
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
File: LUNomnY4_3N1kf87JRkYhiNJaVw.mft (raw, json)
Hash identifier: l0L6ovJaR0JdhXy9Vh0Oq3tbMqgS5b4I3fEaTTEIVR4=
Subject key identifier: FC:AD:E8:26:6F:1F:04:CA:7C:D8:EC:79:3D:C9:5F:7C:70:F1:0D:DD
Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c
Certificate serial: 019E1D90A6D3EB2320F6DB84C43BED13EE42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 19:01:19 +0000
Manifest this update: Tue 12 May 2026 19:01:19 +0000
Manifest next update: Wed 13 May 2026 19:01:19 +0000
Files and hashes: 1: CBnGBeMmfjtC-_l50Apa-rnM7ro.roa (hash: tqc1bO+aiQg/sSJgPer6VgbSztJvGQrMbPiX8vaUTEc=)
2: CK3zVq2E2JWnSie8IPkPmkTQAJw.roa (hash: 5fi0O3p9ePi7rf1DhBwT/4afhsP0X6JGcQ74b0c4lTQ=)
3: LUNomnY4_3N1kf87JRkYhiNJaVw.crl (hash: gf8uPP0GNg+qOFbxDeb5qvLhtqoP9rWXW09jMo6RkM8=)
4: Yg9iLr8mf8U8LuZpwB1CnTu08oQ.roa (hash: /1zfIH4wj/NT7nx+ZkonwZjt7ZKmu7eqePuUpLvYMyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:a6:d3:eb:23:20:f6:db:84:c4:3b:ed:13:ee:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d43689a7638ff737591ff3b251918862349695c
Validity
Not Before: May 12 19:01:19 2026 GMT
Not After : May 13 19:01:19 2026 GMT
Subject: CN=fcade8266f1f04ca7cd8ec793dc95f7c70f10ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:0b:ac:86:b7:46:ba:e9:58:d7:c9:e7:1a:
36:7b:5b:1e:cf:df:db:43:3f:37:28:a0:28:f1:c7:
e3:96:75:5e:17:d8:a7:39:10:bc:36:2a:ba:c3:7d:
c2:e4:df:16:65:0e:c7:dc:fc:48:ff:8a:73:ba:67:
99:62:2a:3c:81:83:16:bc:52:6d:03:c8:60:70:41:
ea:68:6d:0d:99:65:32:61:38:a8:6e:50:08:b0:8b:
53:80:db:dd:fa:b0:03:41:2f:c0:cd:84:58:a2:e6:
99:b5:d4:f9:cc:fc:5b:35:d6:af:9b:2a:99:f2:60:
b8:1c:f1:ec:de:97:e5:f0:be:72:90:e3:a3:ad:70:
29:80:d4:7a:b5:9f:54:90:e4:0b:f5:26:6b:8e:2e:
c1:35:74:10:6d:8e:35:83:8c:bd:ab:a5:ec:62:ee:
15:5f:8b:34:93:b5:86:fe:2a:24:96:de:5f:5f:66:
fe:77:ea:15:6e:d3:d0:b7:bb:3b:e7:a4:37:0f:56:
f7:91:f2:56:24:df:5a:ab:27:d0:78:49:77:63:b5:
dc:84:6e:da:c6:01:33:22:96:97:b4:74:ae:95:3c:
76:12:94:d2:02:0c:93:03:2c:fc:11:c2:cb:05:8f:
2a:bb:69:7b:74:25:2e:49:e4:d6:b9:e1:a1:72:18:
07:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AD:E8:26:6F:1F:04:CA:7C:D8:EC:79:3D:C9:5F:7C:70:F1:0D:DD
X509v3 Authority Key Identifier:
keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e8:f8:7e:65:24:fe:cc:e9:47:22:99:6a:69:e0:f0:6d:db:
05:3d:4b:c9:18:ad:ce:04:62:c6:b5:85:3e:55:94:6d:00:5d:
7c:2a:9d:8d:2f:b5:27:91:6a:9f:97:c7:ff:9c:73:3c:0d:cd:
b6:26:c7:52:09:2f:74:8e:a7:35:da:45:84:c4:5e:1e:8d:62:
e2:5a:54:fb:cd:cb:e4:c7:1b:a8:a0:fe:b4:4d:03:65:e8:60:
44:e7:3b:c1:91:80:f1:dc:1e:7d:53:83:b4:7e:4e:42:fa:3e:
0c:0c:83:19:ee:ae:b9:64:4a:53:3d:24:7f:fd:a8:f5:10:65:
0f:b8:05:6e:29:53:08:b6:ea:ed:dd:d1:93:d9:0c:02:79:79:
9d:e3:58:53:57:39:bd:c6:77:7a:74:cb:d2:75:0c:a1:09:44:
f0:71:dd:ee:9a:9a:7c:fa:1c:06:f8:c8:51:91:04:80:a7:69:
8e:bd:9c:09:44:9b:13:50:09:c9:c0:60:8d:6a:27:c7:76:91:
f4:51:7f:dc:7e:23:9c:f4:c3:59:ca:7b:79:39:36:8e:91:ef:
eb:b0:db:75:79:a8:ce:19:33:08:21:a5:c4:e6:bb:64:df:19:
ff:4e:45:de:ee:05:e5:a0:fa:86:89:d9:ba:89:38:14:cc:b5:
ce:eb:32:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:11:40 2026 by rpki-client