Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
File: LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json)
Hash identifier: jNDT5TvWBHvLdqZg8sQRlYImMAmkYINLyhK8RP+dqW8=
Subject key identifier: 61:3A:53:85:FB:ED:75:29:21:F4:2B:4B:E1:6D:D7:49:DC:9B:44:2C
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial: 019DCE63303BC0DEE613AFBBD0E2E48E06BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 10:01:40 +0000
Manifest this update: Mon 27 Apr 2026 10:01:40 +0000
Manifest next update: Tue 28 Apr 2026 10:01:40 +0000
Files and hashes: 1: 08zs1vez5T3OxmoffP4v4xK9YRM.roa (hash: uy8J25dlMEzvaPv80sYDbmqCg6sB5jPeyau+AuQ0+dM=)
2: 1k_gsLYQzZ2auoJeJkWUzu7Ie1o.roa (hash: QopUlfrOmMWf3HhqNYkuS7EjOhnM84v1jbZHx5PFkcs=)
3: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: t0gPYCuHIAhYIcCsAazYS/C+wCdMyx4QrxQ6DXRcqd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:30:3b:c0:de:e6:13:af:bb:d0:e2:e4:8e:06:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Validity
Not Before: Apr 27 10:01:40 2026 GMT
Not After : Apr 28 10:01:40 2026 GMT
Subject: CN=613a5385fbed752921f42b4be16dd749dc9b442c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:51:a6:01:33:33:0d:38:32:b0:35:90:10:81:
e5:b4:67:22:ed:97:77:3e:7c:b4:fc:e0:bf:47:2e:
2a:ad:3e:90:c2:4b:fa:c4:09:fd:a7:e9:64:d0:94:
48:96:c3:c5:1a:c6:33:10:76:8a:27:a2:e1:33:70:
f9:67:c1:e2:41:a1:18:b3:04:4e:36:2f:ad:5a:19:
0a:29:9a:f7:7f:d2:dc:4c:e7:69:71:22:8e:53:93:
de:2c:ac:43:41:85:b3:ef:26:65:31:07:01:92:46:
63:bd:2d:a7:8d:e5:00:f0:2e:c0:0d:b6:bb:49:21:
69:ed:2f:e8:de:e1:62:c1:b7:f9:4a:aa:dc:e0:f1:
8f:1c:f6:cd:0c:87:71:07:40:f6:bf:08:76:41:7f:
b7:d7:34:37:94:04:77:70:1c:c3:7c:84:f4:b9:5d:
1d:d8:86:b5:0b:2c:b3:0d:01:b2:62:67:06:84:64:
28:ce:40:45:5d:5e:72:af:b1:a7:8e:80:84:4a:03:
f3:2c:e7:83:09:2d:73:a6:fd:3b:de:05:ff:fe:62:
77:67:8e:1d:ff:40:8c:0e:9a:20:05:85:30:35:32:
ee:a8:91:10:9e:20:48:af:76:cc:7d:4e:6f:f1:23:
99:07:48:56:98:91:50:fb:5e:46:34:74:04:fe:96:
1e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3A:53:85:FB:ED:75:29:21:F4:2B:4B:E1:6D:D7:49:DC:9B:44:2C
X509v3 Authority Key Identifier:
keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d7:80:56:92:70:ae:01:96:ea:34:e3:34:da:1c:f9:84:ca:
0f:d7:46:d1:2c:da:31:52:df:6c:e7:09:02:13:10:03:85:70:
d6:3a:5f:69:4f:c0:40:53:c4:85:00:50:f8:a4:ec:f9:89:09:
61:e6:05:f5:c4:c5:4f:3a:c2:e4:63:73:c6:b9:4f:f9:82:31:
a2:93:15:b7:b8:94:98:55:05:da:88:ce:45:3e:b4:52:4e:73:
d2:f6:10:ee:b4:8d:91:9b:23:db:47:66:18:32:ec:e8:20:a9:
a9:8c:8b:00:65:84:4f:b6:62:bc:91:96:f6:bf:4b:96:60:10:
eb:d3:97:34:a2:61:cf:34:fd:3a:50:b0:94:0b:48:ea:b6:89:
9a:ad:25:a1:89:9e:1b:ad:fa:41:4c:43:2f:b5:55:de:04:9e:
10:59:16:e3:3e:0f:7f:5d:53:4d:6a:df:27:aa:3e:45:14:34:
f1:34:e9:dd:f7:a8:04:b5:cb:28:97:81:46:3a:58:5a:a2:c8:
1c:bd:c6:f5:de:46:3a:a1:0c:f2:67:20:7e:36:a6:8e:f4:97:
f4:a2:92:b9:1b:cc:e1:a8:ca:49:cc:36:81:bd:da:4b:b0:46:
2d:28:73:83:0c:aa:0a:30:49:23:ff:77:28:7f:a3:89:d0:bb:
e3:62:32:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:07:43 2026 by rpki-client