Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
File: lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json)
Hash identifier: wpEYlHDN7vUusvKHaZmkBDyl0f2HvlDubtQaWHi6mOY=
Subject key identifier: 88:7D:AC:F0:6E:4C:B6:10:E4:38:F8:04:C6:B9:04:50:02:32:B0:7D
Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Certificate serial: 019D273A9F80B16D51BD92517924DB9E4E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
Manifest number: 0BA6
Signing time: Wed 25 Mar 2026 23:00:46 +0000
Manifest this update: Wed 25 Mar 2026 23:00:46 +0000
Manifest next update: Thu 26 Mar 2026 23:00:46 +0000
Files and hashes: 1: Hw97gFeq9kX_yGiriy5YWSviL7I.roa (hash: geBLQXUNVCDp1lRH1gHpPHwudjQBTslh6GIdsZoKBSA=)
2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: w0ls+i4xHtK29BZhVV4QHgc3wDAu78qawRD2em0g130=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:9f:80:b1:6d:51:bd:92:51:79:24:db:9e:4e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Validity
Not Before: Mar 25 23:00:46 2026 GMT
Not After : Mar 26 23:00:46 2026 GMT
Subject: CN=887dacf06e4cb610e438f804c6b904500232b07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8b:f8:37:06:d2:0d:fa:40:b8:cd:40:53:08:
67:38:f3:48:b3:d7:73:41:b7:0e:f5:fe:09:08:58:
d6:7b:c9:7b:6f:36:d9:ee:fe:93:70:b6:23:e4:b2:
2b:40:19:da:c6:99:b5:81:cc:a2:d7:1c:5f:62:db:
6f:9a:0f:69:70:00:08:c0:71:8c:39:8d:dc:12:3b:
2d:fb:36:3f:1e:1b:66:13:2d:fd:93:20:40:4a:b9:
5e:c0:8d:69:9d:25:69:c4:6e:b9:40:7c:3f:63:2d:
a6:e8:9b:9d:8d:6c:10:9e:c9:ab:42:a0:17:70:e4:
43:cd:5a:7a:af:32:8c:01:62:c3:d0:55:f0:f3:4c:
f9:a6:6e:58:2e:66:cf:58:c7:27:ba:05:52:0f:af:
f0:3a:de:a8:1d:f0:8f:31:e3:fa:53:f5:53:3f:8c:
97:3b:fa:7e:40:24:55:8b:9d:43:e6:8c:bb:94:ba:
9a:f5:45:29:4e:87:a1:fc:34:f8:9c:be:40:65:df:
ae:a7:73:e2:17:22:9d:c4:2f:af:ed:ba:98:af:94:
bd:18:e8:68:b2:0c:2f:3c:35:b3:9e:e6:d7:4d:a8:
07:85:4b:e3:47:e2:7a:8d:22:86:0d:1c:f3:0c:28:
36:4f:28:da:99:ee:2d:80:16:b6:90:1f:d9:79:5f:
b3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7D:AC:F0:6E:4C:B6:10:E4:38:F8:04:C6:B9:04:50:02:32:B0:7D
X509v3 Authority Key Identifier:
keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:0e:00:f9:8c:d6:8a:3c:c6:d0:d2:7e:9e:a5:21:ef:c4:1d:
94:3e:e7:01:65:08:0a:83:51:cf:05:21:ea:0a:2d:a3:97:62:
6c:42:35:e1:3a:04:3d:c2:f1:4f:80:0e:90:ad:86:d0:32:68:
5e:a3:d3:b1:d9:27:e2:43:94:7b:b2:b0:5a:83:25:d6:c5:c7:
68:0d:58:3f:f3:df:76:78:cc:7c:57:2f:78:22:98:f5:c3:15:
3b:c1:ef:88:3c:e7:63:73:c6:c4:d2:71:f1:14:bf:ee:74:57:
36:b3:58:4b:f8:4e:df:e7:27:d8:60:7e:3d:53:1e:d8:2b:a6:
ca:fc:b3:d9:af:b2:ed:eb:7a:58:be:09:bb:50:53:ff:4f:ec:
23:09:7a:17:d8:0c:5e:9a:0f:c0:4e:5f:9c:a4:39:53:09:99:
63:a9:12:af:1b:e5:2e:b5:1a:d7:b2:79:29:98:58:b3:4c:74:
ff:6f:08:4c:56:e4:c1:24:b7:2f:a8:41:0e:75:08:65:66:99:
2c:82:15:63:f1:a0:ef:21:b6:98:7b:ef:c3:40:50:76:2f:d9:
6b:e8:bb:1f:af:d1:a1:bc:73:99:6a:d9:8f:3a:53:04:eb:f5:
7f:39:f6:fc:31:de:23:18:66:89:82:89:67:c5:77:93:1b:d4:
a9:7e:c3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:43:07 2026 by rpki-client