Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
File: luWtU7_HOEDEJXEcAQRTVxBX3CM.mft (raw, json)
Hash identifier: CglMrHbWsn59Z4xtNGyXC3g5nJhSwSALWQ8USGRPgCQ=
Subject key identifier: F2:4C:C4:52:E8:9A:A6:E7:CE:70:6D:43:BA:ED:D5:2C:2C:37:20:54
Authority key identifier: 96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23
Certificate issuer: /CN=96e5ad53bfc73840c425711c010453571057dc23
Certificate serial: 01A174DD926AF189E97AC2F8929B61D17D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
Manifest number: 09AA
Signing time: Sun 25 Oct 2026 21:00:40 +0000
Manifest this update: Sun 25 Oct 2026 21:00:40 +0000
Manifest next update: Mon 26 Oct 2026 21:00:40 +0000
Files and hashes: 1: Y8PMGb7a4QUK3mSZ5k3bsYLTUzk.roa (hash: lJBNAotuivDf99O5O2/2MLFjTpeWzRblk6WWXgUzJz4=)
2: luWtU7_HOEDEJXEcAQRTVxBX3CM.crl (hash: IzE/TW1/r8ws6gGjRyB/RciPHNKu/XE1Cifu6rfn8jU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:dd:92:6a:f1:89:e9:7a:c2:f8:92:9b:61:d1:7d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e5ad53bfc73840c425711c010453571057dc23
Validity
Not Before: Oct 25 21:00:40 2026 GMT
Not After : Oct 26 21:00:40 2026 GMT
Subject: CN=f24cc452e89aa6e7ce706d43baedd52c2c372054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:99:22:a7:e0:bf:40:5f:55:85:58:b2:ce:5e:
2b:97:3a:78:2a:14:75:49:74:31:14:c6:99:4e:8b:
65:88:3a:5e:61:ce:01:24:be:e3:66:f8:c6:88:f8:
22:6e:e6:33:af:b4:d5:dc:ee:b7:11:c7:61:fd:f4:
30:11:09:d8:66:7e:09:d6:4e:d6:11:fd:29:dd:3a:
9d:fb:61:8f:17:b0:58:a8:c7:79:05:bf:db:85:50:
14:56:a3:c7:7a:90:76:00:aa:5b:0b:2d:92:f3:7d:
d1:44:d0:c4:b7:d4:74:ea:33:2d:b1:db:54:9f:34:
e0:ed:18:31:07:e5:3e:86:04:59:04:87:77:09:d5:
ba:3f:8b:d6:3f:5a:ec:94:4a:06:a4:8e:13:fd:20:
33:72:73:d2:79:f6:c0:ec:10:8a:ee:ab:43:7e:66:
e5:20:aa:c5:df:39:70:b7:a3:37:f2:0e:e9:1f:b3:
e0:84:90:b9:36:b0:11:36:02:04:87:42:06:27:59:
ad:2c:ff:32:96:55:6e:78:13:eb:f9:01:53:1e:c9:
73:cf:9a:55:b8:fb:78:ea:14:37:51:4e:e2:73:e2:
ea:ca:b9:ad:9f:7e:4e:72:81:d3:d7:ee:9b:8b:9a:
3e:97:e9:8e:d1:2c:88:45:88:2c:e0:a6:e7:f7:97:
54:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4C:C4:52:E8:9A:A6:E7:CE:70:6D:43:BA:ED:D5:2C:2C:37:20:54
X509v3 Authority Key Identifier:
keyid:96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:60:a8:da:8d:de:95:4d:47:b4:f0:23:00:fe:e8:f4:a2:4d:
03:e5:54:61:39:56:42:78:7c:b4:f1:55:32:83:80:5f:c4:69:
21:de:5e:84:06:bd:da:54:c2:eb:dd:78:7a:4e:4b:5b:3f:70:
f3:a8:a1:25:47:17:3b:c0:dc:a1:5d:89:d4:29:c2:1f:fa:64:
43:f5:e1:6d:2b:9e:a2:df:43:32:3d:39:35:e3:04:dc:dd:50:
4d:8d:af:52:ea:32:5c:bf:71:7a:7e:17:9e:f7:db:83:46:71:
b7:88:9b:44:66:2c:d5:8a:1f:7e:ab:ce:96:dc:c0:66:7d:8e:
8e:f7:fe:53:71:f6:da:cb:df:3c:fe:f5:a7:4a:cf:f2:84:d6:
57:35:a9:6e:a3:c2:e1:33:80:8b:90:ba:de:f2:7d:aa:91:11:
33:83:72:45:f3:65:9c:83:f4:0e:79:0f:c4:7f:bc:ce:da:2a:
23:f0:d5:69:d4:c9:b3:f8:b1:45:2b:be:bf:82:87:f8:5f:fe:
ae:34:6e:4f:3f:b7:5e:19:37:03:d5:dc:ca:67:12:19:29:9d:
1c:83:d0:a6:c7:94:06:ca:c1:78:39:f1:ff:ca:6b:9f:2d:9c:
26:ee:48:76:36:e4:de:bc:15:85:cb:a9:ee:f3:47:3d:74:05:
bb:21:dc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:33:51 2026 by rpki-client