Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
File: luqxm-wiLHBaHrA6gN80FTnZfxQ.mft (raw, json)
Hash identifier: wpP89Asppp7tIl6DxokggWG1BZB0Bk9dlY49nrRiNss=
Subject key identifier: 53:08:EC:37:FE:B3:0D:DD:6A:85:59:E0:EB:48:91:3A:B8:77:86:65
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial: 01A0DE05652A6AF1B3382B075DC6CE57771A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
Manifest number: 1A06
Signing time: Sat 26 Sep 2026 14:01:30 +0000
Manifest this update: Sat 26 Sep 2026 14:01:30 +0000
Manifest next update: Sun 27 Sep 2026 14:01:30 +0000
Files and hashes: 1: P1-lVsh39b68C2fcHVD1_sjkJwo.roa (hash: rA4I4sxzVTPzctitCPx83L6sgwq9KNqZHwSs09AGUyM=)
2: ZF23aY-CislUcGs4sF1_a5gGqFM.roa (hash: bNrA+qkyY4wPfBF4EpAtk3FnCkzC3b5zjZDfRB+i3ec=)
3: luqxm-wiLHBaHrA6gN80FTnZfxQ.crl (hash: 5YhSV5HuLf9Mo4JdsrVpfBl4QYt6b9c8b5S8jAyIQCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:65:2a:6a:f1:b3:38:2b:07:5d:c6:ce:57:77:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
Validity
Not Before: Sep 26 14:01:30 2026 GMT
Not After : Sep 27 14:01:30 2026 GMT
Subject: CN=5308ec37feb30ddd6a8559e0eb48913ab8778665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:ee:90:a5:d4:e6:65:30:52:09:60:e0:c6:
87:d6:5f:69:fe:4e:ca:e6:1a:c8:24:03:ae:06:40:
00:68:96:b0:8c:22:ce:75:5e:2c:b5:1f:fc:35:44:
da:4a:8a:c5:d0:a0:5b:b6:95:84:49:97:cb:e1:15:
f6:0f:ab:5f:80:cf:65:a2:54:e2:40:65:43:10:98:
04:e1:8c:ea:0d:b2:e5:20:72:4b:e5:1e:a7:e8:43:
df:86:ad:8a:1f:9d:6c:41:4f:33:90:21:94:2d:26:
65:a6:61:88:23:f4:1f:89:43:1a:5c:55:a1:ed:4e:
d1:2e:1f:ed:29:aa:af:a9:72:38:5c:57:26:ad:88:
cc:c4:76:3e:86:3e:b7:23:b4:fa:87:70:c4:ac:1e:
ba:44:01:a8:08:e4:c9:ba:af:e8:ea:c2:30:cd:df:
f2:bb:d1:93:99:aa:aa:e0:4c:ae:7a:6e:fe:7b:19:
eb:d8:59:ed:c5:4b:a1:13:de:09:45:66:a9:5c:fb:
92:d4:24:e3:41:a8:71:6c:1c:b0:d2:6a:1c:04:70:
db:de:16:a5:4a:55:4f:de:6f:b6:f3:1c:96:f9:cd:
4a:ed:1e:ca:05:f7:18:e7:13:62:39:e4:e4:ef:5f:
18:a2:89:44:2e:58:6f:18:6b:35:b5:ef:3d:bd:e2:
64:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:08:EC:37:FE:B3:0D:DD:6A:85:59:E0:EB:48:91:3A:B8:77:86:65
X509v3 Authority Key Identifier:
keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:9c:5e:b6:e0:40:ec:8a:8f:9f:2a:46:2e:95:26:28:b5:25:
8b:07:11:8c:52:4a:64:e9:60:24:29:44:70:bd:98:9e:2e:7a:
54:4d:ca:4b:b8:4c:8b:70:8a:a4:57:88:9f:5b:8c:dc:e3:0b:
da:53:05:8c:99:56:58:30:4d:20:d2:c9:28:f0:2c:11:c9:07:
72:6d:6a:88:22:14:50:ac:7d:12:85:94:c2:d0:5b:08:82:32:
cf:6b:9b:c0:87:f1:15:2e:24:b1:f5:82:cb:b8:31:a8:1c:69:
52:8c:98:34:d9:4d:f7:9c:5f:f6:22:93:74:b0:cc:d0:af:d9:
e1:6a:71:86:c4:67:b8:90:6a:5a:10:ee:08:ea:c5:4e:17:c9:
92:79:89:83:f5:36:81:68:a9:07:65:a9:df:d3:02:77:0e:50:
db:03:43:f1:69:56:e2:fb:bb:0c:c7:cb:c1:31:5b:d6:4f:bc:
6b:ad:9d:87:64:33:d6:0b:73:ed:0c:72:2c:41:e1:16:46:14:
5c:4c:a1:a7:82:f9:07:cd:85:7a:a1:98:37:74:4f:16:be:fd:
22:33:dc:c3:0d:d7:7c:2d:dd:2a:af:20:8c:11:09:a9:c4:04:
cf:c3:8f:a0:bb:1e:e3:1a:a7:67:38:5c:5a:84:5a:83:75:66:
72:57:0b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:40:38 2026 by rpki-client