Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
File: LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json)
Hash identifier: 6POgISRRZMLYTQEuFMbC+XTtHaCDOIV9JH86fZQCJBo=
Subject key identifier: 0C:2E:94:AC:F0:7F:8E:31:DC:9A:72:4C:3A:A6:61:40:EE:F3:93:53
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial: 019EB9FDB9971BE71E3BB3ED15E3D84A72F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
Manifest number: 1958
Signing time: Fri 12 Jun 2026 04:01:13 +0000
Manifest this update: Fri 12 Jun 2026 04:01:13 +0000
Manifest next update: Sat 13 Jun 2026 04:01:13 +0000
Files and hashes: 1: 08zs1vez5T3OxmoffP4v4xK9YRM.roa (hash: uy8J25dlMEzvaPv80sYDbmqCg6sB5jPeyau+AuQ0+dM=)
2: 1k_gsLYQzZ2auoJeJkWUzu7Ie1o.roa (hash: QopUlfrOmMWf3HhqNYkuS7EjOhnM84v1jbZHx5PFkcs=)
3: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: eqYlqRiyCtGEhiRit3kTg06uYCR1tI3MRyUQcDVkcfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fd:b9:97:1b:e7:1e:3b:b3:ed:15:e3:d8:4a:72:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Validity
Not Before: Jun 12 04:01:13 2026 GMT
Not After : Jun 13 04:01:13 2026 GMT
Subject: CN=0c2e94acf07f8e31dc9a724c3aa66140eef39353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b6:6e:3d:da:e7:e0:61:04:1c:6b:a9:88:ca:
23:98:86:dd:7d:85:59:89:04:f5:d4:fc:3a:14:70:
ea:37:88:2e:e5:f5:16:21:a8:0e:39:7d:97:b4:82:
2b:d4:cd:c4:8e:c9:93:bf:e3:9f:03:ec:d5:86:14:
0d:75:7e:4e:80:e2:51:75:bb:e0:35:f6:5b:49:ca:
5a:7a:bc:b7:8b:47:ee:8a:40:9c:40:c1:b6:29:ce:
86:84:ed:06:b8:df:91:fc:96:8a:05:b0:12:a0:d4:
8f:c0:e7:fd:7e:fb:87:c3:c6:ff:6f:27:8a:7b:86:
c5:5b:b7:79:25:07:92:d6:e2:af:66:80:b6:91:ee:
25:6f:8e:0b:96:b7:d3:8e:a8:56:29:8c:45:cd:44:
2a:ea:f3:d5:4f:c0:a0:c7:11:25:4d:f3:00:4e:3d:
f3:d9:60:80:93:a3:c6:93:9b:ac:13:3e:40:99:81:
2c:ce:45:ab:ec:03:af:a4:30:31:53:5b:b4:f1:45:
e4:6b:f7:50:ed:bb:dc:ea:0a:3e:32:33:04:54:9c:
f8:7c:27:f5:f8:e6:b3:6b:86:fd:51:00:14:d6:f3:
b7:ec:b5:e5:8a:c3:d6:a5:89:34:6d:8b:f7:bf:96:
5d:a4:68:c4:52:06:6d:9d:2b:e9:b6:3e:36:0b:87:
28:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2E:94:AC:F0:7F:8E:31:DC:9A:72:4C:3A:A6:61:40:EE:F3:93:53
X509v3 Authority Key Identifier:
keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c0:9c:d8:dc:b0:2c:73:89:1f:fe:21:af:6e:8a:12:71:f9:
5c:a3:7d:78:78:a9:58:3c:c2:c2:eb:f1:a3:83:3c:99:c8:4a:
7c:fc:8a:ab:47:44:32:0a:24:da:ef:07:20:78:e7:f4:87:55:
c7:fc:1d:3a:76:13:02:fc:50:36:3e:39:e0:90:30:a4:a0:50:
c1:00:99:82:a0:c0:f9:50:0f:c5:8c:80:fa:d7:50:86:88:10:
08:20:57:ca:f3:36:f7:2c:4c:a8:73:10:43:29:96:6c:8b:e0:
10:aa:d5:39:1a:a7:5c:f5:a4:25:01:10:7d:84:69:d7:b6:44:
8e:ae:4d:7c:dc:7a:c4:cd:ac:e7:50:ff:5b:69:04:a4:d7:46:
e7:f6:59:1e:7a:7f:bc:b4:06:d6:1f:d4:b6:c7:ed:ca:17:83:
53:da:fc:a5:6e:b6:28:24:4f:71:09:e2:3b:f0:c9:74:03:0c:
c6:34:c9:a4:0a:1e:c9:9d:c0:d9:b3:0a:3a:b4:dd:73:08:90:
19:86:ee:3d:d2:72:cc:03:f1:b5:d4:76:82:2b:73:87:86:fa:
1f:f9:28:e1:8d:54:ff:fb:f0:d0:c8:c8:53:ef:30:f9:c0:63:
69:38:3d:40:55:ba:dd:cf:6e:e0:01:77:35:f3:8d:d2:a4:06:
b1:8b:d2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:12:06 2026 by rpki-client