Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
File: LUNomnY4_3N1kf87JRkYhiNJaVw.mft (raw, json)
Hash identifier: dVgVrWeMGNaZkioBtn8hVzca4bW0F8a6ntQxI1o5dL0=
Subject key identifier: 9A:80:99:92:A6:EB:C7:0D:AE:AF:EC:C4:6E:5B:15:79:8E:C1:74:42
Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c
Certificate serial: 019DA3E6B19C5EDBBE2DC212CAD72B59D13C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
Manifest number: 18C6
Signing time: Sun 19 Apr 2026 04:01:37 +0000
Manifest this update: Sun 19 Apr 2026 04:01:37 +0000
Manifest next update: Mon 20 Apr 2026 04:01:37 +0000
Files and hashes: 1: CBnGBeMmfjtC-_l50Apa-rnM7ro.roa (hash: tqc1bO+aiQg/sSJgPer6VgbSztJvGQrMbPiX8vaUTEc=)
2: CK3zVq2E2JWnSie8IPkPmkTQAJw.roa (hash: 5fi0O3p9ePi7rf1DhBwT/4afhsP0X6JGcQ74b0c4lTQ=)
3: LUNomnY4_3N1kf87JRkYhiNJaVw.crl (hash: kcEwDacZLvll7B6JCAgBGOERGqfVQZK+Q03lfMdCjiQ=)
4: Yg9iLr8mf8U8LuZpwB1CnTu08oQ.roa (hash: /1zfIH4wj/NT7nx+ZkonwZjt7ZKmu7eqePuUpLvYMyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:b1:9c:5e:db:be:2d:c2:12:ca:d7:2b:59:d1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d43689a7638ff737591ff3b251918862349695c
Validity
Not Before: Apr 19 04:01:37 2026 GMT
Not After : Apr 20 04:01:37 2026 GMT
Subject: CN=9a809992a6ebc70daeafecc46e5b15798ec17442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1c:19:a1:67:42:05:cc:2b:8f:7a:d3:89:ae:
0f:80:20:27:17:73:a3:f9:2f:0f:4e:9e:bf:ae:f5:
e9:5d:5a:dc:e8:da:00:1a:bc:eb:0d:aa:93:eb:63:
ae:8d:8b:8a:d9:c8:84:8e:75:3f:32:a1:f6:3a:33:
c6:12:52:3a:94:10:0b:3e:90:bd:c7:80:82:ee:94:
46:fd:d8:7d:f9:e9:08:0e:1e:db:01:2b:e8:da:7c:
09:f8:07:82:4d:7b:36:dc:2c:39:61:f9:c0:ce:91:
a0:93:12:59:fd:74:af:2f:43:e0:1f:80:78:ed:87:
a2:0a:c2:44:ac:24:84:61:08:b9:d0:d4:ff:c7:bb:
cc:28:ac:5f:9e:fd:20:98:b7:42:a1:3e:b7:5b:c5:
a4:82:41:1b:bd:f2:62:cd:a5:59:a0:ed:96:78:e2:
b5:26:6f:da:fb:7a:0b:06:5e:2d:8c:2d:32:88:9a:
93:26:23:cc:b2:5a:3b:f2:0a:6e:c1:73:61:9e:b3:
00:b0:6d:21:81:82:84:b4:f7:d7:e3:dd:05:75:2a:
80:af:bc:23:9f:61:aa:21:1b:10:9f:b2:6d:de:07:
d2:38:80:92:c0:f5:39:10:45:0d:43:7b:bf:c5:8a:
cc:31:b9:13:1e:e8:e5:e1:db:08:d8:ba:dd:6e:3d:
62:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:80:99:92:A6:EB:C7:0D:AE:AF:EC:C4:6E:5B:15:79:8E:C1:74:42
X509v3 Authority Key Identifier:
keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:4a:e6:d9:a3:75:c0:8d:60:55:b0:0a:5a:4b:1d:03:73:db:
70:5c:2c:0d:ef:ec:7e:27:54:61:45:13:0d:b4:41:c1:f4:2e:
ee:c6:cf:83:a3:d6:3e:86:ff:53:fc:ff:7d:9d:10:6b:1d:7c:
0c:11:cd:64:4e:14:02:c5:a5:12:52:67:24:bd:b3:ba:66:c8:
f7:64:20:c0:46:66:0f:66:5b:0f:59:50:28:f3:cf:e3:d6:02:
07:7b:b8:3e:99:4c:60:07:11:19:b0:2b:a8:75:76:3e:7e:a0:
1b:f6:8b:41:ae:b2:b1:26:01:fb:d0:6d:d6:3f:2b:32:e0:03:
66:7d:93:50:c7:f9:05:6a:95:11:96:07:e8:29:aa:29:16:28:
fd:25:7e:25:8a:f0:0f:98:e6:d8:4a:57:58:cc:16:d8:e7:6a:
14:4a:65:80:bc:ac:f3:9d:27:5f:24:db:cf:b3:a1:7f:97:e8:
75:ab:9d:3d:c1:71:ee:b9:08:9e:17:21:38:3d:ca:be:62:a8:
1d:fe:36:db:65:f0:e8:95:19:97:ab:b5:83:85:8d:ed:e8:14:
a2:2b:c6:53:81:55:8b:45:01:79:08:82:59:22:51:ad:09:2a:
3b:0b:80:06:4d:44:37:55:36:78:57:87:51:5d:18:fa:8f:91:
47:08:23:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:54:32 2026 by rpki-client