Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
File: lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json)
Hash identifier: mO/aRV8vkXT0vsedjGb4rv0MSI5hKkVYTRs4QUna0bI=
Subject key identifier: DD:F0:14:6A:EB:F3:BC:74:F5:EF:31:F1:CF:62:51:F7:E5:D2:97:6B
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Certificate issuer: /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial: 01A0E1066C7FA70BF0378FF2EE3978ECCF30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
Manifest number: 0586
Signing time: Sun 27 Sep 2026 04:01:29 +0000
Manifest this update: Sun 27 Sep 2026 04:01:29 +0000
Manifest next update: Mon 28 Sep 2026 04:01:29 +0000
Files and hashes: 1: 7lwx1zJrY0F3LdoEn_iJXa3pM84.asa (hash: Q0oQMweHsmrfdfYTRFNKYhoRxahIkowVFvNwfkroZB4=)
2: EhjDtKMsVMUs0ZuH-lX2Q3No4_k.roa (hash: dyUmYbTgpywEf3UhaQdBj3HPVSQs7lYIPuCIHhpwi/A=)
3: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: ZaOl4+9sLtRkudYn5C9Eh5b6mjj5gwNDloZm97+89k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:06:6c:7f:a7:0b:f0:37:8f:f2:ee:39:78:ec:cf:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Validity
Not Before: Sep 27 04:01:29 2026 GMT
Not After : Sep 28 04:01:29 2026 GMT
Subject: CN=ddf0146aebf3bc74f5ef31f1cf6251f7e5d2976b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4b:36:5f:b7:5d:09:94:19:b4:a9:c1:c9:98:
bf:98:21:27:a0:40:79:08:43:8c:0d:aa:64:e1:0a:
16:d5:5e:95:83:41:63:9b:e7:0d:f9:92:af:8a:91:
65:36:72:dd:9a:99:ea:f8:ec:63:68:ed:ec:75:de:
9e:6a:15:eb:aa:b7:87:a2:bd:7e:0f:b5:f7:0f:19:
ff:72:cf:f8:82:b8:06:89:50:b8:22:b0:46:0a:c6:
03:5b:55:f9:2e:aa:fb:f1:0e:be:de:0d:78:10:92:
29:9c:e9:53:57:9b:09:4e:90:71:85:b3:92:81:c2:
ec:db:e9:65:99:c2:aa:18:3d:c4:48:71:56:b2:fb:
35:08:ad:25:31:60:0d:72:8e:36:12:71:e1:73:ac:
cc:db:87:e6:c9:a7:2b:bc:f6:91:ee:4d:04:f8:f7:
79:ba:92:1e:e8:a9:89:94:ee:b3:39:2e:3c:5c:e9:
e7:5d:72:43:2f:d8:6b:5f:70:5c:d0:01:91:6d:31:
43:1f:e5:15:10:90:62:a0:f4:2d:41:c6:cc:ec:3b:
65:35:83:e7:c5:96:33:32:f7:ff:a5:ee:a3:7b:93:
34:2c:5b:4d:5b:26:c7:ab:d9:82:56:d4:a7:0e:08:
f7:53:e4:d8:6e:ab:89:03:86:66:a9:85:39:83:e6:
a6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F0:14:6A:EB:F3:BC:74:F5:EF:31:F1:CF:62:51:F7:E5:D2:97:6B
X509v3 Authority Key Identifier:
keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ff:f9:dd:7c:f0:89:3c:a2:ed:43:6e:83:f0:42:df:ab:99:
f2:8a:e8:0f:4d:dc:ba:20:58:ad:95:14:80:b9:aa:ba:d1:bb:
a2:b6:85:31:0a:3c:78:7f:f8:42:88:88:a4:2e:bc:cb:e7:ea:
d4:d2:b8:96:04:88:54:99:02:6d:4c:08:51:6f:25:d2:14:4f:
00:79:75:9c:75:28:41:56:f6:34:89:00:a3:d4:45:0a:1f:ed:
7f:05:03:83:20:84:01:48:a8:07:f0:23:d6:30:df:fc:38:bd:
f3:8c:bb:e6:5e:52:00:81:8f:d5:fe:80:72:9c:35:0b:ad:ff:
ac:23:dc:38:7d:6e:89:ca:d1:cb:ce:06:4b:d1:32:02:a8:33:
e1:2d:52:ea:3b:23:70:84:4e:14:8d:75:64:ae:e9:b3:8d:b5:
9d:bd:ea:83:66:9a:3b:80:cc:04:c6:72:95:e0:d3:2f:8e:e1:
25:f5:c8:58:1e:a4:48:62:65:cf:bd:09:b3:c3:8d:48:33:73:
27:6c:b4:f1:3e:ba:19:04:78:b1:5a:aa:c7:a6:68:aa:f8:69:
83:20:65:b7:09:e4:6d:bc:ae:38:fe:8d:3b:a0:9a:b1:66:fa:
5b:fe:82:be:48:bc:d6:5f:a9:96:28:23:34:0f:08:04:33:cd:
c7:b1:d0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:26:58 2026 by rpki-client