Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
File: LUNomnY4_3N1kf87JRkYhiNJaVw.mft (raw, json)
Hash identifier: PcAuGEPgBgPi1gjD/P/HpIyVylrhhjgC5HQ95vmb38E=
Subject key identifier: 16:D9:95:82:48:49:AF:FE:37:A6:B4:FE:69:29:93:A0:46:E7:01:3D
Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c
Certificate serial: 01A0213169180E3D3EDCE85C13B62510C2FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
Manifest number: 1A10
Signing time: Thu 20 Aug 2026 22:01:21 +0000
Manifest this update: Thu 20 Aug 2026 22:01:21 +0000
Manifest next update: Fri 21 Aug 2026 22:01:21 +0000
Files and hashes: 1: CBnGBeMmfjtC-_l50Apa-rnM7ro.roa (hash: tqc1bO+aiQg/sSJgPer6VgbSztJvGQrMbPiX8vaUTEc=)
2: CK3zVq2E2JWnSie8IPkPmkTQAJw.roa (hash: 5fi0O3p9ePi7rf1DhBwT/4afhsP0X6JGcQ74b0c4lTQ=)
3: LUNomnY4_3N1kf87JRkYhiNJaVw.crl (hash: hyYHEMf170OIB83ArcFJYzFCOxHHCIQ4eHeHBk8t6BE=)
4: Yg9iLr8mf8U8LuZpwB1CnTu08oQ.roa (hash: /1zfIH4wj/NT7nx+ZkonwZjt7ZKmu7eqePuUpLvYMyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:21:31:69:18:0e:3d:3e:dc:e8:5c:13:b6:25:10:c2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d43689a7638ff737591ff3b251918862349695c
Validity
Not Before: Aug 20 22:01:21 2026 GMT
Not After : Aug 21 22:01:21 2026 GMT
Subject: CN=16d995824849affe37a6b4fe692993a046e7013d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fb:c8:3d:72:75:87:9f:74:34:97:de:b9:5a:
53:0b:57:b0:ad:20:d6:7c:5f:fd:44:50:8c:31:ba:
a0:07:76:54:82:72:ce:0a:44:4e:23:4f:18:01:1b:
9a:05:aa:43:6f:af:b5:7f:41:51:bd:f0:64:ee:49:
1d:10:cf:ed:78:95:f4:04:65:30:f0:14:53:aa:dd:
86:75:99:3e:cf:d5:50:be:5e:6f:53:aa:76:80:1b:
b5:36:28:d2:d6:ba:43:f6:f1:aa:f1:1f:d9:19:e4:
3b:e3:99:88:a0:b4:7d:8d:7f:2f:5b:a5:21:81:f9:
82:fb:fa:ab:7a:3b:1c:c6:da:f8:05:7c:73:13:0e:
cd:28:c9:9b:75:15:87:54:82:27:e8:1b:9d:8e:59:
b1:75:4b:18:79:2b:7b:c5:28:e0:5a:ec:95:c8:b5:
08:ea:29:0e:02:2a:53:92:d8:9c:a0:96:69:b9:02:
83:78:57:39:9c:3d:3e:eb:c0:06:0c:97:b3:26:b3:
03:af:2f:5c:b7:4f:ef:39:51:d7:c9:61:10:88:13:
91:4a:3b:f8:fd:c4:a7:0f:56:fb:ce:ca:75:d6:4d:
63:86:b4:6c:40:6e:22:92:15:0f:aa:8a:75:59:9b:
c9:5d:89:f2:80:d4:74:dd:fc:09:b4:fe:a5:0c:a0:
2c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D9:95:82:48:49:AF:FE:37:A6:B4:FE:69:29:93:A0:46:E7:01:3D
X509v3 Authority Key Identifier:
keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6f:04:b0:f4:ea:b8:37:79:5a:cb:fb:95:56:68:4a:4f:31:
a1:45:8b:2d:af:f9:20:e1:ee:32:6a:5a:0d:a9:3b:61:95:1d:
46:4f:46:38:b0:5d:ec:a1:3a:2b:3d:0e:ba:39:12:9a:26:a0:
e6:91:ce:73:4a:c6:12:80:34:51:bd:04:76:a1:bb:68:3f:ce:
35:3d:92:ba:01:fe:9b:87:64:53:45:16:90:b6:6e:81:9c:52:
73:e5:45:6d:d5:97:54:ed:bf:ae:c5:ff:80:f7:a6:5d:e6:ba:
9c:53:50:6e:14:09:69:e3:b4:e0:77:3a:83:f9:e0:ef:a8:50:
a3:30:2a:49:2e:7d:28:3e:93:dc:68:ea:ee:68:9a:03:90:90:
fe:4b:a7:c7:31:c2:95:a2:8a:67:5a:7b:02:0c:a4:3b:9c:93:
47:cb:53:38:94:d2:76:79:ae:9e:10:77:38:6c:9d:5e:08:af:
a2:e7:28:90:72:33:02:7a:67:41:00:49:49:04:72:85:32:88:
95:8f:b5:4d:4c:cd:71:ee:21:64:33:f2:51:07:e8:0b:8c:fb:
8c:b9:53:b2:07:d0:12:c0:01:75:75:af:70:dd:da:15:ee:5c:
28:6e:21:07:af:2c:e4:b8:a7:d8:6c:51:e1:ed:79:20:fd:da:
fa:cd:f3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:43:33 2026 by rpki-client