Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.mft
File: luqmiIUr9hQfUxdoBoMLTRbHZq8.mft (raw, json)
Hash identifier: qPgrRewArF5C4jN6sBTPjeJThkD+gIrEi+Z+SAsDbf4=
Subject key identifier: 60:88:3B:F7:E5:36:64:27:F4:BA:32:3A:65:78:D9:4D:F9:CC:D5:F2
Authority key identifier: 96:EA:A6:88:85:2B:F6:14:1F:53:17:68:06:83:0B:4D:16:C7:66:AF
Certificate issuer: /CN=96eaa688852bf6141f53176806830b4d16c766af
Certificate serial: 019D389BD302ACBD2EEE12ED190840CC3DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqmiIUr9hQfUxdoBoMLTRbHZq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.mft
Manifest number: 0244
Signing time: Sun 29 Mar 2026 08:00:29 +0000
Manifest this update: Sun 29 Mar 2026 08:00:29 +0000
Manifest next update: Mon 30 Mar 2026 08:00:29 +0000
Files and hashes: 1: luqmiIUr9hQfUxdoBoMLTRbHZq8.crl (hash: ZhOYxST0W+6UxEryWty+ivWoImD7Pj4nOtQVfwikx4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/luqmiIUr9hQfUxdoBoMLTRbHZq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:d3:02:ac:bd:2e:ee:12:ed:19:08:40:cc:3d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eaa688852bf6141f53176806830b4d16c766af
Validity
Not Before: Mar 29 08:00:29 2026 GMT
Not After : Mar 30 08:00:29 2026 GMT
Subject: CN=60883bf7e5366427f4ba323a6578d94df9ccd5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e7:fa:18:a2:62:d1:e9:71:0a:33:88:b4:ac:
53:c6:d9:34:3b:c4:d4:25:56:8d:6d:ba:c8:e5:b4:
bb:3e:ea:7a:3a:1d:97:ae:d8:b8:c8:8f:56:f0:01:
38:8d:93:16:67:91:a2:98:96:71:cc:26:a4:59:97:
e4:77:37:5a:a3:8a:88:69:35:b4:47:fe:b2:a1:47:
7d:96:e2:b6:97:f5:d1:df:1a:d0:b6:85:bc:65:50:
33:8c:40:4c:e0:81:5b:7d:2d:6b:bf:d7:5d:a4:67:
9d:32:41:be:42:eb:a5:6b:87:b5:dd:81:7d:62:49:
c2:d6:08:ae:f3:95:a6:d2:d9:74:ac:87:8e:55:bb:
80:08:f5:1c:90:41:64:10:15:1f:d2:e6:5b:72:43:
59:3e:3e:07:a2:93:89:67:79:48:72:92:dc:9b:8c:
3b:57:a3:e1:7f:15:a0:94:78:47:ec:9d:36:fe:53:
1a:3e:14:dc:b0:c2:31:17:53:9d:51:2e:8e:d2:7f:
f1:96:32:7f:64:5c:e3:ad:09:8c:bd:17:22:cf:74:
ac:1a:b8:b2:58:38:9f:92:f2:1b:5a:75:9c:eb:c1:
cc:5e:2b:af:61:49:45:43:40:aa:85:88:ab:57:6b:
5e:46:3d:cb:52:e7:c7:16:a5:cc:16:54:66:8b:c4:
7c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:88:3B:F7:E5:36:64:27:F4:BA:32:3A:65:78:D9:4D:F9:CC:D5:F2
X509v3 Authority Key Identifier:
keyid:96:EA:A6:88:85:2B:F6:14:1F:53:17:68:06:83:0B:4D:16:C7:66:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqmiIUr9hQfUxdoBoMLTRbHZq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7c:cb:05:f0:31:50:48:11:92:cc:c6:cf:a7:2a:32:0a:a7:
9b:a9:65:7d:51:f7:70:ed:ed:0a:e0:cd:d2:a5:2c:2e:e7:72:
36:3a:f4:60:e3:17:e1:20:3e:a2:ef:3f:de:97:38:4d:12:8a:
12:50:20:09:ab:c9:cf:d4:d7:51:00:85:ba:72:9c:4a:6d:e9:
72:d8:ea:b5:e6:3d:e7:2d:c4:f3:5c:b8:0b:f4:3c:34:0f:31:
1f:da:d5:56:87:23:d1:1b:00:f4:23:76:4d:3a:0d:4b:11:57:
96:b4:f8:21:09:59:cb:b6:bd:ac:3f:c5:73:fa:dc:38:88:5b:
cd:41:65:a6:bd:a0:3a:f6:26:5e:63:68:29:14:15:74:ed:9d:
9e:9c:9f:98:0f:4d:9e:d3:ca:cd:ea:85:07:5b:8c:62:0e:dd:
99:f1:c1:37:f8:57:eb:8a:97:84:91:a2:f7:f4:14:a7:81:ad:
8a:df:0e:4a:c3:c3:7f:8a:85:2e:77:6c:78:4e:2e:f7:e9:9f:
30:a9:f4:c2:5e:f9:34:75:ac:c7:e7:88:c6:da:da:a6:e8:ed:
45:1c:0e:7e:1c:40:d3:93:fd:30:4c:82:0c:07:65:4a:4e:78:
a1:1b:40:bd:f5:d4:4f:96:5d:cb:16:2e:3a:e0:ee:f8:7d:a7:
5d:f2:5b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:19:24 2026 by rpki-client