Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
File: lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json)
Hash identifier: lOu5cuol/viYPNoHJggWoU/1Ym9nTPSrCjavZAMpJKg=
Subject key identifier: 28:DE:00:6F:EC:2A:44:2F:2C:E9:A5:AF:EB:B1:B3:8E:0C:1F:C0:7E
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Certificate issuer: /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial: 019E1CEB5E837B1F1C03A907E4CFD5FFD778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
Manifest number: 0417
Signing time: Tue 12 May 2026 16:00:47 +0000
Manifest this update: Tue 12 May 2026 16:00:47 +0000
Manifest next update: Wed 13 May 2026 16:00:47 +0000
Files and hashes: 1: EhjDtKMsVMUs0ZuH-lX2Q3No4_k.roa (hash: dyUmYbTgpywEf3UhaQdBj3HPVSQs7lYIPuCIHhpwi/A=)
2: adJ8Ky_ronY-yz7LKBDyvuJ2060.asa (hash: XoaHtIBvAUQh2znuwTfM9cH8f4q14SD4Tb4S0zzg0E0=)
3: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: LBYv8rEiwR38ymvBr85X+Y04eBNmOM82ER5N4vmSS4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:5e:83:7b:1f:1c:03:a9:07:e4:cf:d5:ff:d7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Validity
Not Before: May 12 16:00:47 2026 GMT
Not After : May 13 16:00:47 2026 GMT
Subject: CN=28de006fec2a442f2ce9a5afebb1b38e0c1fc07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6e:ad:de:87:b3:18:0a:e2:be:39:e9:34:45:
66:2c:84:d5:07:2c:c3:a2:bf:b4:95:da:45:da:39:
70:b5:02:64:80:0a:68:d3:64:80:9e:88:11:81:a7:
71:08:66:ba:5b:6d:7a:f8:86:db:81:31:e9:ab:db:
6c:6b:cf:ee:03:eb:11:43:72:d3:97:df:1c:f2:68:
1a:f6:2d:2e:b7:fa:5d:0e:82:ae:27:8c:28:fa:48:
e8:77:83:36:42:8c:dd:38:27:ec:f0:6f:1f:e9:99:
c2:77:b4:1f:13:6a:92:6a:77:84:a5:73:35:ee:de:
5d:45:c7:43:b2:2e:12:64:7f:a0:5f:20:67:b7:e4:
d3:bb:1a:70:bc:fb:60:26:16:d5:0a:05:4b:be:60:
c1:e5:d8:37:32:a0:79:9b:d1:8a:69:d1:dd:12:35:
1e:43:fa:e9:42:5d:3e:17:ff:1d:31:ae:34:da:ef:
74:fe:01:b0:7d:01:ab:ee:4c:57:e1:62:8f:06:6e:
80:b3:a9:e0:ea:fd:9c:37:9c:5e:ab:1d:50:a2:b9:
53:f9:fc:61:96:c9:07:30:01:ff:3f:1f:76:c2:2f:
57:22:40:d0:2c:12:cc:8b:1d:35:ec:91:f2:e6:d2:
a0:3e:a4:54:bf:11:41:b9:50:5f:49:ac:82:af:35:
bf:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DE:00:6F:EC:2A:44:2F:2C:E9:A5:AF:EB:B1:B3:8E:0C:1F:C0:7E
X509v3 Authority Key Identifier:
keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:3e:d8:a6:c1:9f:05:d8:e3:49:de:60:13:7d:a7:ce:8f:48:
a6:9a:3f:a3:f8:21:d5:31:b2:7c:50:ca:62:d5:70:05:e1:2b:
ff:db:aa:e4:95:3a:90:41:5d:1e:9a:de:b5:99:e2:7b:c0:82:
9d:00:ad:22:a6:86:bc:22:ac:32:d8:19:11:8e:74:0b:75:3a:
fa:7d:8b:c4:e3:26:ca:4a:42:d9:d9:1f:d7:4a:49:34:48:65:
1a:14:41:5a:5c:4d:07:d6:69:fa:31:23:0b:6a:3c:37:4b:3f:
55:9e:5b:f2:46:ba:76:5c:5e:f6:5c:58:5b:61:52:96:03:b0:
d4:aa:6b:81:7d:2d:98:09:05:4a:43:f8:b7:e1:da:2f:a8:09:
53:1d:20:f1:47:0f:d9:7c:9a:dd:f8:77:1f:23:a0:77:55:63:
b0:b5:77:4e:59:94:76:7a:12:61:8d:de:8f:66:4c:36:23:57:
7a:30:0c:8c:68:de:e4:1f:06:33:21:fe:cb:eb:77:c8:b9:17:
fc:43:97:10:dd:f2:70:a1:2f:c5:7c:0a:5f:62:b0:6e:53:72:
59:c5:1f:55:f3:70:95:7d:f1:88:85:ec:29:8f:b4:aa:79:30:
7d:46:fb:30:eb:3a:71:d7:d3:9d:6b:13:31:84:ef:03:32:1c:
a3:84:94:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:02 2026 by rpki-client