Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
File: lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json)
Hash identifier: 3VkG9bHgLzQdcW1C+4Wu+S66Pq76Sri9GdrpzQRLmOU=
Subject key identifier: B0:58:CD:97:6B:A8:45:F6:CD:89:5D:C1:31:7C:17:4E:A5:E5:DA:7C
Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Certificate serial: 019E1E6C9367183AB3C66FAA80BE30E8C233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
Manifest number: 0C26
Signing time: Tue 12 May 2026 23:01:32 +0000
Manifest this update: Tue 12 May 2026 23:01:32 +0000
Manifest next update: Wed 13 May 2026 23:01:32 +0000
Files and hashes: 1: Hw97gFeq9kX_yGiriy5YWSviL7I.roa (hash: geBLQXUNVCDp1lRH1gHpPHwudjQBTslh6GIdsZoKBSA=)
2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: V6Q94qjTMQcT6En9sflOltkPR30p1Wgp43HcTP8btMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:93:67:18:3a:b3:c6:6f:aa:80:be:30:e8:c2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Validity
Not Before: May 12 23:01:32 2026 GMT
Not After : May 13 23:01:32 2026 GMT
Subject: CN=b058cd976ba845f6cd895dc1317c174ea5e5da7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4d:83:c9:ae:5b:e3:29:d2:0e:70:00:e9:b2:
9e:dc:dd:05:a5:08:b4:67:45:e3:db:dd:2f:5a:5a:
c0:e7:4b:91:23:52:6d:d9:0f:8c:54:24:ca:f8:2c:
ac:2b:e1:3b:97:ec:12:75:e1:96:78:cf:22:81:90:
70:cc:7c:0c:3d:e4:1d:67:6b:06:07:bc:52:31:7d:
b4:ce:d0:77:eb:5c:ef:90:87:2b:d6:f5:d2:b0:29:
e9:f4:21:49:53:d9:68:2d:d2:6a:90:a9:9b:af:4b:
c1:a8:4a:1d:b4:0a:10:ff:ff:27:a2:12:0b:db:97:
16:57:d3:c3:0c:23:dc:73:57:b8:b6:f0:20:f0:32:
54:40:68:86:08:85:75:d1:7b:38:12:af:7c:97:be:
79:8a:f2:87:8f:6d:a2:1c:25:fb:73:36:29:0e:12:
5a:20:73:9b:9a:a8:6e:fd:c0:f2:98:7e:01:5e:b6:
eb:f6:08:19:81:c1:ad:0f:2d:f0:40:c6:41:8a:d7:
6b:e0:95:03:44:c9:57:04:c6:4d:94:95:4e:1c:ec:
3d:04:08:95:39:41:05:57:a0:03:c0:77:45:d3:03:
b8:e3:0a:de:6a:1d:a8:4c:a8:81:e8:8a:ea:70:a0:
6d:de:ad:4f:80:56:22:1c:e5:0e:d1:65:40:9d:a3:
11:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:58:CD:97:6B:A8:45:F6:CD:89:5D:C1:31:7C:17:4E:A5:E5:DA:7C
X509v3 Authority Key Identifier:
keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6b:01:f7:13:6d:c7:11:89:54:65:fa:59:80:aa:38:fd:de:
a0:de:35:fe:96:45:bd:a4:d4:40:22:50:08:81:36:c9:48:d2:
db:07:db:78:49:6f:a5:38:16:be:58:d3:0b:c2:92:16:3e:84:
44:c5:fe:3d:be:b5:eb:78:c2:24:77:d1:36:f7:90:16:4b:aa:
6f:dd:fc:6b:fa:b7:19:97:60:e6:31:6f:8c:cf:7e:d7:50:df:
68:17:bb:b5:b6:7b:45:07:53:a1:3b:3a:47:94:1e:19:7d:a4:
c2:98:ea:0e:24:f7:ea:04:2e:13:d7:13:9d:58:c3:19:5d:a6:
7e:74:24:a8:63:1b:c9:c7:b1:40:dc:5e:0e:2d:97:b9:08:d5:
25:f1:e8:68:73:82:3a:8c:ac:86:b7:c0:53:43:2c:fb:1a:b8:
49:48:31:c5:f4:ce:a2:a1:cf:e9:e6:2f:30:da:0a:b0:83:25:
df:12:ac:56:01:6b:bd:64:a6:f4:0b:99:aa:48:dd:20:0a:af:
2b:af:32:53:3b:d0:6d:5c:83:2d:88:e4:37:61:74:c2:c8:0e:
d0:92:ca:46:8a:26:f0:32:bf:17:4e:bb:8a:93:28:66:c6:74:
05:12:d6:50:e0:90:19:da:9c:63:44:b2:ea:7d:3a:38:4a:41:
57:4c:be:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:20:10 2026 by rpki-client