Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
File: LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json)
Hash identifier: EqIXqpldNyxqj5bTAC2lb6MpAgN8p3AQYsNIgnlUNK8=
Subject key identifier: F9:F5:57:48:B2:6E:EA:51:5C:47:AF:CE:0F:2A:83:F3:65:E7:76:6A
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial: 019CE6A3E9FBA29DC99C4BF673809D2FDF6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
Manifest number: 1866
Signing time: Fri 13 Mar 2026 10:00:27 +0000
Manifest this update: Fri 13 Mar 2026 10:00:27 +0000
Manifest next update: Sat 14 Mar 2026 10:00:27 +0000
Files and hashes: 1: 08zs1vez5T3OxmoffP4v4xK9YRM.roa (hash: uy8J25dlMEzvaPv80sYDbmqCg6sB5jPeyau+AuQ0+dM=)
2: 1k_gsLYQzZ2auoJeJkWUzu7Ie1o.roa (hash: QopUlfrOmMWf3HhqNYkuS7EjOhnM84v1jbZHx5PFkcs=)
3: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: DQJ09M6HD1Wr+EdmTVAzx38D7u8zAV1kF6e+EzOZQfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a3:e9:fb:a2:9d:c9:9c:4b:f6:73:80:9d:2f:df:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Validity
Not Before: Mar 13 10:00:27 2026 GMT
Not After : Mar 14 10:00:27 2026 GMT
Subject: CN=f9f55748b26eea515c47afce0f2a83f365e7766a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9a:a1:15:3c:c9:6c:f0:dc:a8:53:0e:03:ac:
62:62:e7:10:e9:b0:0f:2e:cf:cd:c2:4c:7b:ed:c2:
8a:16:bf:50:80:39:a4:b9:0f:5f:39:5c:76:db:1b:
c9:79:cd:14:a6:4c:93:ec:4e:77:cf:88:a5:3f:0c:
a3:90:b3:5e:aa:9e:8e:f4:64:db:57:a4:ef:93:a7:
a6:8e:f7:5d:0f:27:e3:2b:5a:82:cc:a6:3b:9e:f8:
ae:3f:3d:e1:f2:ee:72:2f:9b:19:4f:81:96:c4:d0:
3a:a0:eb:d6:8c:1e:c4:c8:d0:c7:5d:6a:a6:43:b3:
07:8b:0e:62:65:67:46:11:d8:b2:93:a8:d6:3a:d0:
75:f4:4b:26:e8:61:b9:c5:e5:39:67:08:bd:14:95:
2b:2c:60:cd:86:5f:39:1d:ea:b1:76:d4:8a:a2:c2:
3d:40:10:89:d5:55:fa:79:30:eb:fc:4c:21:ce:7c:
71:b0:5e:98:c7:e0:f6:61:29:29:31:0b:20:d2:11:
b8:0e:e6:cb:3b:e1:9d:94:37:66:22:92:c1:1a:95:
2c:42:cb:6b:18:c7:72:3a:69:f6:bf:2d:da:ce:63:
f6:46:85:1d:9b:86:bd:16:f0:c3:55:85:ae:d7:5d:
1c:8c:6b:24:22:7a:50:09:12:63:d3:4a:c9:9e:d1:
9f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F5:57:48:B2:6E:EA:51:5C:47:AF:CE:0F:2A:83:F3:65:E7:76:6A
X509v3 Authority Key Identifier:
keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:99:57:29:21:b9:b9:3a:f9:ad:5a:59:ba:dc:ff:9a:0f:fb:
7a:e0:fa:42:ff:36:e5:04:e8:21:77:27:39:13:e2:4c:b2:03:
84:5a:ac:e3:81:6c:a1:c4:b1:e1:5c:4d:a8:46:ad:c1:21:ca:
06:69:58:e6:60:4c:6c:3a:70:56:1f:80:2f:62:a4:6f:0e:77:
da:b6:9b:88:e8:fe:41:88:52:66:60:16:42:96:1e:ba:7e:65:
ac:fd:02:97:57:6b:e4:d5:bb:3b:27:ea:cb:00:2f:64:ea:6b:
4f:17:b4:37:99:5c:f2:3b:c9:45:dc:52:de:39:9e:31:db:02:
80:96:d8:9b:72:d5:f5:26:fc:1b:b7:e9:70:65:5d:45:fd:e4:
de:69:45:20:8f:91:30:be:76:d5:2b:7e:16:94:14:5a:bf:2b:
22:fb:73:03:18:2d:e8:f2:e7:9f:d1:f3:ad:bf:6e:ef:17:18:
9b:48:0c:de:50:03:60:73:d7:8b:dc:2c:1d:72:6c:82:70:01:
4c:93:82:a1:c5:55:8f:89:ec:2f:12:be:7f:84:f0:1a:97:5d:
4f:af:fc:14:91:7f:76:be:0a:9a:db:84:01:f5:5d:ee:e0:3f:
0c:74:04:14:8c:7b:f8:cb:0f:b3:24:cf:2d:43:7c:36:dc:d6:
7d:21:89:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:49:08 2026 by rpki-client