Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
File: LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json)
Hash identifier: H/gc7+KLTW/2zD3wp98F4h8OdEJCWzXwTlQK1XJ2S+k=
Subject key identifier: 96:C4:79:C9:94:B9:58:DD:EE:DB:5D:D8:70:B0:67:BA:AF:20:4D:B1
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial: 019D9A3EB84D522CE1446A91666E48B0B51D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 07:01:34 +0000
Manifest this update: Fri 17 Apr 2026 07:01:34 +0000
Manifest next update: Sat 18 Apr 2026 07:01:34 +0000
Files and hashes: 1: 08zs1vez5T3OxmoffP4v4xK9YRM.roa (hash: uy8J25dlMEzvaPv80sYDbmqCg6sB5jPeyau+AuQ0+dM=)
2: 1k_gsLYQzZ2auoJeJkWUzu7Ie1o.roa (hash: QopUlfrOmMWf3HhqNYkuS7EjOhnM84v1jbZHx5PFkcs=)
3: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: fnjl1snp3jL3uBHHJVAIlMxtJR+NIuCdjMzglPWEoLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:b8:4d:52:2c:e1:44:6a:91:66:6e:48:b0:b5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Validity
Not Before: Apr 17 07:01:34 2026 GMT
Not After : Apr 18 07:01:34 2026 GMT
Subject: CN=96c479c994b958ddeedb5dd870b067baaf204db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9b:63:6a:2d:bf:f2:92:23:79:a6:f1:0f:7a:
23:b9:46:83:e2:ab:02:b4:e5:08:1d:1f:cd:42:12:
5a:8a:15:41:0b:ac:48:09:4c:c5:f9:ad:3b:b8:10:
6c:a8:52:90:e5:0b:91:fc:7d:9a:b7:6a:27:6b:46:
17:78:46:bf:03:ec:3e:0f:e7:5c:db:df:d6:f4:6e:
72:c4:36:94:72:b3:18:90:57:7b:0e:e2:39:b5:af:
2f:ba:96:dc:12:c4:4f:6b:10:07:27:99:d0:ea:91:
1a:52:27:a5:ea:a7:a1:e5:e2:e8:5d:fb:9a:51:cd:
d1:4f:85:b4:cd:f2:c7:66:f7:1f:5c:b3:33:39:ea:
b7:52:60:7a:af:21:be:a3:9c:83:14:47:e2:4c:9a:
c2:bc:b3:5f:08:ff:b6:89:45:16:86:9b:91:82:c0:
81:43:6a:15:a0:d3:ae:36:5d:31:08:ec:f4:bf:22:
5b:74:32:9f:47:94:80:4a:0c:bd:25:8e:8c:fd:81:
5f:e7:f3:83:54:6a:b2:29:7c:f6:b9:c3:bd:c1:2e:
bb:49:cb:0b:da:a8:1b:d4:a0:35:25:55:14:0f:ab:
f4:00:f9:87:07:be:cf:5d:42:52:6a:87:5c:44:6d:
4b:49:35:80:bd:81:0c:d0:c2:48:d5:97:3b:ea:3c:
f3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C4:79:C9:94:B9:58:DD:EE:DB:5D:D8:70:B0:67:BA:AF:20:4D:B1
X509v3 Authority Key Identifier:
keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:56:60:71:44:9f:e2:59:2e:95:28:cc:4c:6a:8e:45:64:26:
71:95:78:4f:6f:4d:ff:ee:19:c6:bd:cb:20:5d:90:1c:8d:81:
8e:b6:e0:99:82:a9:4a:df:04:dc:f9:bb:55:07:03:fe:64:29:
09:26:3e:eb:af:3e:64:22:a8:5f:76:44:d9:0c:b0:7f:9c:76:
ed:03:f1:79:f7:09:b4:dc:7a:72:c6:9b:f2:e2:a1:93:b6:67:
9f:61:f1:40:b0:2f:ac:62:16:65:37:2a:ba:8c:04:b9:7f:e4:
3e:69:4e:c7:9a:ce:20:69:4a:51:c1:68:7d:a9:57:8f:a1:bd:
60:18:95:8f:29:75:68:54:4d:6f:f0:f6:eb:ef:3c:36:88:31:
0f:cb:99:5c:f7:04:89:17:86:6c:68:2d:e2:c1:ff:aa:6a:bf:
ea:6f:02:86:cd:46:ef:a2:e1:26:55:ea:2f:5c:41:6c:55:5d:
52:0b:4e:d5:e7:08:bf:a3:8e:dd:d3:86:fd:f9:09:fb:92:d2:
07:8d:43:7e:22:34:16:64:4b:35:1a:28:9d:7b:8a:f8:7f:19:
fa:dd:e9:e8:b6:ae:18:22:df:98:af:46:a4:6b:6b:1c:88:00:
53:05:fe:5d:20:34:ee:87:fd:7b:72:bb:aa:3d:eb:ef:56:11:
99:10:cf:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:13:27 2026 by rpki-client