Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
File: Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft (raw, json)
Hash identifier: /juU0EFrKeyYCbAPDFUJuIipfeGGA2TehJ+TD6VdTq0=
Subject key identifier: B2:E0:E5:1C:C0:EA:A2:93:E8:B3:32:B7:CC:42:9A:8A:CB:A4:98:70
Authority key identifier: 2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
Certificate issuer: /CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Certificate serial: 019F92B613F0C368B99D623B6598E7FF4B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
Manifest number: 13D3
Signing time: Fri 24 Jul 2026 06:00:33 +0000
Manifest this update: Fri 24 Jul 2026 06:00:33 +0000
Manifest next update: Sat 25 Jul 2026 06:00:33 +0000
Files and hashes: 1: Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl (hash: 6ejVz3dOTip5LUFvjyZ+TXRdb2j+dxfRItSg9RanurI=)
2: cxkSmIpEvqEgX4ngmD4597AK9SA.roa (hash: DfRU/sR9mUrJtx0wMuwQ4hVIgyHyvsCZqXVQHIZbmPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:13:f0:c3:68:b9:9d:62:3b:65:98:e7:ff:4b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Validity
Not Before: Jul 24 06:00:33 2026 GMT
Not After : Jul 25 06:00:33 2026 GMT
Subject: CN=b2e0e51cc0eaa293e8b332b7cc429a8acba49870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:eb:07:1c:e1:ab:c7:94:c4:cd:f7:31:04:7d:
25:db:e1:99:3c:4b:b4:35:5c:33:fe:da:67:5a:a9:
7c:fd:3e:a7:b7:ec:e5:92:a1:c4:2c:a2:96:6f:2c:
68:c5:fd:73:9e:36:e0:79:2e:32:fd:9a:d4:1d:0f:
7c:66:13:bc:8c:36:16:2b:07:55:7c:81:55:75:b2:
8e:56:dd:1d:91:08:18:3d:75:5f:b6:b4:4e:46:de:
06:d1:d4:da:e2:c5:6d:cd:f3:25:b5:b3:2e:75:8c:
f5:1b:a3:82:b9:e7:09:6b:ed:eb:a2:38:50:1d:6e:
98:05:f3:48:5a:d3:5f:fe:46:99:94:33:3b:e2:3c:
ac:54:83:74:58:2e:b9:70:99:5f:ac:d8:44:be:d4:
c8:b5:8a:cd:2f:c3:6b:73:d9:cd:d5:5c:98:2a:87:
31:8d:10:ee:e0:75:2b:a3:40:fe:e5:92:6e:b9:aa:
5d:a9:13:df:4c:bd:9d:05:4f:9b:4a:2f:a8:c3:cf:
d2:14:dc:a0:ce:89:02:d4:be:4b:da:bb:9c:2b:df:
58:70:8e:0b:fe:a2:53:c8:60:21:a1:dd:38:6a:5f:
01:5d:cb:ca:e6:b1:a9:42:71:e6:98:eb:c4:f0:33:
3b:a9:cf:7f:20:a3:f0:3b:c1:24:67:02:aa:43:44:
01:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E0:E5:1C:C0:EA:A2:93:E8:B3:32:B7:CC:42:9A:8A:CB:A4:98:70
X509v3 Authority Key Identifier:
keyid:2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9d:57:42:7a:be:4f:f0:41:70:39:7c:1a:f5:3b:83:05:a5:
ab:3c:31:0f:00:d7:b5:be:68:2c:7b:a0:bd:48:4c:80:ad:e9:
10:5c:71:dc:77:53:14:05:bc:5d:66:49:2b:01:89:44:86:9f:
11:20:84:32:10:51:06:4f:6b:09:05:2b:9a:fb:9d:3f:2c:8f:
76:77:f6:cd:ef:3d:7a:e1:b1:8d:67:14:7d:49:3e:22:ab:dc:
97:ee:d6:2e:85:b1:51:37:b2:a3:ad:2a:40:fc:89:06:2a:cf:
a5:22:61:e8:72:43:c1:31:c5:d9:cc:18:57:90:48:25:3c:d4:
4f:cb:7e:cb:cb:cd:39:09:ea:38:62:b9:2f:c3:a1:67:ba:19:
65:0f:2f:c9:c9:cb:23:2d:0f:58:54:b7:c2:fb:82:9c:c6:61:
21:85:fa:1b:b2:5b:f2:75:50:f2:78:7d:9f:d4:97:42:aa:65:
58:ca:43:4b:11:2f:3a:32:96:12:9e:b9:3a:df:4e:68:cd:69:
ef:0e:ab:ae:44:20:71:51:a9:f9:72:82:10:e6:e8:50:4c:21:
83:c1:79:e5:e3:7b:5a:a4:d0:8b:14:77:21:28:b6:33:7a:90:
82:a7:47:14:89:5f:de:f8:a4:37:3a:1d:5a:55:ef:98:fe:3b:
de:c9:61:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:46:30 2026 by rpki-client