Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
File: lHMg0DCTAXjm987vkdKrh4TT3BY.mft (raw, json)
Hash identifier: 6b6EnEdJEEYwPiPq0RR1MFUchc/MrpERjsFka9tdOLw=
Subject key identifier: 28:64:82:3D:23:71:2E:4C:4F:42:8A:23:87:D4:5B:38:BA:FB:83:7F
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial: 019E1DFEB8507374D628012A70FA4268A098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
Manifest number: 1538
Signing time: Tue 12 May 2026 21:01:33 +0000
Manifest this update: Tue 12 May 2026 21:01:33 +0000
Manifest next update: Wed 13 May 2026 21:01:33 +0000
Files and hashes: 1: 15WLZBLgJ9g9rpon7ikwmnOpu2o.roa (hash: cDtWR/sWDEjocXdbWFuLldw8hA+RRTGqd9G5Qgigc2g=)
2: L4FVL-IOve6YhBWZ8jz8Nor0cv4.roa (hash: IchcC27uPlsKIbmA49GFEPAY66Qr3a8M8fgjbxbsGQs=)
3: j7qwhPrSo-8ueCrFJo_GWwM93Tg.roa (hash: gJyu32k59hXhVllwZCm02crtrLnwlpxMsqibTEWrODw=)
4: jb81OuVJup1PLJeMNccOVNPoCJ8.roa (hash: deKoWNZnlpwFwiqew1tUzp1N8o/V+tWA//EpRC0uV3s=)
5: kEA4tj_KkVDLvM2DWnwX5k8m6BI.roa (hash: pnHIraVgBAZPz/3bw02SbdT0VFhTYaLYb8ZPwjAg3r4=)
6: lHMg0DCTAXjm987vkdKrh4TT3BY.crl (hash: rQaUjQcdyp/ohImePP+wqqznPNWavAk4hYxymPrYlrA=)
7: q-8ltpoThmmPBuTuT5C4cGm14Tk.roa (hash: 5hF8BW/BSTiPn3vyhPttnkUg4VDyaJiwZYhFxh/LtpA=)
8: zjv8SZhQ9gV8oRmS9YUAJhkKaT8.roa (hash: 9mmbxYMsoWHE5kxulUQxb1ol9WOyJhGIh77y7/oMRtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:b8:50:73:74:d6:28:01:2a:70:fa:42:68:a0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Validity
Not Before: May 12 21:01:33 2026 GMT
Not After : May 13 21:01:33 2026 GMT
Subject: CN=2864823d23712e4c4f428a2387d45b38bafb837f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5f:9a:72:66:37:0c:b2:7b:30:18:41:c4:bf:
b5:82:cc:9a:4c:bd:d5:d8:05:e4:56:bb:d6:b9:89:
68:7b:de:16:d7:e0:8e:d9:e3:21:44:e4:43:03:1e:
3f:4a:b9:72:9e:2f:79:87:b3:6c:c7:0b:c0:27:b5:
73:37:fd:39:dd:92:0e:b8:dd:55:26:3b:78:e3:c9:
d0:98:b9:d1:9f:71:ca:8d:be:7f:ba:87:05:94:40:
95:9d:0b:19:d8:5b:1d:de:47:18:e7:3c:ec:a9:66:
5f:71:5f:bd:56:6b:17:56:07:f2:71:2b:f8:66:57:
b6:a5:48:10:b7:a4:54:60:5e:99:2a:ae:ca:53:62:
f5:11:a1:d1:09:b9:05:f1:63:88:fa:f5:78:84:b3:
63:d7:be:65:b4:89:ae:90:4d:0a:d1:73:1e:fe:f3:
fd:d8:0e:84:c8:e8:7c:a8:cf:b4:50:c7:7b:ad:00:
64:f8:e7:11:f9:0f:e5:78:04:de:47:78:21:75:43:
88:26:0a:24:fc:d6:3d:d4:00:98:2d:ac:7b:29:bc:
2c:4d:0f:f3:34:16:8f:37:2a:30:66:b3:84:61:19:
1e:ad:48:fe:3d:79:e5:fc:29:86:75:09:60:82:c3:
f2:77:0c:2f:bd:9e:9d:21:7f:5f:8b:5c:6e:e7:19:
4d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:64:82:3D:23:71:2E:4C:4F:42:8A:23:87:D4:5B:38:BA:FB:83:7F
X509v3 Authority Key Identifier:
keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5a:4a:06:06:f8:26:0f:c2:b5:ad:5b:6b:66:01:0a:ee:c5:
1b:d9:be:5b:cc:5a:47:e2:67:13:05:79:1f:95:2c:a8:ff:9e:
9a:b9:31:f6:47:80:a8:92:98:c8:34:ab:0b:f7:ea:5b:dd:b2:
97:43:23:f3:47:23:7e:b5:d8:f8:b0:a0:d8:c5:c9:01:57:fa:
49:dc:da:68:36:2c:9d:b1:03:0b:cc:c9:21:e9:3d:18:4a:ab:
a8:cc:02:e3:ca:1f:e3:c7:f2:fd:8d:04:0f:e2:df:ad:56:f6:
37:a5:32:78:01:34:aa:f4:82:dc:b0:3f:80:d0:36:86:60:8d:
68:44:82:10:37:76:c0:37:97:d7:26:55:22:6b:3e:a5:bd:c8:
07:9d:8c:e6:c9:8d:68:e0:5a:43:43:32:56:98:5e:bd:ac:da:
c9:bb:6d:88:5c:cc:3f:5c:45:67:6a:2b:ad:f2:6f:f3:4f:20:
e9:76:4b:bf:a3:b5:5c:12:00:d8:ef:cd:19:9b:31:32:f5:21:
49:34:22:cc:cd:63:af:3d:c9:58:4f:ac:2e:52:89:25:88:27:
a1:9d:83:e5:f3:f3:4b:0f:1f:21:57:91:e3:3f:36:ab:15:fc:
35:5c:67:0e:c3:02:b4:5c:c0:ff:32:87:86:10:db:8a:b2:4e:
e3:bb:1f:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/rhQc3TWKAEqcPpCaKCYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NzMyMGQwMzA5MzAxNzhlNmY3Y2VlZjkxZDJhYjg3ODRk
M2RjMTYwHhcNMjYwNTEyMjEwMTMzWhcNMjYwNTEzMjEwMTMzWjAzMTEwLwYDVQQD
EygyODY0ODIzZDIzNzEyZTRjNGY0MjhhMjM4N2Q0NWIzOGJhZmI4MzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzV+acmY3DLJ7MBhBxL+1gsyaTL3V
2AXkVrvWuYloe94W1+CO2eMhRORDAx4/Srlyni95h7NsxwvAJ7VzN/053ZIOuN1V
Jjt448nQmLnRn3HKjb5/uocFlECVnQsZ2Fsd3kcY5zzsqWZfcV+9VmsXVgfycSv4
Zle2pUgQt6RUYF6ZKq7KU2L1EaHRCbkF8WOI+vV4hLNj175ltImukE0K0XMe/vP9
2A6EyOh8qM+0UMd7rQBk+OcR+Q/leATeR3ghdUOIJgok/NY91ACYLax7KbwsTQ/z
NBaPNyowZrOEYRkerUj+PXnl/CmGdQlggsPydwwvvZ6dIX9fi1xu5xlNEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChkgj0jcS5MT0KKI4fUWzi6+4N/MB8GA1UdIwQY
MBaAFJRzINAwkwF45vfO75HSq4eE09wWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEt
OGFjNGEyMTkzOGI0LzEvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEtOGFjNGEyMTkzOGI0
LzEvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1pKBgb4
Jg/Cta1ba2YBCu7FG9m+W8xaR+JnEwV5H5UsqP+emrkx9keAqJKYyDSrC/fqW92y
l0Mj80cjfrXY+LCg2MXJAVf6SdzaaDYsnbEDC8zJIek9GEqrqMwC48of48fy/Y0E
D+LfrVb2N6UyeAE0qvSC3LA/gNA2hmCNaESCEDd2wDeX1yZVIms+pb3IB52M5smN
aOBaQ0MyVphevazaybttiFzMP1xFZ2orrfJv808g6XZLv6O1XBIA2O/NGZsxMvUh
STQizM1jrz3JWE+sLlKJJYgnoZ2D5fPzSw8fIVeR4z82qxX8NVxnDsMCtFzA/zKH
hhDbirJO47sfUA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:32:30 2026 by rpki-client