Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
File: LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json)
Hash identifier: yGJQ4pmMzNpVqZihxSjLvsaXQ5W1jIhncjz9jhE+7Hs=
Subject key identifier: F6:C0:68:35:4B:04:78:9E:7A:4A:DA:6B:DA:3F:F4:88:CF:84:B7:6A
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial: 019F94364EBDB0A47A18CA117410133F6AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 13:00:14 +0000
Manifest this update: Fri 24 Jul 2026 13:00:14 +0000
Manifest next update: Sat 25 Jul 2026 13:00:14 +0000
Files and hashes: 1: 08zs1vez5T3OxmoffP4v4xK9YRM.roa (hash: uy8J25dlMEzvaPv80sYDbmqCg6sB5jPeyau+AuQ0+dM=)
2: 1k_gsLYQzZ2auoJeJkWUzu7Ie1o.roa (hash: QopUlfrOmMWf3HhqNYkuS7EjOhnM84v1jbZHx5PFkcs=)
3: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: FKTGeju52Big3Vju3gZvUBsD45SlkyLXdBH0ozdlj48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:4e:bd:b0:a4:7a:18:ca:11:74:10:13:3f:6a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Validity
Not Before: Jul 24 13:00:14 2026 GMT
Not After : Jul 25 13:00:14 2026 GMT
Subject: CN=f6c068354b04789e7a4ada6bda3ff488cf84b76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:14:2c:5c:f8:fa:59:b0:5c:80:c9:95:23:62:
d7:fe:54:37:e9:9e:7a:ba:b7:3c:35:e4:ad:2f:af:
3c:3e:0e:91:d6:fb:95:71:76:d5:a4:b4:d9:35:de:
23:a4:03:12:d1:07:bc:72:ed:8f:7e:53:71:22:cb:
16:6d:98:26:f8:b3:0e:a3:89:66:67:23:4a:31:dc:
17:46:c4:e9:78:3b:55:79:0a:ba:5d:e9:cc:23:91:
e4:89:ad:9f:6f:3a:e8:64:7f:36:c3:20:86:dd:91:
d0:00:11:83:85:86:b1:03:e6:70:5c:ff:07:37:17:
40:08:be:9a:5a:b8:4f:50:c0:b0:3e:9f:ea:25:ef:
e3:cd:58:d0:77:f7:75:75:12:c7:3c:0c:b0:3e:81:
ca:72:13:e2:8c:0f:14:ad:61:1a:c3:af:99:f7:45:
f4:bb:88:5e:17:f9:0e:f3:c9:87:28:60:ef:1d:ed:
51:21:3e:6f:5f:d1:be:c9:6f:98:f3:10:98:4f:c4:
3b:8a:cf:cc:36:be:de:0b:8f:bb:36:dc:97:f5:2e:
1e:1e:50:67:72:45:c1:ee:12:90:86:24:3a:2e:f5:
3d:f1:8f:b5:77:dd:1b:66:8d:d6:07:6b:0e:41:58:
43:e1:c8:06:24:15:57:d9:4d:97:c2:9f:e3:7c:29:
30:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C0:68:35:4B:04:78:9E:7A:4A:DA:6B:DA:3F:F4:88:CF:84:B7:6A
X509v3 Authority Key Identifier:
keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b3:a4:3f:5d:cd:37:e2:24:ca:92:b8:2b:87:c4:1e:60:86:
7e:c5:1e:2f:7d:35:06:4a:b4:6d:c2:ac:b3:c7:f3:33:0f:e9:
9e:c4:fe:6e:c7:dd:ac:fc:5a:8a:ac:9f:f1:f5:e4:2c:e4:43:
bc:a9:f4:a1:92:40:ba:a2:d6:0c:c1:42:45:80:da:78:32:65:
a2:f4:b9:39:c9:77:b3:52:0a:32:5b:1a:f0:b5:5c:04:63:d5:
f8:50:15:3d:ff:53:11:d3:06:af:67:d1:ee:54:b9:ff:c4:7d:
27:52:69:5d:9b:a0:b6:3e:df:cc:62:10:fc:1d:4d:7d:86:64:
4c:ba:d5:81:8e:b5:b5:5e:88:ff:f4:e1:02:11:3d:8b:3c:e8:
4a:81:43:0a:3b:2d:40:d1:ad:e4:8e:9c:c2:86:14:23:56:97:
16:aa:86:ff:d8:8e:23:e5:c6:16:75:18:65:a1:b1:6f:1c:cc:
20:17:c2:99:d3:60:08:94:ea:cc:8e:5b:d5:7f:90:4d:1a:7f:
3d:04:21:35:50:6d:10:28:d0:b7:5d:c7:20:7b:cd:26:ee:26:
e9:c1:77:c8:b7:d7:fd:4e:36:2d:ed:d9:5a:7b:c4:1f:a8:56:
14:ea:5f:b8:f9:5e:03:ef:6f:ce:34:95:2c:8d:3c:14:6f:81:
0e:23:d7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:29:22 2026 by rpki-client