Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
File: lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json)
Hash identifier: 3YQtILv3RX/32AB4GMbCgqXIBCpwDCYjtZHbyePj5y4=
Subject key identifier: 02:8C:4E:4D:68:B6:19:77:A6:B9:2A:28:70:58:F3:AD:37:72:E2:91
Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Certificate serial: 019F91359F63F5CFB98484B6D7CC52AE1664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
Manifest number: 0CE6
Signing time: Thu 23 Jul 2026 23:00:38 +0000
Manifest this update: Thu 23 Jul 2026 23:00:38 +0000
Manifest next update: Fri 24 Jul 2026 23:00:38 +0000
Files and hashes: 1: Hw97gFeq9kX_yGiriy5YWSviL7I.roa (hash: geBLQXUNVCDp1lRH1gHpPHwudjQBTslh6GIdsZoKBSA=)
2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: T1Un8c1eoLYsyZ+WkoYtWGl1qckskGVhrZFRKQegu6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:9f:63:f5:cf:b9:84:84:b6:d7:cc:52:ae:16:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Validity
Not Before: Jul 23 23:00:38 2026 GMT
Not After : Jul 24 23:00:38 2026 GMT
Subject: CN=028c4e4d68b61977a6b92a287058f3ad3772e291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:33:f6:b1:5c:40:a2:2e:93:04:58:85:7a:22:
77:cc:fa:c8:40:72:9c:0c:89:df:dd:c9:ce:dd:39:
5e:36:3c:40:11:b8:2e:2f:db:d9:57:20:15:21:76:
e7:c5:fe:39:9e:56:33:78:b6:36:c1:a2:8e:de:64:
d0:14:5f:67:5e:d9:09:34:56:5a:3c:48:ee:e4:11:
30:30:52:03:e9:7b:cf:15:51:21:d1:a8:21:dc:b7:
62:f6:13:0a:49:91:16:10:93:6c:3e:90:b9:47:39:
4b:37:df:8e:0a:71:7d:12:3b:b5:2e:09:f1:46:21:
e6:59:68:ec:f2:6f:2a:6b:1f:c5:f2:ba:9f:af:3f:
b7:07:b5:60:9a:3b:92:ea:af:4a:4a:20:82:c3:57:
46:3f:64:e3:6e:4d:e4:f5:83:99:5a:c3:3f:5a:16:
90:c2:6d:0e:b6:02:ee:4c:3a:42:45:00:a2:54:ec:
21:02:79:dd:46:00:7f:a9:38:eb:bf:a9:6e:11:b6:
6e:62:d5:3b:22:89:ed:3e:3b:64:f0:de:f2:50:55:
01:58:40:71:ca:1c:1b:2f:0d:a9:62:bf:11:26:02:
9d:ac:b2:82:60:42:de:1e:eb:91:bd:33:f0:d9:ab:
af:89:4a:47:d6:1c:8d:30:60:28:57:d1:c0:bf:2d:
34:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8C:4E:4D:68:B6:19:77:A6:B9:2A:28:70:58:F3:AD:37:72:E2:91
X509v3 Authority Key Identifier:
keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:cd:8d:d8:61:f3:42:36:1b:48:8d:c7:55:0f:7a:15:7c:a4:
03:2f:64:fc:1c:7e:ae:05:b7:3d:dd:43:7a:37:95:90:48:28:
b0:90:22:de:36:2c:22:ba:4e:c7:47:e6:02:a1:8e:2c:a6:4f:
0a:3b:bb:e9:6a:7d:0a:44:8d:5f:b3:82:84:cd:16:91:43:f0:
f8:1a:09:4c:ce:c6:d1:1e:d6:89:63:62:6e:42:37:e0:d7:c9:
3e:a2:51:bb:1e:68:03:88:fb:87:95:0b:80:ab:1e:07:8b:77:
79:3e:af:99:12:8a:76:1d:ff:10:1a:04:94:69:eb:dd:4e:58:
e0:25:a4:0a:13:a8:d7:5b:0c:59:aa:22:7a:74:04:fd:a0:ee:
c2:00:ca:c7:4c:df:02:19:f5:da:0b:fc:b5:61:b9:06:39:03:
05:43:59:04:cf:d7:a6:2c:62:07:5b:e0:d6:77:6f:3a:00:5d:
d3:e7:a1:20:af:8a:e8:fb:1b:d4:ce:16:f6:27:c3:bb:17:94:
99:b2:82:4e:15:0b:25:ef:f7:c5:9d:e6:62:d8:36:de:f6:2a:
8b:03:be:4f:9a:06:04:65:1e:02:f4:20:80:0a:4e:71:98:c2:
e5:22:45:1d:2f:f5:5b:43:01:fd:97:e4:33:8e:86:51:de:56:
cb:9c:74:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:25:53 2026 by rpki-client