Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
File: LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json)
Hash identifier: f2sYNHtczAYpFMy2BdR4NkbAnlR7suZ1gE2Xtk7a8tU=
Subject key identifier: E9:CB:D4:63:CA:7A:A2:D8:B2:BE:99:18:5E:BE:B4:AA:9D:BD:21:3B
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial: 019E1F7F35948D220D585000FC8ACA7A5BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 04:01:30 +0000
Manifest this update: Wed 13 May 2026 04:01:30 +0000
Manifest next update: Thu 14 May 2026 04:01:30 +0000
Files and hashes: 1: 08zs1vez5T3OxmoffP4v4xK9YRM.roa (hash: uy8J25dlMEzvaPv80sYDbmqCg6sB5jPeyau+AuQ0+dM=)
2: 1k_gsLYQzZ2auoJeJkWUzu7Ie1o.roa (hash: QopUlfrOmMWf3HhqNYkuS7EjOhnM84v1jbZHx5PFkcs=)
3: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: IekJGJkSpzwiQwTy2yg12S8GJvWlruGTMNipMxEaPKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:35:94:8d:22:0d:58:50:00:fc:8a:ca:7a:5b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Validity
Not Before: May 13 04:01:30 2026 GMT
Not After : May 14 04:01:30 2026 GMT
Subject: CN=e9cbd463ca7aa2d8b2be99185ebeb4aa9dbd213b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:53:b9:c2:11:88:1f:d5:16:8e:6a:d8:32:cd:
9a:3f:f0:0b:29:d6:b2:62:8a:e1:32:cc:d7:be:f1:
7c:11:f4:11:6d:ea:08:c0:d9:92:e2:87:71:15:f9:
fb:df:86:70:bb:36:02:14:7a:92:5c:4c:c8:25:a1:
fe:b7:2a:5b:67:02:01:82:96:ca:50:bc:29:3a:36:
bb:19:2d:28:e3:13:8d:f9:f6:c9:e9:27:ad:c7:68:
1c:6a:06:a9:6c:b7:b6:3b:53:4f:b9:c9:3b:1d:2e:
3c:f7:89:10:00:00:73:ba:96:9c:16:ae:f4:74:ee:
e8:3c:80:34:c0:44:03:7e:de:68:50:04:aa:c4:2b:
97:f3:a9:d7:4a:44:9b:ba:79:d5:1e:bd:41:e3:ed:
11:70:59:ed:63:2a:93:ac:6f:94:6d:96:3a:4a:6f:
db:47:e1:8f:55:73:2a:b7:bf:6b:3b:2a:f3:85:39:
70:93:d6:db:b8:89:6e:1f:ae:e0:fd:2e:41:50:e1:
4f:d9:2e:e4:ea:c8:55:3b:da:d7:3e:45:47:ff:7b:
25:a2:c0:26:b6:d0:24:dd:ef:0f:c5:cf:ee:19:d3:
76:33:14:c0:a2:96:d5:4d:80:a3:e2:e3:28:28:c0:
42:4e:ba:ac:2f:87:24:35:aa:5a:33:a4:50:e9:81:
dd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CB:D4:63:CA:7A:A2:D8:B2:BE:99:18:5E:BE:B4:AA:9D:BD:21:3B
X509v3 Authority Key Identifier:
keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:7a:69:aa:aa:f0:fa:89:ed:dd:f4:b7:2b:eb:88:76:d9:52:
c6:c4:aa:0a:08:d7:9c:64:86:1b:be:ab:ed:e9:85:48:44:af:
eb:d5:78:04:cc:31:70:2b:d1:76:3b:5b:0b:ea:ae:2a:2a:59:
59:f5:49:fa:e7:7e:16:6c:44:67:d0:b6:42:40:dc:b9:14:23:
11:06:97:c1:80:8f:00:1d:1b:fc:c1:18:b1:2e:ec:dd:19:3b:
f4:2f:2d:74:1a:d4:58:7e:32:c3:b3:25:f7:e6:20:ff:18:37:
9c:ec:a1:84:00:98:a5:bb:13:ee:1c:75:7d:fe:f1:c0:bd:f5:
aa:8d:da:23:9f:a3:0e:47:a8:1e:1f:9f:a8:0f:97:1f:f0:52:
c8:f0:82:1f:79:e5:31:21:be:9f:c7:0e:b3:2d:47:23:21:5b:
f8:08:2a:5b:64:09:94:9a:09:44:cb:bc:21:62:9b:dd:8f:44:
04:7e:d2:fb:b7:f0:6f:44:00:d6:7d:6b:11:e1:fa:05:48:8c:
47:84:7d:c7:b6:30:97:c1:78:3e:86:2f:3a:0b:ee:8c:31:6b:
f8:fd:8f:9e:10:14:c8:ea:d9:fe:8b:76:cb:ed:42:ab:a9:96:
8d:e7:de:28:11:9c:2b:80:7b:4c:66:a2:06:3f:7f:61:15:3f:
9c:27:a9:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffzWUjSINWFAA/IrKelvwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTk2MjA4OTI1ZDgzNmY4ZDAzN2QxNzk5ODBhODNhMWIw
YzEzNDIwHhcNMjYwNTEzMDQwMTMwWhcNMjYwNTE0MDQwMTMwWjAzMTEwLwYDVQQD
EyhlOWNiZDQ2M2NhN2FhMmQ4YjJiZTk5MTg1ZWJlYjRhYTlkYmQyMTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lO5whGIH9UWjmrYMs2aP/ALKday
YorhMszXvvF8EfQRbeoIwNmS4odxFfn734ZwuzYCFHqSXEzIJaH+typbZwIBgpbK
ULwpOja7GS0o4xON+fbJ6Setx2gcagapbLe2O1NPuck7HS4894kQAABzupacFq70
dO7oPIA0wEQDft5oUASqxCuX86nXSkSbunnVHr1B4+0RcFntYyqTrG+UbZY6Sm/b
R+GPVXMqt79rOyrzhTlwk9bbuIluH67g/S5BUOFP2S7k6shVO9rXPkVH/3slosAm
ttAk3e8Pxc/uGdN2MxTAopbVTYCj4uMoKMBCTrqsL4ckNapaM6RQ6YHd5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnL1GPKeqLYsr6ZGF6+tKqdvSE7MB8GA1UdIwQY
MBaAFC7pYgiSXYNvjQN9F5mAqDobDBNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEt
ODQ2YWFmMGViMWFkLzEvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEtODQ2YWFmMGViMWFk
LzEvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvnppqqrw
+ont3fS3K+uIdtlSxsSqCgjXnGSGG76r7emFSESv69V4BMwxcCvRdjtbC+quKipZ
WfVJ+ud+FmxEZ9C2QkDcuRQjEQaXwYCPAB0b/MEYsS7s3Rk79C8tdBrUWH4yw7Ml
9+Yg/xg3nOyhhACYpbsT7hx1ff7xwL31qo3aI5+jDkeoHh+fqA+XH/BSyPCCH3nl
MSG+n8cOsy1HIyFb+AgqW2QJlJoJRMu8IWKb3Y9EBH7S+7fwb0QA1n1rEeH6BUiM
R4R9x7Ywl8F4PoYvOgvujDFr+P2PnhAUyOrZ/ot2y+1Cq6mWjefeKBGcK4B7TGai
Bj9/YRU/nCepGg==
-----END CERTIFICATE-----
Generated at Wed May 13 14:06:37 2026 by rpki-client