Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
File: lugqtki4s_iFdWnDmvlUSt_BfAE.mft (raw, json)
Hash identifier: ICq7b6MQqbwfDwGpqSXaNCbMQ1xgbSsxe5gsjXzObbM=
Subject key identifier: 69:88:84:A6:DA:20:9C:3C:79:86:22:46:AF:7A:53:0C:6B:9B:65:F3
Authority key identifier: 96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
Certificate issuer: /CN=96e82ab648b8b3f8857569c39af9544adfc17c01
Certificate serial: 019D39AED4A926B8E300CA54EFBDBCA29950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
Manifest number: 0F4C
Signing time: Sun 29 Mar 2026 13:00:51 +0000
Manifest this update: Sun 29 Mar 2026 13:00:51 +0000
Manifest next update: Mon 30 Mar 2026 13:00:51 +0000
Files and hashes: 1: W2ifOrhN8XKMgVXk_yqwQmU4tZA.roa (hash: RoZTZalHouz/5mT7p1eNKVRbeaGCPt3XY2qpyiJFuNE=)
2: lI4f8rZF79xIoZ-qqIUt5k5Mwhs.roa (hash: 2bfMHhj3u9ZNahoNS0bMF6oNHC5FK6pJFUzUS206Uk0=)
3: lugqtki4s_iFdWnDmvlUSt_BfAE.crl (hash: +6a7VcH00aoVcoTUD3B7dDCHuSnvSYdGseX+5sBBBAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:d4:a9:26:b8:e3:00:ca:54:ef:bd:bc:a2:99:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e82ab648b8b3f8857569c39af9544adfc17c01
Validity
Not Before: Mar 29 13:00:51 2026 GMT
Not After : Mar 30 13:00:51 2026 GMT
Subject: CN=698884a6da209c3c79862246af7a530c6b9b65f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b1:ca:7d:58:f7:93:85:43:2f:85:d0:12:d3:
fa:a2:aa:c0:a9:87:e7:33:61:84:9c:61:ec:79:a5:
5f:d0:98:81:35:7b:99:ea:41:cc:c6:15:c6:74:25:
84:5c:67:79:6e:63:98:08:84:ae:08:10:77:fb:a0:
c2:0b:0c:21:e9:70:61:08:8c:8e:6f:6c:b4:ac:b2:
1b:6f:c8:51:d5:ac:11:bd:ca:1f:b4:07:0c:ab:b3:
82:c5:b5:a7:a2:27:f6:a1:2e:f0:ee:c2:c4:7c:18:
db:c6:1b:3b:31:b9:bf:49:39:7d:ce:06:72:5a:75:
a2:81:e4:22:6b:ac:1a:fe:2f:14:62:d9:22:b5:74:
b6:cc:aa:80:61:61:01:f4:2a:a3:70:5c:34:52:42:
df:9d:75:35:fc:73:d4:bb:af:19:21:f9:1c:af:0e:
c7:b8:ed:59:2e:c7:e2:7b:f3:87:a6:d3:c6:5d:94:
1c:35:51:36:a2:6b:6c:9c:29:1f:82:ae:c7:6a:6f:
1b:d2:68:5f:83:d9:35:5f:13:8b:68:ae:43:e4:ee:
fa:53:49:52:e8:67:33:b1:06:d0:34:60:01:ba:ec:
79:08:3d:29:24:67:28:22:3f:e9:bf:d8:28:da:c5:
52:76:4c:19:88:1e:99:e8:d3:10:ea:06:d2:78:d0:
1b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:88:84:A6:DA:20:9C:3C:79:86:22:46:AF:7A:53:0C:6B:9B:65:F3
X509v3 Authority Key Identifier:
keyid:96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b9:a9:73:f6:ca:ca:5c:d4:6d:0e:0e:a8:1a:8d:70:25:cb:
50:47:e0:8c:62:49:cb:d0:2e:d5:23:58:9c:02:bf:ee:1c:54:
2c:4f:34:33:db:1b:51:0f:cf:ca:ea:4c:36:a1:9e:6a:5d:61:
80:32:f8:f2:0a:69:cc:22:11:73:6a:3c:c2:ed:96:68:0d:cf:
6f:3b:32:b6:f0:89:73:8f:b9:3a:40:16:3e:ea:90:74:af:b7:
43:e3:0f:ac:fd:ab:55:08:3d:91:c8:de:a5:1f:89:ea:8c:1e:
57:c7:d9:a5:0e:61:bc:fb:00:7b:d3:d4:28:56:36:10:a7:bc:
28:b3:c9:f3:46:10:4f:c1:7c:87:4c:61:84:00:51:60:85:f3:
c9:06:46:04:17:16:40:63:31:b0:34:1a:ac:42:7b:25:2e:3a:
db:4e:3b:8f:a8:bf:bd:a7:fd:be:06:e9:cc:ec:8b:11:b4:42:
75:d5:94:f4:ce:c3:3e:e0:d2:7f:eb:40:0c:01:26:5e:39:50:
38:7e:c5:a1:d6:51:9a:69:88:38:92:ab:53:0f:28:32:de:0c:
21:39:35:89:da:52:48:ab:d3:fe:67:9e:2e:93:bb:cb:c4:e2:
fe:32:4b:32:76:6b:20:6c:e4:7e:a3:c4:36:f2:f6:b0:ae:fd:
8a:93:61:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:20:52 2026 by rpki-client