Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
File: LUNomnY4_3N1kf87JRkYhiNJaVw.mft (raw, json)
Hash identifier: 2qMTx20wR0DYd0KZdHE7wRcD/q81Tz+gVHvfPaRm5Us=
Subject key identifier: A6:9F:15:40:72:86:F5:89:D2:C8:4C:46:D4:13:04:04:C6:3B:C5:AF
Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c
Certificate serial: 01A12209EA6F5E5F0AE93218373D41A9B562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
Manifest number: 1A95
Signing time: Fri 09 Oct 2026 19:00:37 +0000
Manifest this update: Fri 09 Oct 2026 19:00:37 +0000
Manifest next update: Sat 10 Oct 2026 19:00:37 +0000
Files and hashes: 1: CBnGBeMmfjtC-_l50Apa-rnM7ro.roa (hash: tqc1bO+aiQg/sSJgPer6VgbSztJvGQrMbPiX8vaUTEc=)
2: CK3zVq2E2JWnSie8IPkPmkTQAJw.roa (hash: 5fi0O3p9ePi7rf1DhBwT/4afhsP0X6JGcQ74b0c4lTQ=)
3: LUNomnY4_3N1kf87JRkYhiNJaVw.crl (hash: SX+bcazzURAde8nmeKSwGnjC/QdOJqT0M+UjhiGL/rU=)
4: Yg9iLr8mf8U8LuZpwB1CnTu08oQ.roa (hash: /1zfIH4wj/NT7nx+ZkonwZjt7ZKmu7eqePuUpLvYMyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:09:ea:6f:5e:5f:0a:e9:32:18:37:3d:41:a9:b5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d43689a7638ff737591ff3b251918862349695c
Validity
Not Before: Oct 9 19:00:37 2026 GMT
Not After : Oct 10 19:00:37 2026 GMT
Subject: CN=a69f15407286f589d2c84c46d4130404c63bc5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3a:fb:75:42:17:15:19:f1:c2:ae:4b:33:b6:
cf:bb:25:bd:3c:66:39:21:ec:aa:dc:67:42:9c:f3:
93:b7:47:2c:f0:22:ca:0c:06:e6:4c:6a:25:f7:b0:
f5:48:30:f1:37:35:12:09:1e:c0:83:78:b2:ed:5f:
9d:c9:b0:dc:1a:23:51:7c:64:91:f7:c0:2a:78:43:
1f:d0:94:13:52:11:9a:52:2e:81:ac:a1:1a:74:93:
b2:08:08:05:0f:0a:7e:ae:b7:bc:c8:20:73:50:53:
03:76:29:17:66:da:88:d5:36:b5:b2:c1:71:9f:d3:
8c:0f:f0:9f:24:30:a2:a1:26:19:d0:f9:79:38:ff:
11:01:50:02:2c:63:6e:4f:f6:73:84:f0:5d:2f:d1:
c9:8f:0c:70:57:84:ee:71:60:ca:bd:fd:be:49:20:
1d:0a:9b:a6:ef:ac:cd:b6:77:0a:04:85:f9:4a:5e:
51:ba:0b:3b:d5:e3:e6:97:df:d1:0b:a7:c1:7f:8f:
45:b6:92:ed:7f:5c:69:31:7c:61:dc:a5:4f:5d:39:
d5:5b:00:e5:a0:2a:69:3a:d8:b7:d4:e4:ca:f5:3d:
e2:ef:be:0a:74:8e:f2:3a:fc:bc:51:31:68:e3:d3:
ff:29:11:d9:06:9b:36:8f:d2:5e:a8:ca:35:ea:46:
e5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9F:15:40:72:86:F5:89:D2:C8:4C:46:D4:13:04:04:C6:3B:C5:AF
X509v3 Authority Key Identifier:
keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:4f:ab:be:ce:89:45:ab:2b:af:30:d7:0d:f8:d8:e6:36:38:
92:62:da:23:41:f5:72:3d:35:bb:5a:8e:e2:cb:92:5e:57:ee:
fe:e5:9a:33:36:07:6f:b8:45:8d:4c:7e:3a:da:88:14:8d:f8:
ba:92:59:b1:4a:93:f3:dc:b7:79:38:10:56:f3:bc:1f:47:df:
71:89:7a:01:63:23:1f:d9:d9:c4:78:d5:46:70:4f:d2:c3:56:
39:8d:8f:13:a9:44:e5:74:f1:a8:3d:9a:40:a2:d5:ec:85:58:
41:c8:a1:66:e1:24:ba:e2:a0:23:52:27:f6:17:ce:7e:bc:27:
54:24:c7:20:3e:6a:42:7f:50:da:16:b0:9e:20:1c:98:77:76:
73:0a:57:86:9e:56:9c:4a:4b:63:9e:04:af:58:12:64:8a:6b:
2b:c3:c7:af:27:16:59:1f:5d:b6:41:04:4f:b4:11:67:23:e7:
dc:c1:40:ad:7c:92:3f:08:38:5d:d1:24:e3:5d:4a:fd:d6:49:
80:da:da:2a:4a:a2:d9:7c:1a:82:fe:4b:65:07:94:6d:aa:28:
35:e4:28:f2:ae:51:13:c5:a3:79:2c:8b:82:1c:99:f0:fc:44:
63:7e:65:19:a9:90:f0:be:d5:43:69:fc:9f:bf:9d:ed:ab:45:
7c:12:11:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:38:37 2026 by rpki-client