Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
File: lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json)
Hash identifier: 681fN0GVrOF+so2zR5Uj7g8CW8507JVaM9vI6XZNYrg=
Subject key identifier: 34:38:DE:6A:A5:1E:B2:3E:E0:E8:3C:3A:49:04:04:CB:BD:9E:D4:F3
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Certificate issuer: /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial: 01A0DD29431F2E584ED05666D83A536395C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
Manifest number: 0584
Signing time: Sat 26 Sep 2026 10:01:03 +0000
Manifest this update: Sat 26 Sep 2026 10:01:03 +0000
Manifest next update: Sun 27 Sep 2026 10:01:03 +0000
Files and hashes: 1: 7lwx1zJrY0F3LdoEn_iJXa3pM84.asa (hash: Q0oQMweHsmrfdfYTRFNKYhoRxahIkowVFvNwfkroZB4=)
2: EhjDtKMsVMUs0ZuH-lX2Q3No4_k.roa (hash: dyUmYbTgpywEf3UhaQdBj3HPVSQs7lYIPuCIHhpwi/A=)
3: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: O03GS3HK9RiGSf1iUpBr4TB/sPlj4qoztDY7YF9d9cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:43:1f:2e:58:4e:d0:56:66:d8:3a:53:63:95:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Validity
Not Before: Sep 26 10:01:03 2026 GMT
Not After : Sep 27 10:01:03 2026 GMT
Subject: CN=3438de6aa51eb23ee0e83c3a490404cbbd9ed4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:5f:ed:a7:fb:96:ff:be:73:89:a8:4d:0e:
3c:f6:74:bc:e2:1b:8d:d4:21:76:40:f2:c8:df:80:
db:6d:70:38:3b:6a:4a:52:fb:82:62:9b:1a:68:c1:
1c:b8:10:e8:32:21:72:dc:bb:06:e0:58:69:8c:cd:
92:50:2c:c9:e1:b2:17:a8:9c:46:11:c6:dc:9f:59:
64:42:c0:fb:67:42:13:a6:4d:8b:05:d4:e3:c7:fb:
d4:da:17:8d:4c:a2:35:c5:cd:0c:3e:ed:9a:b3:0c:
ea:60:1a:23:63:c1:be:41:d0:37:f3:66:1a:a9:5b:
13:28:a3:52:a6:f2:93:56:b3:5f:fe:2b:d8:bb:60:
e6:f9:b5:73:fd:e4:a4:2f:1f:5f:42:ec:0b:cb:fa:
4f:8a:6b:42:c8:98:55:ab:aa:5b:08:57:d8:16:de:
63:96:b2:07:5f:2a:5a:85:f7:3d:d9:85:ea:8e:57:
12:52:e3:eb:ba:52:ba:b0:3a:83:11:ca:0d:6d:19:
32:15:d6:7d:fa:43:6d:b3:46:4f:09:e0:45:5f:2b:
24:17:7a:d6:35:91:0a:1e:24:bd:95:e7:f2:00:3d:
fb:ff:67:b1:87:85:a3:2a:18:7b:f1:da:d1:08:c5:
2d:97:9f:99:6a:f5:2a:54:46:c6:e6:c4:58:d1:60:
54:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:38:DE:6A:A5:1E:B2:3E:E0:E8:3C:3A:49:04:04:CB:BD:9E:D4:F3
X509v3 Authority Key Identifier:
keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d3:ea:db:f7:cb:e0:1d:b1:60:e7:fe:aa:58:54:4b:e4:09:
4c:67:3d:cb:f9:7b:0c:13:91:b3:26:10:64:1d:5a:8b:9b:61:
dd:87:c3:98:d1:f0:6a:89:42:fa:e8:ac:e7:78:65:b7:b8:91:
2d:eb:64:1d:2a:95:5a:0f:01:c1:8e:7f:e4:6f:2d:5c:b4:5f:
03:99:65:9a:f9:cf:39:62:49:c7:b2:8c:dc:d5:b9:cc:46:9e:
40:47:b5:bc:25:b3:65:10:82:00:85:1b:1a:a1:3c:98:7c:88:
0e:1f:86:64:41:c1:17:fe:97:5b:de:58:2f:64:cc:01:2e:1b:
b9:c0:4b:04:eb:3f:85:ca:2b:82:8c:be:e3:b9:f8:e7:4a:b2:
73:6a:3c:44:b2:4c:88:81:84:a0:e1:3d:5f:90:01:fe:48:c4:
93:0f:80:bd:8a:1d:df:8e:e1:55:33:f7:55:90:35:95:d0:1b:
79:2c:96:6e:8a:72:3e:9b:bc:aa:01:5c:21:91:39:1f:c7:10:
b5:2f:28:40:45:0d:63:e0:12:9d:aa:4c:c5:22:a2:af:b0:ff:
05:91:4c:35:92:5a:5d:be:78:0c:6e:2d:63:e4:04:7a:2e:9c:
b8:3e:46:c5:87:b6:e6:c5:27:ef:de:36:a4:f2:18:ff:9b:d4:
78:80:a8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:02:14 2026 by rpki-client