Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
File: LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json)
Hash identifier: /KK5nR3qpBJcCL0a/kHSGL4QLVfx9jOVVS/W6rqoqCc=
Subject key identifier: 5C:DE:57:F8:2C:F5:CE:28:3E:3D:FB:8D:0D:59:CA:0B:F5:68:65:3F
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial: 019ED318D063040D9A6603621396E7C92996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
Manifest number: 1965
Signing time: Wed 17 Jun 2026 01:01:19 +0000
Manifest this update: Wed 17 Jun 2026 01:01:19 +0000
Manifest next update: Thu 18 Jun 2026 01:01:19 +0000
Files and hashes: 1: 08zs1vez5T3OxmoffP4v4xK9YRM.roa (hash: uy8J25dlMEzvaPv80sYDbmqCg6sB5jPeyau+AuQ0+dM=)
2: 1k_gsLYQzZ2auoJeJkWUzu7Ie1o.roa (hash: QopUlfrOmMWf3HhqNYkuS7EjOhnM84v1jbZHx5PFkcs=)
3: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: 4tXXlj3wc8LhyC3rpGkn0SG5781nHtQQGzYeWBJNl+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:18:d0:63:04:0d:9a:66:03:62:13:96:e7:c9:29:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Validity
Not Before: Jun 17 01:01:19 2026 GMT
Not After : Jun 18 01:01:19 2026 GMT
Subject: CN=5cde57f82cf5ce283e3dfb8d0d59ca0bf568653f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:05:0a:7f:e5:f9:c1:65:ce:56:a0:45:e8:42:
16:fd:11:b6:3d:f3:b7:15:73:29:dc:d9:a1:d1:b4:
5b:0c:6d:a7:d5:f2:5c:1f:b9:cd:0a:db:29:ac:98:
3a:4e:87:0e:e2:1d:0e:e6:49:10:b8:24:0b:ef:53:
4f:ca:00:91:13:55:a5:bc:8c:bd:9c:78:96:bf:05:
a4:2d:9c:08:d7:f8:62:0d:9c:79:e5:78:af:e2:b2:
aa:ea:85:a0:53:bd:12:84:6b:90:10:3a:12:11:37:
e4:30:f2:59:01:28:04:0c:f9:30:fb:02:86:74:b3:
e9:41:8e:6e:a2:75:0b:32:e1:ca:be:bb:52:ac:16:
63:ab:2d:de:dc:0c:93:90:38:ea:aa:8a:91:26:e5:
8e:ec:8f:74:a6:b3:1b:82:0d:f2:a6:ff:b9:4e:35:
46:b4:79:72:f2:8c:52:b3:14:15:d2:73:1e:01:2d:
86:df:07:51:9c:12:ef:a6:67:cd:33:1d:8e:9a:b1:
bd:c8:8c:1a:a2:75:b8:79:7f:a1:0d:c0:e7:df:ef:
b0:29:32:9e:4a:35:2b:ed:af:6b:c0:f0:7b:08:19:
e3:18:db:26:30:7a:30:f3:81:07:27:b6:5e:f2:63:
f7:df:93:26:32:a9:a7:18:cc:e4:48:70:32:d8:3e:
3c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DE:57:F8:2C:F5:CE:28:3E:3D:FB:8D:0D:59:CA:0B:F5:68:65:3F
X509v3 Authority Key Identifier:
keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a2:25:41:89:a9:5a:46:ae:1a:c7:86:18:ee:7e:36:c0:71:
46:2b:c9:10:2a:b6:4f:3e:53:e0:32:25:08:57:a5:5e:22:23:
15:16:df:8f:6a:55:82:a7:df:10:a3:9c:af:9d:8d:e5:74:79:
01:1a:e7:50:a6:80:1f:2c:e3:fc:d9:1a:76:ab:6c:70:fa:11:
a4:24:a4:4f:00:0a:ad:45:63:de:a2:f9:99:d6:14:74:e3:d5:
62:c4:62:03:56:a8:51:47:b1:f7:57:9d:aa:51:9c:ca:7b:f6:
fa:4c:00:90:85:78:67:c5:79:97:57:71:22:a2:d4:c8:5a:17:
1b:fd:36:90:c3:db:7d:08:42:69:f1:35:45:4d:6e:fb:3c:8b:
d3:da:57:e7:6c:eb:96:d5:04:32:17:d3:c2:ab:7d:31:1c:57:
cd:75:48:9c:60:d5:9a:af:56:14:09:a6:d3:aa:24:2b:d2:06:
81:49:cd:a6:7c:b9:6f:a3:db:e0:74:2d:a6:36:49:ac:e6:e5:
35:c2:7a:8b:b8:65:dd:7a:0e:ec:49:f4:ef:de:56:a6:ea:25:
9a:5f:60:dc:ff:27:c8:00:20:dd:c9:65:9e:bd:01:62:62:71:
39:50:de:8f:6c:ce:9f:38:40:20:b5:c4:32:e1:59:ab:63:94:
ee:e1:07:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7TGNBjBA2aZgNiE5bnySmWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTk2MjA4OTI1ZDgzNmY4ZDAzN2QxNzk5ODBhODNhMWIw
YzEzNDIwHhcNMjYwNjE3MDEwMTE5WhcNMjYwNjE4MDEwMTE5WjAzMTEwLwYDVQQD
Eyg1Y2RlNTdmODJjZjVjZTI4M2UzZGZiOGQwZDU5Y2EwYmY1Njg2NTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgUKf+X5wWXOVqBF6EIW/RG2PfO3
FXMp3Nmh0bRbDG2n1fJcH7nNCtsprJg6TocO4h0O5kkQuCQL71NPygCRE1WlvIy9
nHiWvwWkLZwI1/hiDZx55Xiv4rKq6oWgU70ShGuQEDoSETfkMPJZASgEDPkw+wKG
dLPpQY5uonULMuHKvrtSrBZjqy3e3AyTkDjqqoqRJuWO7I90prMbgg3ypv+5TjVG
tHly8oxSsxQV0nMeAS2G3wdRnBLvpmfNMx2OmrG9yIwaonW4eX+hDcDn3++wKTKe
SjUr7a9rwPB7CBnjGNsmMHow84EHJ7Ze8mP335MmMqmnGMzkSHAy2D48xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzeV/gs9c4oPj37jQ1Zygv1aGU/MB8GA1UdIwQY
MBaAFC7pYgiSXYNvjQN9F5mAqDobDBNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEt
ODQ2YWFmMGViMWFkLzEvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEtODQ2YWFmMGViMWFk
LzEvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbKIlQYmp
WkauGseGGO5+NsBxRivJECq2Tz5T4DIlCFelXiIjFRbfj2pVgqffEKOcr52N5XR5
ARrnUKaAHyzj/NkadqtscPoRpCSkTwAKrUVj3qL5mdYUdOPVYsRiA1aoUUex91ed
qlGcynv2+kwAkIV4Z8V5l1dxIqLUyFoXG/02kMPbfQhCafE1RU1u+zyL09pX52zr
ltUEMhfTwqt9MRxXzXVInGDVmq9WFAmm06okK9IGgUnNpny5b6Pb4HQtpjZJrObl
NcJ6i7hl3XoO7En0795Wpuolml9g3P8nyAAg3cllnr0BYmJxOVDej2zOnzhAILXE
MuFZq2OU7uEHig==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:37:52 2026 by rpki-client