Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
File: LuKffz-qSKlAq42iErSxEWiD8nM.mft (raw, json)
Hash identifier: G4iuOr80yLq12LqyUP7kSNuqXxXQu2GEgFpL+PbxZoQ=
Subject key identifier: 9C:61:37:23:99:16:DB:AE:16:81:14:D6:50:81:F2:F3:2C:3E:23:9B
Authority key identifier: 2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
Certificate issuer: /CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Certificate serial: 01A1539C239A1A48C4056129AE6DD43D2B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
Manifest number: 1AB3
Signing time: Mon 19 Oct 2026 10:01:44 +0000
Manifest this update: Mon 19 Oct 2026 10:01:44 +0000
Manifest next update: Tue 20 Oct 2026 10:01:44 +0000
Files and hashes: 1: LuKffz-qSKlAq42iErSxEWiD8nM.crl (hash: 0GhVRvcno3Ptd0TSQSRe6XT9yzo4xeDETR76m7SYGL8=)
2: _v7GfhVuqUV1D7sW2SlcrySGsrA.roa (hash: KzmQ49grnGxQlCZ2CCyjpnejNzdZeWdhTo34zMYUN0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 10:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:9c:23:9a:1a:48:c4:05:61:29:ae:6d:d4:3d:2b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Validity
Not Before: Oct 19 10:01:44 2026 GMT
Not After : Oct 20 10:01:44 2026 GMT
Subject: CN=9c6137239916dbae168114d65081f2f32c3e239b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:26:6f:81:c7:24:4a:e4:08:07:33:83:f5:
4f:b0:f6:cc:9d:ee:d4:87:ae:b7:0e:5d:d4:f8:97:
88:49:d0:c8:4b:61:f1:3c:77:49:17:08:a4:9d:47:
2c:e0:4c:c4:93:3a:3a:f4:ce:c3:a5:04:0f:d1:3d:
a4:17:f5:24:1d:fe:b2:56:10:e0:d8:f4:8c:6b:0a:
ef:f8:23:c9:ca:24:71:e0:83:e1:4d:ab:2e:a7:4c:
e1:07:6a:fa:0b:91:52:6a:96:dd:f1:46:3b:bc:e6:
5a:a6:bc:5e:8f:91:39:1a:b6:d3:b9:50:4e:5e:60:
6f:f1:0b:b4:eb:3c:48:2d:1e:90:55:28:fb:7e:89:
7b:73:d9:82:bd:a3:87:ac:ef:c1:b3:29:f1:11:52:
eb:ac:80:61:c9:bc:91:58:20:4b:4a:bd:73:34:85:
a7:5b:28:39:5e:8b:70:70:9d:47:a4:d1:22:5c:cb:
00:fa:c6:b5:f3:93:72:25:06:ab:8f:81:a5:aa:36:
48:f8:29:a5:b2:8e:77:e9:4d:26:f0:fd:36:72:0d:
1b:08:e9:2a:6f:56:ae:7e:a3:fd:8f:e0:94:27:30:
fc:f6:66:44:c3:58:8b:31:da:af:e4:52:10:bb:7c:
f7:67:a4:dc:8d:ba:9a:75:7d:ca:8f:5b:ee:dc:a2:
9a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:61:37:23:99:16:DB:AE:16:81:14:D6:50:81:F2:F3:2C:3E:23:9B
X509v3 Authority Key Identifier:
keyid:2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:cd:9e:17:1f:fb:a6:0f:fc:ff:b8:b8:00:9b:91:79:01:5a:
46:f6:a3:a1:eb:c4:87:33:26:4a:5b:bc:e0:b3:a1:40:58:3f:
c9:74:fc:2c:13:45:3e:86:f8:38:70:07:6e:f0:ce:7a:ce:cd:
74:a4:08:5a:99:82:fe:66:03:f6:f1:7d:96:1f:dc:9a:29:68:
89:14:ae:11:92:00:f4:af:07:85:85:16:ea:17:5c:d4:72:1e:
cc:a0:9e:99:ae:e3:3e:bc:d9:6d:8a:a2:81:13:f1:58:e4:27:
d7:b1:bd:ae:19:f0:cf:4b:71:4f:77:5c:c3:50:5e:2a:df:ab:
cf:34:1c:45:9f:58:4a:5e:f5:78:5b:33:cb:f2:7e:b1:19:0b:
43:54:31:9a:8b:cd:b3:a9:4e:3e:48:05:dd:1a:41:8d:9c:d1:
8f:57:12:81:42:cb:0b:e2:a9:35:7f:0f:24:f4:54:12:38:61:
59:8d:e8:0d:74:13:9e:bb:91:88:b7:d6:d0:d4:9c:76:e5:6a:
58:d1:3b:a8:ec:f5:78:3a:b3:0e:f7:8e:88:40:cd:8d:f4:4a:
d4:0f:a8:25:da:f7:5d:a3:5d:7a:2a:30:54:d4:a5:83:f1:76:
3a:91:13:a5:db:f2:b9:71:b4:27:9f:56:4e:11:e7:87:b1:92:
42:d6:0a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 13:51:33 2026 by rpki-client