Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
File: lNmOj-xoB3WhVyZuDGt4sUGjT14.mft (raw, json)
Hash identifier: OZrDOYXKi/jM1Yru/FYuDeaSeYLh0vsC0npGNGSZ0bI=
Subject key identifier: 5B:1C:57:57:62:6E:58:4B:7B:CC:15:F9:A8:52:66:6A:3A:FF:AC:A9
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial: 019E1F7ED144A45CEE7D05307CF0C1FD5F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
Manifest number: 11F4
Signing time: Wed 13 May 2026 04:01:05 +0000
Manifest this update: Wed 13 May 2026 04:01:05 +0000
Manifest next update: Thu 14 May 2026 04:01:05 +0000
Files and hashes: 1: 1ZFzpY9gqaxllEXCBRcpbFZtvSI.roa (hash: 5BFrURuD3slP3IWW2XdDULNhAMP/7M8VYqXagPl/wDQ=)
2: 1ndrPzlCHUTjohyoAIv4ceVY91M.roa (hash: kwxcPnS+EwyAtP4vNomZBVZf4879KfPvcyviC74DpPs=)
3: 1uykX7XuB8BdjpT1ugfsAuVxO_o.roa (hash: +nVFIj8xJeJ89FbQF7uxdxGPy/z6Fq4PX9E3VSgew2Y=)
4: EtJ-6tnlV-8Aq-PH552cwzFu99I.roa (hash: SBFjWOaED819zRLjY2dQChZmsO5IFbHiGrw9/77Wj6s=)
5: LgBkQm7x65odd5JUqQrzXZBbc7k.roa (hash: A2GqKDmQkAQi37nNTs39AiKN/Rkw4jxRNbekXfrJVdI=)
6: LjDOVZrqVTaBdMy7LiiRAm06F6U.roa (hash: lfo+HanxOREHeonoDkwf+MHoVMUC8NNDEATyitbN46w=)
7: lNmOj-xoB3WhVyZuDGt4sUGjT14.crl (hash: S/ac3AfNT6wMrugDAfKi6RPtgmymX00DbFrz8Mq8xdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:d1:44:a4:5c:ee:7d:05:30:7c:f0:c1:fd:5f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Validity
Not Before: May 13 04:01:05 2026 GMT
Not After : May 14 04:01:05 2026 GMT
Subject: CN=5b1c5757626e584b7bcc15f9a852666a3affaca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:29:72:22:f1:f0:4a:2b:47:5f:8d:d5:74:98:
5b:30:e8:f9:89:ea:70:65:bb:c8:00:0c:1a:a1:6c:
87:36:5f:97:2e:66:bf:9a:1d:60:33:e2:5c:7e:81:
bb:09:34:34:42:63:3f:d2:de:82:7e:9e:45:ad:94:
fc:c9:ba:4e:3b:a6:ea:ab:78:d1:c4:a0:3a:c0:30:
2e:8c:09:22:72:08:46:9c:32:0d:e8:40:ba:35:51:
15:74:ab:eb:18:ea:a4:b1:4f:5e:85:14:54:fa:ac:
af:68:db:6b:37:76:75:d5:1e:c2:e2:f4:1a:3e:a4:
69:3f:55:f9:6a:4c:1b:e8:8f:c6:0c:b6:1d:04:c8:
ad:2b:0e:bd:74:11:7d:6d:40:f9:dd:4c:21:d3:37:
e0:6b:d9:5f:79:e4:b7:66:ab:c7:05:12:82:0d:f8:
de:b3:e4:07:96:56:4e:90:24:59:bb:f7:73:88:e9:
3e:92:e8:c8:46:b4:ef:01:b8:82:4a:4d:8d:8d:b4:
b5:98:03:85:13:73:f1:dd:a3:c7:7e:6b:1d:03:8a:
29:d9:08:de:a8:37:4a:12:67:f2:1d:27:a7:cd:a7:
22:14:e4:c3:4f:1d:da:6e:c1:9a:e1:90:4b:54:1e:
14:45:cd:cf:e2:e5:62:60:a8:96:8f:39:0d:5b:68:
38:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1C:57:57:62:6E:58:4B:7B:CC:15:F9:A8:52:66:6A:3A:FF:AC:A9
X509v3 Authority Key Identifier:
keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:63:62:23:5d:95:ab:8e:18:39:18:ea:4d:9d:54:49:83:15:
78:ca:b6:5e:a5:13:fa:d0:a3:f3:80:a3:82:bc:44:60:a6:19:
fe:c8:61:69:20:53:93:96:45:9b:52:b2:fe:bd:df:47:a7:d1:
a5:0d:1d:1a:0a:c3:4b:16:aa:7a:44:53:8f:ef:33:86:92:0e:
7d:17:24:87:15:17:9e:6b:83:75:c1:1c:1c:bf:03:0f:35:4a:
7d:df:5e:28:54:90:15:0f:6a:e2:47:48:0f:8e:15:37:ac:a8:
2c:03:82:64:15:74:81:88:1c:b4:e4:ac:5c:ed:3f:a8:e5:ea:
83:e6:6e:fd:65:82:35:4c:b6:0a:41:5b:3a:b1:b4:c1:88:72:
65:0a:70:fc:c2:78:0e:b4:06:53:25:36:52:19:19:9d:88:74:
c9:32:d1:36:48:4c:e3:76:9e:f0:2b:db:49:de:56:9a:93:ab:
05:ad:be:20:34:5c:6c:c5:c5:3e:cb:99:a1:45:d3:34:fe:ee:
95:14:17:ee:e3:33:93:d3:c9:4f:dd:49:4f:d1:15:b7:8a:e2:
96:0c:ca:b8:32:dc:3b:7b:a8:4f:87:99:ff:4a:98:9b:93:55:
9c:84:7a:5c:4c:f9:8e:70:5e:67:94:78:7c:a9:48:da:7d:47:
4e:b6:b1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:44:36 2026 by rpki-client