Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
File: LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json)
Hash identifier: 9wtf5NUCKa3CFANFadIw6ajz/aeb20Q+U66D7zSo5PY=
Subject key identifier: 1E:12:8D:24:F7:F4:32:E8:8C:F9:21:88:C6:05:35:84:F8:99:D4:73
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial: 01A08D572CE877E0D6AEC1DBC22B43899431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 22:01:35 +0000
Manifest this update: Thu 10 Sep 2026 22:01:35 +0000
Manifest next update: Fri 11 Sep 2026 22:01:35 +0000
Files and hashes: 1: 08zs1vez5T3OxmoffP4v4xK9YRM.roa (hash: uy8J25dlMEzvaPv80sYDbmqCg6sB5jPeyau+AuQ0+dM=)
2: 1k_gsLYQzZ2auoJeJkWUzu7Ie1o.roa (hash: QopUlfrOmMWf3HhqNYkuS7EjOhnM84v1jbZHx5PFkcs=)
3: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: BCQ+Y//12zx2X43NL1LpO+pjmogtr9yyhHd3+YrgUbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:57:2c:e8:77:e0:d6:ae:c1:db:c2:2b:43:89:94:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Validity
Not Before: Sep 10 22:01:35 2026 GMT
Not After : Sep 11 22:01:35 2026 GMT
Subject: CN=1e128d24f7f432e88cf92188c6053584f899d473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:af:78:d5:1e:9c:dc:b8:b6:b3:de:eb:ec:57:
2c:14:3f:a2:27:dc:a5:ce:33:ad:25:91:9a:4c:e9:
a1:56:86:03:2e:45:08:b7:d2:75:87:fb:bd:bf:99:
1e:90:72:a6:1f:55:83:a1:4e:f8:e9:cd:38:b8:c9:
f1:2f:2a:51:15:22:7a:b9:19:77:d6:35:0d:d9:1e:
3f:e8:8f:37:b4:cf:9b:ee:df:2f:fc:70:4a:5c:0e:
63:bc:2a:78:00:7f:63:cb:de:7b:8e:48:89:27:b6:
d4:40:86:f7:d3:ae:9c:70:2c:a0:5b:28:4b:c6:c3:
68:a8:30:25:29:ba:90:65:2f:7c:91:70:7e:1e:9e:
d0:fc:c3:87:a0:5d:39:44:f4:58:9f:61:b0:ff:c9:
bb:c5:82:fe:a9:c8:29:70:00:2c:38:5f:3f:bf:36:
33:96:c9:46:6c:84:90:44:21:ea:b6:03:24:7d:fa:
22:63:9a:d6:47:0f:4f:8e:0b:21:bd:21:31:96:ff:
6a:4b:13:9b:fb:82:8c:4c:04:07:7a:a7:20:a7:5e:
50:99:f0:51:e6:6f:c2:1d:e9:d4:72:b5:1b:e5:9d:
64:b2:e8:1e:e4:c8:b5:20:25:fb:3b:00:25:30:21:
46:32:a6:67:61:2a:0c:e6:8c:72:16:34:b2:90:4d:
82:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:12:8D:24:F7:F4:32:E8:8C:F9:21:88:C6:05:35:84:F8:99:D4:73
X509v3 Authority Key Identifier:
keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:88:d9:ae:25:41:3a:25:c6:af:4a:f5:9a:c1:8c:04:89:20:
fd:35:f7:b7:3c:fe:63:f1:cc:b5:c0:2c:81:2e:10:a0:db:47:
9a:c3:f3:3e:c3:33:ad:08:5d:3e:ce:37:1b:6e:78:1d:49:97:
4a:89:fc:f4:54:59:b8:3c:f3:b2:99:22:2a:87:c9:ae:3c:39:
51:b2:30:28:f8:2f:76:3a:62:83:3d:13:66:c3:69:91:1f:e1:
69:62:66:2d:c7:3b:8f:50:32:47:d3:6c:34:59:1f:15:83:94:
4f:1b:b3:9b:96:1d:50:a8:c9:f9:55:37:f0:05:be:8b:62:46:
62:fc:7d:3b:4c:31:ca:9f:49:b6:42:c9:fd:86:14:10:0a:0d:
5f:39:96:77:f7:14:f8:15:92:df:b0:9f:ae:ca:f6:77:2b:a3:
71:50:ca:80:5e:53:64:85:b3:8f:00:86:9c:d6:49:0f:c4:5c:
a3:16:03:66:13:9d:ae:64:cc:4b:d6:6f:90:b8:07:92:9e:21:
1d:19:a3:e1:63:ce:b5:0d:7b:2b:48:a1:1b:cb:cf:d6:2e:27:
02:ac:85:8c:ab:c2:dc:e6:93:29:54:94:39:48:e0:9e:26:19:
45:ed:07:e6:26:31:96:b6:d2:27:c4:f2:07:86:76:cd:67:bc:
9f:6c:1f:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCNVyzod+DWrsHbwitDiZQxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTk2MjA4OTI1ZDgzNmY4ZDAzN2QxNzk5ODBhODNhMWIw
YzEzNDIwHhcNMjYwOTEwMjIwMTM1WhcNMjYwOTExMjIwMTM1WjAzMTEwLwYDVQQD
EygxZTEyOGQyNGY3ZjQzMmU4OGNmOTIxODhjNjA1MzU4NGY4OTlkNDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK941R6c3Li2s97r7FcsFD+iJ9yl
zjOtJZGaTOmhVoYDLkUIt9J1h/u9v5kekHKmH1WDoU746c04uMnxLypRFSJ6uRl3
1jUN2R4/6I83tM+b7t8v/HBKXA5jvCp4AH9jy957jkiJJ7bUQIb3066ccCygWyhL
xsNoqDAlKbqQZS98kXB+Hp7Q/MOHoF05RPRYn2Gw/8m7xYL+qcgpcAAsOF8/vzYz
lslGbISQRCHqtgMkffoiY5rWRw9PjgshvSExlv9qSxOb+4KMTAQHeqcgp15QmfBR
5m/CHenUcrUb5Z1ksuge5Mi1ICX7OwAlMCFGMqZnYSoM5oxyFjSykE2CGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4SjST39DLojPkhiMYFNYT4mdRzMB8GA1UdIwQY
MBaAFC7pYgiSXYNvjQN9F5mAqDobDBNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEt
ODQ2YWFmMGViMWFkLzEvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEtODQ2YWFmMGViMWFk
LzEvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4jZriVB
OiXGr0r1msGMBIkg/TX3tzz+Y/HMtcAsgS4QoNtHmsPzPsMzrQhdPs43G254HUmX
Son89FRZuDzzspkiKofJrjw5UbIwKPgvdjpigz0TZsNpkR/haWJmLcc7j1AyR9Ns
NFkfFYOUTxuzm5YdUKjJ+VU38AW+i2JGYvx9O0wxyp9JtkLJ/YYUEAoNXzmWd/cU
+BWS37Cfrsr2dyujcVDKgF5TZIWzjwCGnNZJD8RcoxYDZhOdrmTMS9ZvkLgHkp4h
HRmj4WPOtQ17K0ihG8vP1i4nAqyFjKvC3OaTKVSUOUjgniYZRe0H5iYxlrbSJ8Ty
B4Z2zWe8n2wf1w==
-----END CERTIFICATE-----
Generated at Fri Sep 11 01:47:55 2026 by rpki-client