Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
File: LUNomnY4_3N1kf87JRkYhiNJaVw.mft (raw, json)
Hash identifier: b3/zkZd5hKaM0KRYsAsrPAsB9ZDUSTq2Hz8nFZI4ZoM=
Subject key identifier: 0E:EB:24:92:61:97:82:14:2D:FC:C8:24:6A:CD:C6:CD:F2:53:DB:72
Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c
Certificate serial: 019F3973B30EEBBEDA67E99C3077733719EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
Manifest number: 1998
Signing time: Mon 06 Jul 2026 22:01:51 +0000
Manifest this update: Mon 06 Jul 2026 22:01:51 +0000
Manifest next update: Tue 07 Jul 2026 22:01:51 +0000
Files and hashes: 1: CBnGBeMmfjtC-_l50Apa-rnM7ro.roa (hash: tqc1bO+aiQg/sSJgPer6VgbSztJvGQrMbPiX8vaUTEc=)
2: CK3zVq2E2JWnSie8IPkPmkTQAJw.roa (hash: 5fi0O3p9ePi7rf1DhBwT/4afhsP0X6JGcQ74b0c4lTQ=)
3: LUNomnY4_3N1kf87JRkYhiNJaVw.crl (hash: OMwYlgrS+T4d2IA4bVego4W2Wq/Mdk0GSHj+eif1CiI=)
4: Yg9iLr8mf8U8LuZpwB1CnTu08oQ.roa (hash: /1zfIH4wj/NT7nx+ZkonwZjt7ZKmu7eqePuUpLvYMyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 20:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:39:73:b3:0e:eb:be:da:67:e9:9c:30:77:73:37:19:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d43689a7638ff737591ff3b251918862349695c
Validity
Not Before: Jul 6 22:01:51 2026 GMT
Not After : Jul 7 22:01:51 2026 GMT
Subject: CN=0eeb2492619782142dfcc8246acdc6cdf253db72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:53:4f:6b:45:b2:f8:3a:ff:f9:5e:8e:88:66:
f9:63:27:4f:de:fa:a3:26:28:9b:b8:cf:9c:42:85:
c0:e8:1a:56:3f:36:ab:67:ca:67:6e:b8:f7:7d:f3:
5e:de:13:1d:5a:b5:3e:de:96:3a:64:83:35:84:0b:
93:93:44:29:8d:dc:05:a8:75:47:5d:38:46:d5:96:
03:dc:d4:47:ec:31:32:be:dd:6d:b5:0d:ed:23:b4:
fe:cc:7d:8a:72:5c:b1:3f:4b:91:8a:da:02:02:81:
81:1e:d1:08:a3:7b:6d:78:80:30:fc:45:cb:92:36:
35:68:fc:e5:f1:a7:89:6b:6b:1b:28:7f:c9:08:c3:
5e:03:73:c5:88:33:57:5d:59:8d:32:99:d9:3f:0e:
9a:ef:26:4e:44:40:cf:be:00:aa:e2:24:eb:03:d5:
e2:6d:6e:9b:2b:60:45:ae:9e:72:d1:d4:25:6f:c0:
89:73:02:14:d4:ea:0c:bb:25:05:9b:d7:62:d9:ac:
9f:55:4b:ac:e8:48:9f:d1:79:07:4c:fc:e5:a0:a5:
bc:c6:d1:45:18:9b:d4:86:37:fb:44:0e:2a:3d:85:
27:9c:5f:ea:85:77:ae:1c:e0:60:75:d1:e3:a7:de:
b9:d9:c2:ec:97:7e:47:71:92:f3:f1:c7:c5:13:c4:
09:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EB:24:92:61:97:82:14:2D:FC:C8:24:6A:CD:C6:CD:F2:53:DB:72
X509v3 Authority Key Identifier:
keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ab:2e:5c:6a:9d:a6:7b:de:4c:30:31:61:e0:36:fc:ee:35:
94:a5:63:ab:ca:73:0c:ab:eb:a6:65:85:16:97:2f:a5:6a:5b:
6a:b1:52:63:57:0f:6b:a0:d4:af:fe:19:e7:c0:99:95:53:33:
e7:5b:61:aa:bf:7e:d1:a4:98:59:66:47:de:ec:c9:16:a9:ec:
df:86:bf:a8:9d:84:37:16:b4:70:32:26:e9:34:fe:92:96:56:
12:2f:20:c4:87:71:6e:b0:f8:c4:d9:b3:23:7e:e5:16:e2:c9:
42:ba:0a:dc:c8:7a:da:cc:5d:3c:1a:50:73:44:38:cc:0c:84:
19:17:dd:ac:d6:61:3b:44:38:3b:7f:0a:d3:a5:62:ea:05:20:
15:e6:6c:69:67:32:53:39:44:f0:7c:04:c4:a6:f7:59:c2:a4:
40:eb:3b:1d:55:bb:a6:84:09:c4:7f:a8:17:41:34:9d:a9:97:
a9:7b:a2:8a:2a:30:11:49:e8:f8:d4:34:68:f4:29:e8:1e:ea:
50:59:c6:ad:d1:31:d4:7a:01:a7:a6:e9:8b:f7:12:99:a9:9d:
e9:fc:32:eb:a8:83:70:13:ce:50:70:c7:2d:fa:62:f3:67:ad:
0f:d6:f7:44:33:7d:fc:7e:c8:c9:96:c0:9b:8a:89:0e:8a:17:
33:cb:63:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:19:41 2026 by rpki-client