Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
File: luWtU7_HOEDEJXEcAQRTVxBX3CM.mft (raw, json)
Hash identifier: EeioqE9+Qr2gc9QA121vjvhDy0aGW6cQrQ1o944HCjw=
Subject key identifier: 59:DE:78:44:CB:D5:2E:8D:31:18:30:6B:2E:BC:7A:1D:0F:0C:14:D8
Authority key identifier: 96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23
Certificate issuer: /CN=96e5ad53bfc73840c425711c010453571057dc23
Certificate serial: 019D397823A33755E6630B140FFC95BCAC99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
Manifest number: 0779
Signing time: Sun 29 Mar 2026 12:01:07 +0000
Manifest this update: Sun 29 Mar 2026 12:01:07 +0000
Manifest next update: Mon 30 Mar 2026 12:01:07 +0000
Files and hashes: 1: Y8PMGb7a4QUK3mSZ5k3bsYLTUzk.roa (hash: lJBNAotuivDf99O5O2/2MLFjTpeWzRblk6WWXgUzJz4=)
2: luWtU7_HOEDEJXEcAQRTVxBX3CM.crl (hash: KeYyW+T6fAeEfR0VH8hChKHQ8EaTUMBJJtYq3dAYVv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:23:a3:37:55:e6:63:0b:14:0f:fc:95:bc:ac:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e5ad53bfc73840c425711c010453571057dc23
Validity
Not Before: Mar 29 12:01:07 2026 GMT
Not After : Mar 30 12:01:07 2026 GMT
Subject: CN=59de7844cbd52e8d3118306b2ebc7a1d0f0c14d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:06:2f:e5:98:59:49:1c:02:5c:84:dd:55:
ed:c3:97:0e:a2:b8:e1:ab:39:ee:e1:14:39:9f:98:
81:a1:83:31:47:c9:93:fa:a3:91:0b:2a:12:d8:62:
79:65:ee:22:13:85:af:1d:84:76:d0:b1:85:69:84:
7e:c2:8e:f3:17:a1:d9:0b:db:92:68:69:6c:5f:e5:
5d:e8:d4:85:dc:b3:f9:9a:e7:0e:2e:69:7e:97:4b:
d6:ab:aa:c6:5c:32:f1:8d:4a:fa:5c:b1:48:2c:d0:
0c:2e:39:c9:c7:54:4a:71:cc:f3:2b:c9:06:e7:79:
fc:96:5a:45:e3:ae:2a:44:5c:59:13:ab:77:a0:da:
62:5d:77:11:6d:ab:ed:f3:24:2b:af:18:51:1a:2e:
5a:52:b1:89:a6:3c:a7:d3:e2:0e:d3:74:5c:82:fb:
d3:36:e1:7e:d7:fd:b2:48:f9:19:08:75:be:4a:2e:
64:5f:e3:d0:fb:dc:b5:57:41:7a:79:c3:e5:1b:8b:
39:79:0b:d5:eb:ce:c3:36:77:f8:c2:33:98:a8:f8:
a2:f3:82:7f:66:30:05:fb:ba:92:0f:99:a4:0f:ed:
83:d5:04:ce:d6:18:64:57:6d:79:ab:49:10:94:30:
a6:a8:6a:0c:af:19:4b:52:ed:4a:42:b2:46:61:86:
be:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DE:78:44:CB:D5:2E:8D:31:18:30:6B:2E:BC:7A:1D:0F:0C:14:D8
X509v3 Authority Key Identifier:
keyid:96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c9:27:7d:ba:c5:8e:ea:b2:0b:dc:a0:ea:05:e3:56:9c:ac:
de:27:eb:4f:c2:74:d8:e6:c7:66:6e:5f:b3:07:51:22:e4:68:
d2:c0:19:84:76:27:de:3b:fd:c3:d0:bb:fe:4e:9c:cd:af:2f:
f3:b2:01:27:2a:d3:84:e1:e2:4a:89:3c:cb:31:04:b7:28:41:
26:79:14:ff:66:e4:f0:de:06:79:5b:8f:d4:c5:e8:d3:62:85:
2d:99:b8:9c:a8:f5:97:8a:28:ce:e9:bf:54:18:e4:69:71:2f:
ca:a6:54:3e:7e:b7:8c:4e:d4:2b:48:8a:4d:1d:85:05:e9:87:
0e:c5:af:c0:bb:16:b9:c6:03:5c:6b:46:5a:e5:0b:36:60:3c:
ca:bf:f2:0e:43:3a:18:04:61:59:22:8f:c1:bc:61:d6:80:61:
1d:e5:ef:3e:72:6a:63:1a:20:1c:73:a3:31:29:63:96:d9:d5:
78:0a:aa:e9:a6:01:6a:51:52:29:56:ac:1f:0a:f4:22:ae:06:
e9:04:ca:d9:9f:a6:63:4a:dc:29:e8:68:3f:6f:fb:8a:34:f5:
7d:46:38:48:54:e2:8d:29:33:f6:2c:c5:9a:2f:82:f8:26:f2:
50:db:d7:25:09:a5:15:9c:3a:a7:79:27:f2:fe:dd:63:4a:c7:
85:bd:ba:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:08 2026 by rpki-client