
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
File: luqxm-wiLHBaHrA6gN80FTnZfxQ.mft (raw, json)
Hash identifier: UoWCwVox8fH1EAAjwQmwFaMT6T2Cj0YBePxfI5V68i4=
Subject key identifier: 4A:4F:36:6A:46:C8:F1:64:B1:11:A3:2F:04:6F:C7:5E:CE:2A:D6:02
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial: 019DD5AF33C8D51DCC966EAD49D0F53EA8A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
Manifest number: 1874
Signing time: Tue 28 Apr 2026 20:02:02 +0000
Manifest this update: Tue 28 Apr 2026 20:02:02 +0000
Manifest next update: Wed 29 Apr 2026 20:02:02 +0000
Files and hashes: 1: P1-lVsh39b68C2fcHVD1_sjkJwo.roa (hash: rA4I4sxzVTPzctitCPx83L6sgwq9KNqZHwSs09AGUyM=)
2: ZF23aY-CislUcGs4sF1_a5gGqFM.roa (hash: bNrA+qkyY4wPfBF4EpAtk3FnCkzC3b5zjZDfRB+i3ec=)
3: luqxm-wiLHBaHrA6gN80FTnZfxQ.crl (hash: Ar20fnjQO+SVhlXanJ9szs3MK6vqhEnQeXJaTN9pWy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 20:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d5:af:33:c8:d5:1d:cc:96:6e:ad:49:d0:f5:3e:a8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
Validity
Not Before: Apr 28 20:02:02 2026 GMT
Not After : Apr 29 20:02:02 2026 GMT
Subject: CN=4a4f366a46c8f164b111a32f046fc75ece2ad602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:81:e6:b3:15:61:bf:f9:bf:37:bb:ab:09:5b:
c5:e3:90:a8:50:af:04:c0:06:0f:10:fa:e5:a1:03:
1f:b8:f3:bc:a7:00:0c:37:95:00:e8:f0:c4:de:33:
cb:d4:6d:6c:ad:37:5e:69:b1:3f:18:a2:1d:3d:b2:
04:58:d2:6f:b2:ec:07:99:6b:83:c5:a6:91:47:f0:
22:40:27:cf:70:88:e4:33:08:bd:be:98:dc:89:18:
1b:0e:98:30:ec:bf:d5:3f:4b:ad:72:60:0b:33:c8:
68:e0:dd:58:6a:0d:21:de:a0:de:24:b6:67:36:f7:
77:9d:02:f9:ca:57:b7:cf:91:f8:0c:bb:52:3f:74:
67:51:69:e9:f7:7b:53:2c:e4:6e:2e:d8:b4:75:c2:
e2:d2:8c:25:1b:95:3b:72:12:93:da:b5:b6:9e:e3:
7b:44:8c:d6:7f:52:90:f8:ea:26:42:9c:b4:e1:f6:
de:da:e3:e8:45:37:69:b3:71:eb:40:56:b8:6b:00:
c9:ae:b0:8a:50:df:b2:d4:df:81:49:9e:15:d1:b6:
30:9a:c2:d2:07:6b:fe:8f:dc:08:9c:55:4a:5e:b8:
43:56:9c:7e:2b:6d:ef:03:e0:01:4f:61:2c:7e:36:
dd:8c:04:27:d9:06:70:ba:fc:6f:68:ea:c9:28:81:
82:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4F:36:6A:46:C8:F1:64:B1:11:A3:2F:04:6F:C7:5E:CE:2A:D6:02
X509v3 Authority Key Identifier:
keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:dc:30:09:25:04:62:1e:9f:d4:5d:6b:58:40:b0:b4:d2:2d:
04:b6:0b:db:07:9d:10:02:9b:36:d8:6c:39:d5:20:e8:f2:a1:
77:67:51:7e:b1:82:5b:6c:05:f5:2f:17:fe:69:2e:67:14:e0:
3c:4a:cc:11:6f:f7:87:f5:27:ec:bb:7e:c4:98:9b:67:05:72:
ac:f1:a1:b6:a9:e4:99:14:01:f2:8c:af:64:c0:8d:26:3c:79:
73:26:55:9f:25:95:83:21:bd:ec:84:8d:32:30:2b:e5:4e:eb:
da:06:4b:e4:54:ed:fb:6c:8c:d4:f1:cb:94:79:13:56:7b:a0:
ab:40:3d:8a:f6:56:06:47:a8:5a:27:ba:00:2a:7e:71:6f:61:
c4:2b:18:ab:59:e8:d8:dd:2c:2f:f5:ed:8e:71:ad:0b:d5:e3:
d2:72:ff:ec:6c:2a:0a:be:a3:97:a5:e5:ec:71:48:a1:dd:8c:
25:41:89:a6:97:10:ec:6f:56:d1:c6:5b:19:a6:d9:38:4f:d7:
74:83:b8:9f:79:7c:64:75:93:07:b5:2e:19:65:5e:3d:93:09:
6c:54:16:ab:03:d2:85:5e:54:b1:fb:cc:ed:46:8a:c0:72:1f:
99:42:01:d5:b1:94:40:26:af:79:66:fc:b5:85:3f:e0:28:9e:
82:42:da:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3VrzPI1R3Mlm6tSdD1PqinMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZWFiMTliZWMyMjJjNzA1YTFlYjAzYTgwZGYzNDE1Mzlk
OTdmMTQwHhcNMjYwNDI4MjAwMjAyWhcNMjYwNDI5MjAwMjAyWjAzMTEwLwYDVQQD
Eyg0YTRmMzY2YTQ2YzhmMTY0YjExMWEzMmYwNDZmYzc1ZWNlMmFkNjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IHmsxVhv/m/N7urCVvF45CoUK8E
wAYPEPrloQMfuPO8pwAMN5UA6PDE3jPL1G1srTdeabE/GKIdPbIEWNJvsuwHmWuD
xaaRR/AiQCfPcIjkMwi9vpjciRgbDpgw7L/VP0utcmALM8ho4N1Yag0h3qDeJLZn
Nvd3nQL5yle3z5H4DLtSP3RnUWnp93tTLORuLti0dcLi0owlG5U7chKT2rW2nuN7
RIzWf1KQ+OomQpy04fbe2uPoRTdps3HrQFa4awDJrrCKUN+y1N+BSZ4V0bYwmsLS
B2v+j9wInFVKXrhDVpx+K23vA+ABT2EsfjbdjAQn2QZwuvxvaOrJKIGCMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpPNmpGyPFksRGjLwRvx17OKtYCMB8GA1UdIwQY
MBaAFJbqsZvsIixwWh6wOoDfNBU52X8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kNzdhNjAtMTIyNy00ZGU3LTk3YmIt
NDEwMDYxZTM1NzZhLzEvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9kNzdhNjAtMTIyNy00ZGU3LTk3YmItNDEwMDYxZTM1NzZh
LzEvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAdwwCSUE
Yh6f1F1rWECwtNItBLYL2wedEAKbNthsOdUg6PKhd2dRfrGCW2wF9S8X/mkuZxTg
PErMEW/3h/Un7Lt+xJibZwVyrPGhtqnkmRQB8oyvZMCNJjx5cyZVnyWVgyG97ISN
MjAr5U7r2gZL5FTt+2yM1PHLlHkTVnugq0A9ivZWBkeoWie6ACp+cW9hxCsYq1no
2N0sL/XtjnGtC9Xj0nL/7GwqCr6jl6Xl7HFIod2MJUGJppcQ7G9W0cZbGabZOE/X
dIO4n3l8ZHWTB7UuGWVePZMJbFQWqwPShV5UsfvM7UaKwHIfmUIB1bGUQCaveWb8
tYU/4CiegkLa8w==
-----END CERTIFICATE-----
Generated at Wed Apr 29 06:37:34 2026 by rpki-client