Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
File: lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json)
Hash identifier: jzZA6y9sVr+2aXcHsmdKmuD2FUR+Kmw1ts5Vfk7B1pU=
Subject key identifier: 3D:18:E3:17:78:5E:E0:18:C5:64:B8:8F:84:D3:08:22:C1:A4:F2:58
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Certificate issuer: /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial: 019D265F8DE8139ED1A8C4694F13325D35DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
Manifest number: 0397
Signing time: Wed 25 Mar 2026 19:01:29 +0000
Manifest this update: Wed 25 Mar 2026 19:01:29 +0000
Manifest next update: Thu 26 Mar 2026 19:01:29 +0000
Files and hashes: 1: EhjDtKMsVMUs0ZuH-lX2Q3No4_k.roa (hash: dyUmYbTgpywEf3UhaQdBj3HPVSQs7lYIPuCIHhpwi/A=)
2: Lw7L_6TL3xXAOYbu4BXtgufTgsE.asa (hash: PLDlG1iHC8FjmM9ZbPbgJZ/cE8eZpKuBZFtO/3E37fU=)
3: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: BMazWz46Y4o6ui3G7yKo24Yt1KeG8W+AT3eX9ZICReQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:8d:e8:13:9e:d1:a8:c4:69:4f:13:32:5d:35:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Validity
Not Before: Mar 25 19:01:29 2026 GMT
Not After : Mar 26 19:01:29 2026 GMT
Subject: CN=3d18e317785ee018c564b88f84d30822c1a4f258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:70:df:d8:3e:fc:75:5a:e7:f7:f4:58:19:03:
0e:af:1c:95:49:05:1d:4c:8f:20:5d:a1:d9:f1:8b:
b4:62:f2:4b:1d:c8:a6:cf:d7:c2:52:a3:9d:33:0b:
93:96:72:bc:e8:e2:a8:1a:60:f7:8b:7a:d5:9d:89:
37:14:d1:1c:b5:61:fd:ec:94:ee:87:71:f3:f7:7f:
da:7d:5c:ff:92:ce:82:64:9e:ab:14:c0:8f:31:bf:
b7:c4:3e:6d:bf:1b:d7:a1:f9:b1:c8:55:23:e2:e4:
bf:19:4c:ec:d6:32:b2:3f:37:15:6c:73:0d:61:9a:
0c:41:24:2e:75:b0:5e:1a:96:45:68:6f:f5:58:af:
e3:21:98:65:2f:5d:ef:cd:51:3c:9e:64:b6:c3:59:
51:df:3b:fd:cb:f6:26:68:12:c2:d8:5b:c7:a9:b0:
8f:0a:fc:5e:c9:06:83:0e:6d:b2:9f:e1:70:f2:d5:
51:b9:79:14:93:3d:e4:30:fb:af:b4:26:e5:96:be:
53:d5:dc:4e:96:dc:ab:8b:e5:69:89:d5:ed:ff:51:
ae:53:8d:50:f8:49:58:d6:a4:ec:eb:17:0f:96:2b:
45:28:f2:d0:e9:af:92:74:b5:8e:60:73:9f:d3:78:
c4:32:a1:a1:d7:2e:42:a2:5a:3a:4e:ed:6b:07:a4:
e3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:18:E3:17:78:5E:E0:18:C5:64:B8:8F:84:D3:08:22:C1:A4:F2:58
X509v3 Authority Key Identifier:
keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ab:74:e1:14:d8:9f:f3:72:1c:e2:97:4c:8c:e8:74:a5:ef:
36:f9:2e:62:83:4c:8d:28:30:2d:4c:7f:e8:ca:71:3c:5f:14:
f1:89:f9:a8:47:33:1a:bb:f6:7b:b0:0a:56:52:45:23:69:67:
13:b2:bf:09:9b:11:a6:96:f4:88:60:4f:c9:45:23:07:68:c3:
71:d5:74:ae:15:89:91:fc:f3:cd:de:f7:f1:2b:d0:e1:26:63:
e9:2a:2c:73:24:f4:8c:e2:7c:03:04:3f:8b:ed:b4:d0:4c:3a:
42:f0:75:81:55:92:81:9c:65:bd:dd:9d:27:f3:21:50:ae:4b:
10:19:dc:5c:c9:0f:32:93:62:61:ea:06:df:4c:22:f7:84:7b:
80:cf:dc:67:0e:81:75:bf:9c:f6:75:d0:1f:dc:11:77:53:cf:
12:4c:79:ce:2a:68:19:6d:c3:86:22:3b:1d:04:8f:73:c5:74:
5e:31:26:3f:91:1f:8a:32:8b:8c:db:21:da:e9:b5:93:7e:9c:
fb:1e:ed:6a:fd:9a:1f:d2:08:73:82:3f:cc:f7:57:21:5c:e1:
43:b7:b9:23:7d:c4:3a:e5:50:2e:cf:ad:88:b3:d6:23:5b:f3:
4f:de:04:24:7a:7d:10:89:50:f2:3d:0c:70:64:90:b7:51:44:
73:a2:37:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:44 2026 by rpki-client