Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
File: LUNomnY4_3N1kf87JRkYhiNJaVw.mft (raw, json)
Hash identifier: J64wTExIezAklKI6UJsRk5G/o1VRM3pW3SHXHzrLTHE=
Subject key identifier: EC:6A:8A:5B:4B:54:97:48:25:2C:59:F0:89:90:98:A7:F1:03:4F:6A
Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c
Certificate serial: 019D284DD475F1D836FF1A5F7E9893D4ED82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 04:01:22 +0000
Manifest this update: Thu 26 Mar 2026 04:01:22 +0000
Manifest next update: Fri 27 Mar 2026 04:01:22 +0000
Files and hashes: 1: CBnGBeMmfjtC-_l50Apa-rnM7ro.roa (hash: tqc1bO+aiQg/sSJgPer6VgbSztJvGQrMbPiX8vaUTEc=)
2: CK3zVq2E2JWnSie8IPkPmkTQAJw.roa (hash: 5fi0O3p9ePi7rf1DhBwT/4afhsP0X6JGcQ74b0c4lTQ=)
3: LUNomnY4_3N1kf87JRkYhiNJaVw.crl (hash: pRxbsWVEN2/WeSUIr+hltM2bVXJkJ4Y4CSlvc7Flq6M=)
4: Yg9iLr8mf8U8LuZpwB1CnTu08oQ.roa (hash: /1zfIH4wj/NT7nx+ZkonwZjt7ZKmu7eqePuUpLvYMyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:d4:75:f1:d8:36:ff:1a:5f:7e:98:93:d4:ed:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d43689a7638ff737591ff3b251918862349695c
Validity
Not Before: Mar 26 04:01:22 2026 GMT
Not After : Mar 27 04:01:22 2026 GMT
Subject: CN=ec6a8a5b4b549748252c59f0899098a7f1034f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:44:c0:66:09:a4:91:cf:e2:49:b6:90:6a:
36:d2:5e:73:73:ff:b9:4b:39:e6:cf:c0:74:f6:d2:
32:c1:7d:52:84:4b:64:01:79:73:1d:b5:18:2a:1f:
31:1d:10:11:cd:ec:e1:c3:89:6c:1d:44:41:04:f9:
61:ab:ff:72:a8:e2:be:34:6a:b9:9b:a4:dc:73:9c:
b2:8a:84:c1:c1:9f:10:12:0c:fb:f5:3f:41:92:a2:
24:6d:1e:f6:72:58:9c:17:1f:e2:45:1a:8d:16:e7:
02:c1:35:20:6b:b0:98:b2:0f:31:e9:c8:99:70:3f:
74:e8:48:0b:ad:e6:24:58:58:3a:1f:8d:70:b9:37:
9b:ec:8b:96:5f:80:a3:06:9e:9f:e7:4c:84:c0:fd:
5d:68:0e:fa:3f:39:de:80:c0:02:41:ba:93:7a:ec:
3c:d2:40:00:2f:69:15:38:51:14:b6:70:03:82:99:
e5:c2:80:a7:57:89:d6:31:5d:ba:61:f2:67:96:26:
43:5d:e1:c2:06:5c:ce:99:ab:d0:64:f1:2f:af:18:
b2:f7:b5:5b:08:b8:d1:a4:7b:86:c3:98:b0:68:c2:
6e:97:50:dd:31:a6:89:4b:00:09:d7:e9:67:39:45:
67:76:9d:a0:a2:c3:a1:1e:39:f0:3c:57:bc:00:0c:
3a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6A:8A:5B:4B:54:97:48:25:2C:59:F0:89:90:98:A7:F1:03:4F:6A
X509v3 Authority Key Identifier:
keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:16:18:a3:23:93:11:96:4e:73:2c:d9:51:a4:e8:93:68:44:
fe:3c:a9:5b:b1:73:9c:84:79:57:a8:5c:a0:bf:58:50:af:60:
0c:79:f1:75:fc:d8:cf:33:a0:2d:36:78:ea:05:46:dd:aa:fd:
d2:db:52:b7:e0:f6:62:90:be:46:fa:14:41:4b:9d:92:34:04:
75:fe:f3:b3:28:8c:65:76:f0:d7:c6:db:81:49:7a:23:9b:f8:
2f:08:9b:7c:3c:da:ea:d8:fd:0d:1f:d8:00:10:68:28:9f:41:
79:e5:c5:39:63:e1:fd:b9:72:ea:31:25:ac:71:bd:98:ca:14:
a5:1a:e5:8d:42:11:e0:96:ad:67:df:fc:a4:09:cc:4b:6a:d0:
90:f2:ce:28:99:c7:88:b7:96:cd:c3:ea:9d:cf:ac:fe:20:8d:
f6:d3:6a:62:22:1b:cc:f7:10:dd:56:d6:cc:b9:e1:dd:ae:3c:
17:8c:ed:7e:29:67:1c:1d:e5:e2:50:98:21:d8:4a:16:34:4a:
55:5d:21:87:4b:3e:03:9d:d1:7d:d4:88:fe:92:70:2f:d4:7e:
0e:51:b6:f6:19:8b:53:6f:87:1e:d8:d6:0b:2c:35:b3:10:e3:
a1:e5:26:25:82:c0:d4:83:ef:1c:91:1c:7f:fa:c9:89:98:67:
bd:ba:89:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:36 2026 by rpki-client