Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
File: LUNomnY4_3N1kf87JRkYhiNJaVw.mft (raw, json)
Hash identifier: T+iiKl6q5I6Gxzj8zQg6P+PWSVyu5CJ4uRMIjDW1AfQ=
Subject key identifier: 9B:48:A9:EF:4A:7B:47:63:99:58:43:52:EA:AD:D3:4A:67:3C:C1:37
Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c
Certificate serial: 019D37C00318DA4CBDA7B2F1D4346A91C9AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 04:00:23 +0000
Manifest this update: Sun 29 Mar 2026 04:00:23 +0000
Manifest next update: Mon 30 Mar 2026 04:00:23 +0000
Files and hashes: 1: CBnGBeMmfjtC-_l50Apa-rnM7ro.roa (hash: tqc1bO+aiQg/sSJgPer6VgbSztJvGQrMbPiX8vaUTEc=)
2: CK3zVq2E2JWnSie8IPkPmkTQAJw.roa (hash: 5fi0O3p9ePi7rf1DhBwT/4afhsP0X6JGcQ74b0c4lTQ=)
3: LUNomnY4_3N1kf87JRkYhiNJaVw.crl (hash: COoV2kTxcnSxoylZnGGe8lex+4F9sqStVp3ESSuSSCA=)
4: Yg9iLr8mf8U8LuZpwB1CnTu08oQ.roa (hash: /1zfIH4wj/NT7nx+ZkonwZjt7ZKmu7eqePuUpLvYMyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:03:18:da:4c:bd:a7:b2:f1:d4:34:6a:91:c9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d43689a7638ff737591ff3b251918862349695c
Validity
Not Before: Mar 29 04:00:23 2026 GMT
Not After : Mar 30 04:00:23 2026 GMT
Subject: CN=9b48a9ef4a7b476399584352eaadd34a673cc137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:de:91:a8:8a:e9:8b:14:cf:e2:a6:68:20:26:
bb:4d:c6:61:3a:92:47:26:16:c2:9f:77:3d:8e:76:
9e:da:db:3d:e5:6d:dd:5a:1e:b1:02:fc:01:3b:c2:
43:08:86:28:2e:bf:0b:da:36:6b:1d:11:78:2e:bd:
65:0b:23:95:9c:ef:d2:61:45:99:67:94:c0:0d:34:
7e:1b:36:32:dc:80:a7:2f:54:a1:3a:cc:15:33:f6:
2a:25:53:33:d0:2a:9c:37:f1:c4:0e:2d:3a:1c:52:
3b:d2:0d:b8:9c:fa:6e:b6:c9:44:9f:82:2e:d2:2e:
21:84:53:3a:89:7d:7a:0e:15:4f:34:6c:f0:4d:84:
57:86:24:1f:95:eb:a9:80:20:b0:42:c1:c7:62:3c:
ba:be:09:63:d5:48:d2:ec:0e:e1:36:8e:10:b1:f3:
ab:6d:0e:f0:90:63:6e:10:9c:cf:27:1d:09:78:c3:
b7:b2:1e:bd:61:01:c6:aa:87:99:cc:1e:fd:f7:de:
68:b1:05:54:88:55:0e:41:df:2f:ca:77:6f:17:c5:
6b:b4:4b:48:f0:bb:4a:6b:f4:d7:f4:c5:f7:26:9e:
9e:95:a6:61:72:21:f8:04:e9:63:e2:57:a7:9f:3b:
7f:98:22:39:73:5f:5d:0c:98:b8:78:b2:36:09:32:
c3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:48:A9:EF:4A:7B:47:63:99:58:43:52:EA:AD:D3:4A:67:3C:C1:37
X509v3 Authority Key Identifier:
keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a2:66:43:c8:cc:3a:c1:02:b1:03:c9:57:0a:2a:81:18:4d:
41:90:90:a9:7c:cf:2a:7d:cc:99:44:45:36:1b:24:95:e7:4d:
6c:bf:8f:92:da:d2:d5:1c:ce:bc:6d:96:5a:47:33:28:03:a6:
72:c8:29:ea:ce:02:40:81:0b:38:fc:71:18:14:cd:49:69:16:
7a:87:c0:7a:4d:8f:8e:60:27:34:21:fa:a3:98:39:2c:bf:2e:
52:92:5c:ac:6c:b3:04:73:df:42:d1:52:e5:88:c1:0b:ff:b4:
fb:5a:1a:12:11:7a:a9:5d:c2:07:71:b3:2d:46:11:fb:58:22:
c8:3c:c5:38:ea:7c:c3:7e:da:d8:cd:66:c6:28:b8:be:33:76:
c5:c4:0b:a7:df:1e:70:7b:7b:af:be:57:e7:09:7d:d4:fa:c7:
3d:49:f5:29:0e:39:05:b3:b0:dc:f2:70:be:43:6a:ad:82:54:
a5:ff:06:25:bb:fc:58:38:83:c0:3b:5f:28:d6:cf:85:3b:4f:
10:a4:b8:ef:b1:c3:53:ff:ad:3b:a0:7a:30:ba:7d:08:0a:c8:
fd:1a:16:8c:9c:84:4b:b7:62:b7:53:0e:ae:f2:b2:32:25:f7:
e4:19:36:e6:e5:ee:9f:b6:2c:12:2a:da:e4:39:7c:e0:77:08:
2b:82:7e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:07 2026 by rpki-client