
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
File: luWtU7_HOEDEJXEcAQRTVxBX3CM.mft (raw, json)
Hash identifier: Utc3Kxr2+2FtftJnTRsfr/98x8vQwPtpiK7b2DvNGU4=
Subject key identifier: 7D:12:06:6E:21:9D:57:64:02:1A:15:B7:A1:0B:BD:5D:FF:F3:8C:B1
Authority key identifier: 96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23
Certificate issuer: /CN=96e5ad53bfc73840c425711c010453571057dc23
Certificate serial: 01A176CBF5411A2DE413C04EB5B1B6F24DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
Manifest number: 09AB
Signing time: Mon 26 Oct 2026 06:00:40 +0000
Manifest this update: Mon 26 Oct 2026 06:00:40 +0000
Manifest next update: Tue 27 Oct 2026 06:00:40 +0000
Files and hashes: 1: Y8PMGb7a4QUK3mSZ5k3bsYLTUzk.roa (hash: lJBNAotuivDf99O5O2/2MLFjTpeWzRblk6WWXgUzJz4=)
2: luWtU7_HOEDEJXEcAQRTVxBX3CM.crl (hash: uHX3bzm6U0fB5UJ+IWsYz/M1ICBbt1EmgPZPApupFyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:cb:f5:41:1a:2d:e4:13:c0:4e:b5:b1:b6:f2:4d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e5ad53bfc73840c425711c010453571057dc23
Validity
Not Before: Oct 26 06:00:40 2026 GMT
Not After : Oct 27 06:00:40 2026 GMT
Subject: CN=7d12066e219d5764021a15b7a10bbd5dfff38cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:53:a4:f2:8f:96:03:ec:c4:d5:3f:9f:16:5b:
d7:eb:79:e8:38:bb:47:28:e5:1e:67:58:65:59:3d:
80:a9:c4:a2:7f:b9:0c:79:dc:ea:0b:6e:0a:e1:40:
4a:d1:43:3c:27:f8:7b:d3:22:de:71:7f:cf:93:8a:
35:45:ec:5d:f3:87:e4:36:16:68:90:d2:d6:6d:6f:
66:0c:d3:b0:61:08:9c:63:04:b6:57:64:b3:a2:a5:
c2:4d:fd:99:d9:2c:18:73:02:47:7d:a5:10:a4:45:
33:24:88:be:0b:82:c1:c6:ea:6f:6c:7c:f3:9e:cd:
66:d0:62:c9:45:81:05:fd:a2:e7:d4:0f:46:8e:db:
7b:0b:ad:df:e1:54:0c:06:0c:2b:31:77:e9:32:33:
46:32:29:d3:30:f7:10:f7:7c:2e:f6:4e:76:ff:4b:
3a:4f:3e:55:4c:a7:ea:ab:30:f9:2b:1b:d4:a1:99:
c2:77:48:2e:c6:d0:53:b8:36:f3:c0:46:fd:83:81:
6e:af:cf:f4:9f:02:73:bd:f2:70:7a:e1:b0:fd:d4:
63:45:c4:14:45:66:59:e1:83:2d:fe:52:21:8a:ea:
14:58:22:9e:79:e2:b0:de:fb:01:92:13:bc:4a:d3:
8b:12:3e:7d:52:99:b8:1d:09:06:6f:9d:67:70:41:
a8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:12:06:6E:21:9D:57:64:02:1A:15:B7:A1:0B:BD:5D:FF:F3:8C:B1
X509v3 Authority Key Identifier:
keyid:96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3a:8c:ac:1a:c1:d0:c7:ea:a7:7f:fa:60:67:ca:1b:70:67:
06:5c:f3:66:23:e2:32:a6:38:a9:d4:f5:dc:a6:bb:be:ee:3f:
df:7c:28:63:40:c1:aa:46:fe:a2:62:46:bd:9c:60:54:d6:1c:
b7:67:e5:84:2c:c8:ef:82:19:e4:21:9b:45:81:18:91:e4:f6:
e5:3d:fb:07:e1:df:f5:7d:55:d5:f3:15:b5:d4:bf:c2:09:81:
25:ae:c4:a5:fb:35:5b:df:79:4a:a4:70:4b:59:59:c8:35:37:
5c:49:bf:d2:9c:50:cd:13:92:0e:15:28:b1:de:f2:77:a3:9c:
3c:ea:a4:58:ee:24:14:79:74:2c:1d:49:db:74:ac:82:e9:33:
a9:41:d5:b3:f5:95:0d:9b:46:27:41:14:68:7f:94:fc:cd:d8:
41:2d:b1:74:35:19:39:da:6e:ab:a6:12:60:f3:2e:a3:bb:33:
a2:b5:a0:d8:0a:6f:bb:9f:14:cd:76:31:8c:3f:86:c9:fc:5b:
2c:ac:34:a6:6f:79:a3:e0:f4:97:f5:ca:64:e5:be:67:8a:f3:
98:e2:e6:87:79:e6:a2:cc:33:4a:85:7e:a8:cf:c9:55:94:39:
d6:89:e1:c3:16:43:2d:82:2e:77:af:e2:cb:9d:0a:16:cb:60:
84:fc:9b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:11:40 2026 by rpki-client