Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
File: LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json)
Hash identifier: 7tZDnK/TgsVMcJWqo62GRq6GxbG+1fpTavwUkRBKf1k=
Subject key identifier: 5B:E1:2C:E5:92:B1:79:DF:2C:89:54:B0:6D:E9:32:FB:B8:6D:AE:15
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial: 01A1317DC4EE09A0FE2A9D492EDB5A662B3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
Manifest number: 1A9F
Signing time: Mon 12 Oct 2026 19:01:28 +0000
Manifest this update: Mon 12 Oct 2026 19:01:28 +0000
Manifest next update: Tue 13 Oct 2026 19:01:28 +0000
Files and hashes: 1: 08zs1vez5T3OxmoffP4v4xK9YRM.roa (hash: uy8J25dlMEzvaPv80sYDbmqCg6sB5jPeyau+AuQ0+dM=)
2: 1k_gsLYQzZ2auoJeJkWUzu7Ie1o.roa (hash: QopUlfrOmMWf3HhqNYkuS7EjOhnM84v1jbZHx5PFkcs=)
3: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: 2iPnfVYtFNq2TohhrtBHDrRtADt2PsBXhcOxGlgjBE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:7d:c4:ee:09:a0:fe:2a:9d:49:2e:db:5a:66:2b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Validity
Not Before: Oct 12 19:01:28 2026 GMT
Not After : Oct 13 19:01:28 2026 GMT
Subject: CN=5be12ce592b179df2c8954b06de932fbb86dae15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c2:9b:0a:6a:0a:a0:cb:b6:d8:3d:2d:8e:fd:
8e:55:63:33:85:0b:b1:7e:f6:26:60:23:9e:31:bb:
37:79:68:3e:63:ee:0b:99:28:48:fa:c1:37:77:37:
ad:77:fd:ba:1d:69:da:1a:4f:4f:a3:63:de:a9:05:
e1:10:77:c3:ea:e7:87:00:df:f8:c9:13:9f:ee:20:
2b:55:3d:70:67:6f:c0:84:0d:6e:a3:36:cf:59:9c:
d2:70:ce:18:62:7d:91:0b:7e:59:a6:8f:84:4e:63:
a9:e3:59:74:bb:92:55:92:0a:4d:eb:18:04:7e:72:
16:ba:63:bd:7c:03:bf:86:6e:e0:da:d8:d1:8f:2b:
1b:e5:fb:8a:c4:b9:95:1a:66:ff:04:77:f9:c7:18:
b1:86:88:08:34:1a:cf:ab:02:f6:ba:ec:79:f6:f7:
bd:cf:8d:f2:e9:d0:a0:4c:08:ee:72:55:a9:0d:3f:
9d:7b:54:62:fb:88:d3:8a:ba:56:35:c5:86:cb:26:
b9:76:28:71:aa:a7:e1:ad:57:9a:eb:a7:6f:9f:d9:
9a:1d:66:e7:f1:22:26:63:3d:32:36:30:f0:72:b7:
a3:19:6a:b5:92:d6:b8:d8:f4:c4:c1:27:46:c5:61:
21:07:1d:e5:2d:c7:30:8c:82:a8:e6:32:83:6f:99:
a8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E1:2C:E5:92:B1:79:DF:2C:89:54:B0:6D:E9:32:FB:B8:6D:AE:15
X509v3 Authority Key Identifier:
keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:60:5b:08:57:33:e7:48:c1:d9:ba:7c:4d:51:b1:c4:4e:59:
ca:4a:6e:55:47:8c:a3:e1:c8:8f:dc:8b:dd:79:bd:59:2c:c6:
6b:87:32:1d:eb:2d:dc:3c:56:ce:7a:7c:dd:f9:16:3d:11:c7:
f3:78:3f:ee:b2:32:26:81:31:28:c1:2b:aa:52:1a:5e:7e:0e:
31:23:ce:3e:da:e4:54:22:48:7c:d4:7d:57:73:c4:0b:68:a1:
5f:97:90:ea:ae:57:87:e0:e9:a1:5a:ba:5b:f3:94:9e:1c:19:
1c:60:ce:ce:06:1e:31:2b:92:9c:25:6a:5a:d6:00:67:79:ce:
1d:02:80:ea:8f:ef:16:53:bc:b5:29:00:06:01:c4:1f:01:8e:
36:f7:14:4f:e4:7d:f9:e3:c4:3f:c6:9f:67:cd:d4:7f:d5:a5:
f9:da:1c:bd:6d:d4:0c:1e:4e:05:52:fd:32:18:fb:75:b9:7a:
f7:eb:c7:f9:c0:4a:88:62:be:74:f8:28:a0:d6:a5:20:c9:f4:
65:e3:a3:63:b9:6f:dc:6e:3f:21:56:1f:6e:ff:bc:76:99:26:
1c:e0:a3:8f:3a:b8:af:2b:6f:fa:a4:55:f4:75:0f:58:3a:9c:
40:09:dc:65:ff:fc:59:23:bc:2a:1d:b7:2d:12:b3:b9:9e:8b:
29:c9:1c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:24:20 2026 by rpki-client