379a6054a0a89d7835c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d5:00:e1:be:e5:56:62:8b:00:09:50:24:0e:
ef:c3:1f:67:94:91:c0:7b:6e:13:86:00:2f:42:04:
67:43:58:e6:c3:04:92:b8:cb:2a:cb:e3:9a:44:ea:
38:cc:fb:4d:11:51:c0:08:e0:92:9d:42:ed:1f:f8:
b6:25:3b:0b:51:e7:72:5f:27:ba:f4:cf:94:3d:16:
4d:e2:d2:3b:5e:26:f5:2e:42:73:2d:64:2e:87:fc:
eb:9e:7b:1a:37:99:19:30:ef:9b:bc:6a:5f:07:3d:
48:f4:34:bd:2b:a1:5d:f3:c6:0a:8b:ae:cf:f9:85:
c6:70:4f:c0:a6:72:ef:ed:3b:5f:01:99:e1:48:b4:
83:c7:d1:a5:33:12:7b:88:be:51:0e:77:6a:c1:11:
85:d9:ec:e4:46:c1:59:75:3c:e1:ab:cb:fd:8a:dc:
42:df:02:50:df:93:6f:6b:9b:a9:3c:e4:c2:8e:dd:
5d:47:7c:5b:97:10:18:af:4b:d6:20:9d:5e:6d:44:
82:6a:a6:f3:b1:73:82:6b:5e:ce:20:7a:f7:41:75:
a4:dc:bf:7e:27:f4:24:a9:9a:85:c3:0f:63:b7:d8:
5e:fd:e9:87:ee:42:ec:ae:33:47:c0:e6:bb:14:aa:
f8:dd:f9:b6:e0:7e:ba:b2:2f:69:66:b3:32:7d:3b:
a8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FD:B3:89:ED:12:D4:BE:92:3C:C3:79:A6:05:4A:0A:89:D7:83:5C
X509v3 Authority Key Identifier:
keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:97:43:ee:92:ca:7d:59:bf:5e:b3:13:7f:cc:1e:b6:a3:13:
6d:91:55:68:ab:e0:22:19:7a:9d:9e:78:ac:bb:65:ba:cb:16:
ce:e2:2b:4f:da:99:42:8f:1d:99:cc:3b:73:f9:75:28:1a:f9:
b4:20:22:3d:23:8f:72:f8:f2:e4:a2:ca:c5:f5:73:dc:ad:2e:
35:4d:ac:32:bb:c5:8e:0c:a6:2a:0e:29:7c:04:ea:dc:a2:3f:
99:c3:93:1b:ec:79:ef:a1:b2:2b:25:3c:d5:43:06:18:db:cf:
82:cc:ee:59:ff:ee:bc:ad:ba:ca:44:ba:b4:81:94:d4:e5:95:
90:3d:2f:95:8a:b4:18:09:40:f8:f8:46:c4:7a:51:8e:e7:76:
2f:e5:8d:f4:37:13:9a:10:e3:f3:0d:93:2c:59:b9:63:db:4d:
14:21:fa:25:db:6f:e5:01:15:74:28:03:ae:2d:fc:29:7b:99:
30:92:98:bc:c5:47:c9:65:c4:36:26:74:f4:dd:ca:ab:d2:f6:
12:e6:da:ba:90:8a:64:7b:e8:49:eb:a7:dd:09:b8:4c:f8:89:
5a:f7:0e:bc:7d:52:6d:96:3d:45:ae:6b:f5:0f:b4:50:82:a2:
77:12:c7:9f:db:9c:df:ca:c2:37:08:9c:65:a9:58:2e:13:b8:
8a:44:4a:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkSDXNIjUos/ALEpZQ9PlYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZWFiMTliZWMyMjJjNzA1YTFlYjAzYTgwZGYzNDE1Mzlk
OTdmMTQwHhcNMjYwMzEyMjMwMTAzWhcNMjYwMzEzMjMwMTAzWjAzMTEwLwYDVQQD
Eyg5YWZkYjM4OWVkMTJkNGJlOTIzY2MzNzlhNjA1NGEwYTg5ZDc4MzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNUA4b7lVmKLAAlQJA7vwx9nlJHA
e24ThgAvQgRnQ1jmwwSSuMsqy+OaROo4zPtNEVHACOCSnULtH/i2JTsLUedyXye6
9M+UPRZN4tI7Xib1LkJzLWQuh/zrnnsaN5kZMO+bvGpfBz1I9DS9K6Fd88YKi67P
+YXGcE/ApnLv7TtfAZnhSLSDx9GlMxJ7iL5RDndqwRGF2ezkRsFZdTzhq8v9itxC
3wJQ35Nva5upPOTCjt1dR3xblxAYr0vWIJ1ebUSCaqbzsXOCa17OIHr3QXWk3L9+
J/QkqZqFww9jt9he/emH7kLsrjNHwOa7FKr43fm24H66si9pZrMyfTuofwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJr9s4ntEtS+kjzDeaYFSgqJ14NcMB8GA1UdIwQY
MBaAFJbqsZvsIixwWh6wOoDfNBU52X8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kNzdhNjAtMTIyNy00ZGU3LTk3YmIt
NDEwMDYxZTM1NzZhLzEvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9kNzdhNjAtMTIyNy00ZGU3LTk3YmItNDEwMDYxZTM1NzZh
LzEvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJdD7pLK
fVm/XrMTf8wetqMTbZFVaKvgIhl6nZ54rLtlussWzuIrT9qZQo8dmcw7c/l1KBr5
tCAiPSOPcvjy5KLKxfVz3K0uNU2sMrvFjgymKg4pfATq3KI/mcOTG+x576GyKyU8
1UMGGNvPgszuWf/uvK26ykS6tIGU1OWVkD0vlYq0GAlA+PhGxHpRjud2L+WN9DcT
mhDj8w2TLFm5Y9tNFCH6Jdtv5QEVdCgDri38KXuZMJKYvMVHyWXENiZ09N3Kq9L2
EubaupCKZHvoSeun3Qm4TPiJWvcOvH1SbZY9Ra5r9Q+0UIKidxLHn9uc38rCNwic
ZalYLhO4ikRKkQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:26:52 2026 by rpki-client