Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
File: LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json)
Hash identifier: QOBIXDAV7xRPzcr4Hq/4KRIwvI3TA4hrRUhC4wl/QE8=
Subject key identifier: CB:91:FC:55:9E:6C:62:DB:FE:85:BB:34:F9:E9:DE:AC:6E:CD:BE:8D
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial: 019D284E0ECE8C1FC8BE0075FA3A857CB6CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 04:01:37 +0000
Manifest this update: Thu 26 Mar 2026 04:01:37 +0000
Manifest next update: Fri 27 Mar 2026 04:01:37 +0000
Files and hashes: 1: 08zs1vez5T3OxmoffP4v4xK9YRM.roa (hash: uy8J25dlMEzvaPv80sYDbmqCg6sB5jPeyau+AuQ0+dM=)
2: 1k_gsLYQzZ2auoJeJkWUzu7Ie1o.roa (hash: QopUlfrOmMWf3HhqNYkuS7EjOhnM84v1jbZHx5PFkcs=)
3: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: Bsl47s9cgJ0AnVgi/pzVqgRiPrhx7an1d2VyCHwccLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:0e:ce:8c:1f:c8:be:00:75:fa:3a:85:7c:b6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Validity
Not Before: Mar 26 04:01:37 2026 GMT
Not After : Mar 27 04:01:37 2026 GMT
Subject: CN=cb91fc559e6c62dbfe85bb34f9e9deac6ecdbe8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:df:24:28:51:c5:60:5e:b1:73:93:e2:24:cc:
cf:b2:ae:fb:c6:10:67:b2:01:75:ef:76:12:ea:61:
5c:07:1a:3c:5e:62:67:1e:c5:60:3d:76:d0:78:84:
5d:f6:59:7c:83:35:8f:b7:f2:06:bd:3e:2f:38:e6:
83:48:b9:cb:b6:46:5e:f7:5a:a3:c5:9f:77:93:14:
65:d4:5a:ea:d8:f4:c0:ec:6a:07:74:5b:cb:6e:85:
5c:75:34:2c:25:0a:59:20:e5:90:dc:9d:e2:4e:ef:
4b:e9:c5:91:42:6a:9b:f1:af:d3:4a:c2:dc:65:a7:
aa:be:9c:20:77:a4:a7:7a:71:9b:82:8f:f3:06:74:
73:7c:e1:5b:24:02:b0:9c:03:2c:3e:5a:42:06:1c:
12:60:cf:b8:e7:58:15:84:53:e6:db:68:1e:d4:5a:
45:10:a5:14:43:15:b9:e4:9b:2e:09:ec:01:1c:3e:
ea:05:52:2a:95:64:94:dc:be:6e:93:ea:f6:6a:6f:
69:a0:3e:22:95:94:3f:a0:22:ee:0d:0d:7b:87:92:
39:03:00:29:1e:2c:86:4d:3b:f9:89:69:8e:9f:5e:
c0:3e:b4:04:d8:13:7e:50:bc:f5:df:f8:5f:d6:6a:
d0:15:73:55:18:62:c1:22:0f:13:44:bd:fd:f7:46:
70:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:91:FC:55:9E:6C:62:DB:FE:85:BB:34:F9:E9:DE:AC:6E:CD:BE:8D
X509v3 Authority Key Identifier:
keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:03:59:77:61:18:13:3b:39:bd:cc:8c:70:e5:03:7f:f3:13:
a3:5e:ae:4f:96:f6:d2:3c:68:b2:97:54:08:ff:c5:7c:4e:43:
74:a4:6f:c9:26:a3:43:af:73:b2:34:12:c7:cb:64:83:ca:73:
8d:fa:88:4c:dc:2c:c5:c7:24:1d:59:df:9d:74:76:6f:d0:3d:
b1:19:16:72:d2:a9:97:bb:c8:63:99:ab:49:b1:80:01:e2:3b:
67:7c:64:c8:32:62:5c:a9:40:0f:09:3e:9d:c4:b2:df:0c:cb:
13:86:d1:61:5a:8a:98:20:0b:65:23:ac:2b:53:c1:00:61:39:
6b:55:2f:23:b9:f1:f5:ab:fe:72:49:b1:00:81:50:85:82:83:
a8:3b:50:90:c5:5c:cd:20:f0:d2:da:07:85:bf:73:3b:40:1b:
99:f7:69:43:09:86:cb:5e:1f:5a:70:b4:d7:b2:91:33:20:de:
3d:7b:c9:7f:4b:dc:3b:e4:3d:82:4a:09:e0:ce:80:67:81:1d:
9a:7d:2a:5d:f1:6a:73:ed:77:d7:32:cd:41:9c:04:15:71:5c:
2e:7c:c8:af:d6:bb:ff:60:d0:9c:90:53:ea:79:bb:d4:dc:ef:
e1:3b:5f:cd:21:37:c4:02:23:f2:16:7a:90:7d:fb:f4:21:12:
61:39:51:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:19:47 2026 by rpki-client