Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
File: LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json)
Hash identifier: pq5JUhkdZ+XumWnRHkKHZaidFdvL1AiXprM3KmVMJ8o=
Subject key identifier: 13:39:B5:08:80:54:80:A1:4C:06:6F:1B:61:9B:F0:91:91:36:A8:8C
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial: 019FA1BB92147515A7220D193D82A4E58DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 04:00:52 +0000
Manifest this update: Mon 27 Jul 2026 04:00:52 +0000
Manifest next update: Tue 28 Jul 2026 04:00:52 +0000
Files and hashes: 1: 08zs1vez5T3OxmoffP4v4xK9YRM.roa (hash: uy8J25dlMEzvaPv80sYDbmqCg6sB5jPeyau+AuQ0+dM=)
2: 1k_gsLYQzZ2auoJeJkWUzu7Ie1o.roa (hash: QopUlfrOmMWf3HhqNYkuS7EjOhnM84v1jbZHx5PFkcs=)
3: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: Me9RSriCD4kKfHrtciDTD3Lk2SMPt3c92PastIRvdtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:92:14:75:15:a7:22:0d:19:3d:82:a4:e5:8d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Validity
Not Before: Jul 27 04:00:52 2026 GMT
Not After : Jul 28 04:00:52 2026 GMT
Subject: CN=1339b508805480a14c066f1b619bf0919136a88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:cb:cd:4a:86:64:5e:db:29:06:fc:49:ee:
1e:bb:59:13:1c:a8:7e:cf:88:cd:6c:8d:be:43:6a:
8a:b4:da:87:be:db:16:78:dd:a6:5b:53:be:b4:30:
1d:65:8a:76:15:45:5b:8e:9a:d5:9e:08:04:ae:9d:
65:0e:5e:4a:01:e7:a5:cb:46:9c:90:e2:1d:9d:b4:
d7:0e:f4:76:83:b7:50:9f:ee:bf:7f:7e:77:8b:da:
4b:5e:3f:1e:f3:e7:15:c4:8c:4e:78:aa:6d:44:71:
d5:76:de:5a:78:00:ad:ba:06:c7:b8:18:6a:0d:5d:
d0:2b:e4:0e:01:b8:c8:bc:d2:f3:5a:58:42:77:14:
74:36:87:e6:0f:9b:36:c2:09:29:4b:d0:8e:ba:73:
cd:0a:f1:92:7f:3b:96:6c:41:af:d4:a5:f9:2d:dd:
cc:1b:f0:3f:38:e4:2e:ed:df:29:b0:f2:93:b8:a8:
d6:82:f8:2a:d5:38:48:af:8a:63:39:91:89:05:1e:
cd:bb:5f:eb:d7:80:ef:36:d4:de:45:c5:59:69:dc:
ba:48:48:cc:cb:8f:1f:08:2c:8c:ee:51:6e:40:af:
3c:9e:50:8e:db:55:d7:12:a2:f4:da:9d:83:82:a7:
6a:4f:34:97:ef:ac:14:b7:ff:f0:c7:bc:e9:95:15:
d0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:39:B5:08:80:54:80:A1:4C:06:6F:1B:61:9B:F0:91:91:36:A8:8C
X509v3 Authority Key Identifier:
keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c2:4b:b2:66:ab:a1:b2:63:42:7b:85:b9:1e:61:bc:20:c6:
3f:07:89:01:3c:0c:84:8e:d5:cb:90:03:88:49:a2:7d:30:50:
94:fc:c1:26:a5:93:e2:66:9f:3b:0e:68:a2:22:f0:9f:d3:25:
89:af:6f:49:aa:07:73:f8:eb:a1:ee:3c:6c:d1:d5:c2:a9:b0:
46:73:27:f8:34:d8:6c:91:49:fd:81:7d:17:c9:f6:e9:b5:42:
93:5e:79:02:4a:b0:6e:86:49:e8:25:bd:1f:3f:46:5d:91:87:
a6:45:43:c9:cf:ed:50:eb:c2:a1:44:6d:52:8d:1a:ff:12:4f:
57:d3:5e:99:93:b1:03:9e:fe:fc:8d:c3:ad:76:4a:ae:20:36:
2b:53:02:c6:f0:c1:c1:35:74:0d:2a:48:71:e0:f2:d2:84:8b:
4a:09:7e:0d:ec:75:5b:11:f0:13:67:96:a7:9f:44:4f:b1:fe:
ac:c3:03:28:e5:b9:71:42:51:10:f6:36:48:78:86:e7:17:23:
f1:ff:97:a6:aa:d6:f5:1b:ea:b0:e8:89:3a:d2:06:60:2d:c6:
db:27:a2:a3:ee:ce:b8:c4:c9:5d:f3:dc:71:ae:a0:6e:c1:80:
f3:83:34:14:81:fc:ab:df:4e:1c:45:52:56:a4:78:92:aa:a8:
1f:13:68:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:54:20 2026 by rpki-client