Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
File: lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json)
Hash identifier: HP0LhW1wmeAJEyWfGSmJ0SXdx4nC8D3urIbzN26kIhE=
Subject key identifier: EC:E1:6F:97:F9:9F:4E:A4:BB:0D:44:B6:22:6C:F2:41:38:C4:AD:2B
Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Certificate serial: 01A0DD6041CD23CA876352176D17CA02EBC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
Manifest number: 0D92
Signing time: Sat 26 Sep 2026 11:01:07 +0000
Manifest this update: Sat 26 Sep 2026 11:01:07 +0000
Manifest next update: Sun 27 Sep 2026 11:01:07 +0000
Files and hashes: 1: Hw97gFeq9kX_yGiriy5YWSviL7I.roa (hash: geBLQXUNVCDp1lRH1gHpPHwudjQBTslh6GIdsZoKBSA=)
2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: o2Gmk3r+VWdVNhgaxbH/PJKmk3+nJVBjNZyUFspOSgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:41:cd:23:ca:87:63:52:17:6d:17:ca:02:eb:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Validity
Not Before: Sep 26 11:01:07 2026 GMT
Not After : Sep 27 11:01:07 2026 GMT
Subject: CN=ece16f97f99f4ea4bb0d44b6226cf24138c4ad2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2b:92:59:66:5c:43:7c:09:c3:5f:79:94:b7:
36:cb:64:e5:48:e4:23:bd:a1:25:e8:7a:e5:5e:ec:
5e:49:0e:9f:8e:72:da:c3:73:3d:ba:ae:56:47:22:
3a:3e:45:00:53:4a:2b:c6:92:81:1c:9c:ba:52:68:
7a:5b:08:c2:d3:72:b3:03:3f:db:51:7b:01:25:49:
31:d0:87:2c:05:a9:f2:7b:84:4b:98:6c:6f:5f:8d:
55:fa:03:ff:71:5e:0d:fd:ca:cc:f9:a4:7d:fb:2a:
0e:8a:79:25:07:c5:d2:01:e2:cc:77:4b:ac:c4:da:
f9:9f:d9:3e:e8:67:e9:23:5f:68:e3:74:d1:f0:b1:
a4:30:3d:70:d2:ad:fe:6c:8f:6e:d0:d4:b1:aa:ce:
b8:88:4d:61:68:48:a0:f8:e6:0e:86:9f:06:21:99:
2f:e9:73:aa:5c:04:1b:96:25:3c:54:1f:35:4d:d1:
b9:b9:2e:2d:35:6d:81:00:1d:8e:e9:2c:17:4e:3b:
f5:80:f7:0d:1f:f6:b0:6c:c2:d4:8a:92:33:fd:e2:
0c:1e:24:fa:df:07:d8:e1:0c:41:29:55:1d:5d:68:
13:56:2f:04:b9:63:23:1e:41:eb:05:72:26:a3:00:
f7:1f:84:64:1f:ee:5c:82:81:cd:f2:98:2a:2e:ef:
79:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E1:6F:97:F9:9F:4E:A4:BB:0D:44:B6:22:6C:F2:41:38:C4:AD:2B
X509v3 Authority Key Identifier:
keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a3:ba:52:57:35:3e:e6:c6:22:1c:a3:f5:33:aa:b0:a8:b6:
f6:ee:36:2d:f5:52:5b:4a:1c:15:cd:72:de:03:40:a4:0f:5b:
1b:00:6a:97:37:c8:87:16:0f:3e:34:90:89:dc:46:e2:12:c3:
2f:fb:d0:3e:f4:c0:3b:09:d3:cd:8b:98:09:19:bb:3f:59:8c:
96:82:16:30:02:97:4a:5a:3a:58:c9:50:1e:50:ad:6c:35:15:
08:17:39:1c:cc:67:76:5b:e5:ed:31:bc:62:d7:72:f3:14:94:
91:40:aa:e8:d0:f1:c3:3e:7a:e2:39:86:62:6f:32:2b:67:b5:
b5:23:64:1f:a8:ca:23:75:1b:d1:ee:7a:ea:46:70:a6:ae:2d:
3a:75:da:ef:97:3e:9b:e2:c7:e3:96:77:e9:29:2c:c3:1d:83:
0c:05:ed:ce:c5:0a:b6:a2:7c:41:92:01:2e:2b:0c:86:24:55:
6f:06:19:ac:78:70:80:f1:cc:89:eb:60:4a:30:0c:b0:9e:e3:
ce:f0:64:53:cf:56:ee:87:02:24:ce:68:bb:54:21:20:ec:fb:
48:9f:49:fc:2e:7f:c4:0a:8a:99:29:8f:5b:33:21:99:1b:62:
5c:0a:e2:4c:13:d4:a5:e7:f3:16:14:b1:37:7a:c0:e5:c5:8a:
3b:ea:ce:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:25:11 2026 by rpki-client