Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
File: LuKffz-qSKlAq42iErSxEWiD8nM.mft (raw, json)
Hash identifier: IVau3+iNEUGVc8q1W9jDBHDSqSncuFygxgf3LI7ElS8=
Subject key identifier: 0C:9C:62:40:B2:4D:38:99:E4:36:6E:F5:8D:23:0A:66:E1:5A:42:A4
Authority key identifier: 2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
Certificate issuer: /CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Certificate serial: 019D390A8475C2192C10B7CFBFCA8D10D770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 10:01:23 +0000
Manifest this update: Sun 29 Mar 2026 10:01:23 +0000
Manifest next update: Mon 30 Mar 2026 10:01:23 +0000
Files and hashes: 1: LuKffz-qSKlAq42iErSxEWiD8nM.crl (hash: tg4lR+835lHuCtgcQCWVCQiLjUDc9MUAY7bQdi+gWrE=)
2: _v7GfhVuqUV1D7sW2SlcrySGsrA.roa (hash: KzmQ49grnGxQlCZ2CCyjpnejNzdZeWdhTo34zMYUN0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:84:75:c2:19:2c:10:b7:cf:bf:ca:8d:10:d7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Validity
Not Before: Mar 29 10:01:23 2026 GMT
Not After : Mar 30 10:01:23 2026 GMT
Subject: CN=0c9c6240b24d3899e4366ef58d230a66e15a42a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bc:00:36:d5:ab:99:e7:44:74:85:75:03:fd:
98:28:6e:a9:a6:26:81:41:80:50:b6:72:38:82:2b:
4d:07:9a:f7:c9:a0:1a:fb:59:3c:88:03:a0:d0:2b:
b6:8b:64:c5:32:b9:93:4e:3e:e7:59:8e:4f:49:3f:
ef:af:39:45:b4:23:83:d3:4f:1b:9e:01:d7:03:87:
1d:5a:2b:b5:a9:8f:9a:67:37:2f:02:d1:aa:da:4c:
56:7c:94:7f:84:da:24:1e:16:aa:61:9c:26:60:b2:
80:91:ac:e4:5d:28:16:f6:a8:ac:10:59:d3:3f:3e:
ae:a9:e6:05:01:77:10:ba:44:0c:2a:4b:14:b6:06:
5f:c2:fa:69:16:18:44:6f:19:81:ed:9e:ef:8c:22:
03:aa:fa:a0:96:85:0a:20:23:89:51:9f:45:43:7c:
0c:56:37:aa:73:a7:aa:bc:76:88:df:a8:0b:28:c1:
10:3b:33:d7:d7:87:67:bd:6b:9d:4b:c3:84:fc:09:
48:0d:12:69:4c:03:b4:db:9f:ec:9f:9f:6a:6b:15:
f0:e4:26:c3:a0:87:62:12:3f:53:92:df:de:01:ce:
dd:64:86:08:ae:05:a2:3b:80:01:fb:35:cd:af:3a:
f2:11:05:34:70:db:48:1d:65:12:cb:c4:42:68:a4:
a6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9C:62:40:B2:4D:38:99:E4:36:6E:F5:8D:23:0A:66:E1:5A:42:A4
X509v3 Authority Key Identifier:
keyid:2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:37:82:13:25:53:ad:15:35:a7:45:e7:82:1d:d8:af:9c:f0:
b6:93:f9:35:67:17:f4:b6:1e:8a:90:04:5a:cc:79:b7:08:3b:
5c:16:49:f6:44:a4:ef:11:93:78:e7:07:7e:9e:b8:d6:b2:9a:
ff:e3:80:39:ff:5b:8f:d3:15:31:f8:b5:85:83:ab:0a:36:64:
7f:9f:ef:ce:0d:38:1e:2c:f6:39:55:0b:9d:c9:24:df:15:a7:
75:4c:c9:5c:a4:21:38:ca:64:16:19:23:ee:fb:0d:eb:7d:1e:
48:a8:dc:07:77:2c:ea:e6:3d:64:2d:a6:64:90:4b:7f:70:83:
18:b1:97:8d:5d:c0:07:03:07:22:83:9f:7f:16:5b:63:db:13:
28:fd:85:b8:b4:70:28:a4:89:65:50:bc:91:4b:fb:2b:bc:1f:
5b:00:f3:14:6f:a1:92:c7:12:24:ed:8c:66:40:e7:01:09:8c:
20:24:30:4a:09:08:6a:ce:15:96:fd:a0:95:12:e2:d1:82:94:
1b:c3:69:79:88:ae:8e:c6:ed:d6:59:16:fb:92:ca:d7:c3:d3:
9e:c7:73:cb:dd:17:ff:41:75:07:8d:bb:54:07:dc:98:77:91:
88:7a:d3:c5:80:d7:1c:2f:a3:77:27:13:8a:1d:67:00:5e:d5:
3f:68:24:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:43 2026 by rpki-client