Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
File: lEethLhLrsR9ViHi91Yj8-rxOWA.mft (raw, json)
Hash identifier: +Ersg4ca8nywexh2UMLrInc+XbGfWNNZj+K3el678TE=
Subject key identifier: 6C:97:77:CA:EC:04:EE:ED:15:B0:53:1B:03:8A:CA:8B:9D:6C:27:95
Authority key identifier: 94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
Certificate issuer: /CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Certificate serial: 019D27A8E3FD37CE39216F2862527A0892AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
Manifest number: 045F
Signing time: Thu 26 Mar 2026 01:01:12 +0000
Manifest this update: Thu 26 Mar 2026 01:01:12 +0000
Manifest next update: Fri 27 Mar 2026 01:01:12 +0000
Files and hashes: 1: 9-6uMx_1cLtSZmzwRHltNOvbN1Q.roa (hash: qkVhO869SS+g0a8EpShWW+uFhy2C8iltX3D6CRSmnec=)
2: bHmwkKHYcuuFCn6rBcwSS1SIkOI.roa (hash: JuddnmoR945Cb2W113D4wQWWPxgzuL0VIbc2wYWg78I=)
3: lEethLhLrsR9ViHi91Yj8-rxOWA.crl (hash: aRGfMKABxxeVyQJviynsrwuB4vFE3c2oFOpfEU3C2mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e3:fd:37:ce:39:21:6f:28:62:52:7a:08:92:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Validity
Not Before: Mar 26 01:01:12 2026 GMT
Not After : Mar 27 01:01:12 2026 GMT
Subject: CN=6c9777caec04eeed15b0531b038aca8b9d6c2795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:cf:05:ae:26:4c:bd:64:0f:0b:5b:7d:35:f5:
c9:18:9f:ae:a9:34:6d:af:c7:58:62:d9:07:5d:f0:
e0:aa:d0:9c:db:06:34:11:11:d3:20:89:bb:c4:c3:
c8:34:12:3e:27:a6:28:73:d3:fe:ae:7b:6a:dc:eb:
66:d4:9f:eb:3c:16:79:69:e3:49:8e:3b:ba:f6:19:
59:81:30:86:99:cd:80:0b:a6:aa:89:df:96:74:21:
62:a1:68:54:2a:4b:68:e3:ff:58:f6:57:ef:3c:a3:
5b:97:12:36:da:9e:58:50:5d:25:42:14:5f:bb:d0:
0e:d2:a1:92:95:0d:82:28:10:42:15:82:75:71:bf:
91:93:f9:a2:6b:85:5f:0f:c3:3e:e8:f9:9b:5f:4f:
39:ad:84:c7:dc:f4:cc:dd:b1:d2:9e:20:8f:9f:c7:
e7:f7:96:9f:9f:37:10:18:28:ef:06:5f:b5:76:f1:
9f:4f:20:04:15:c1:f6:f6:4a:bb:2f:15:ad:0c:2e:
a3:48:2a:e1:13:f2:67:af:1a:5d:d1:bc:6a:fb:c5:
10:8e:14:db:aa:d1:c6:e0:ad:77:21:06:32:4c:69:
0a:15:66:de:97:59:0d:47:78:77:36:3f:0b:4a:e3:
a1:5e:4d:af:12:25:76:eb:eb:e5:65:c0:3a:f0:c6:
15:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:97:77:CA:EC:04:EE:ED:15:B0:53:1B:03:8A:CA:8B:9D:6C:27:95
X509v3 Authority Key Identifier:
keyid:94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:6f:d1:aa:67:8b:d0:3e:5c:1a:02:d2:b1:c5:e8:7a:6b:02:
3f:3f:93:14:c2:b7:2e:8b:e4:13:c6:4f:ca:dd:bd:68:af:45:
9d:ef:3d:6f:ce:c2:4d:9b:56:17:2b:cd:f2:2a:42:6c:3a:2e:
db:3b:c8:25:58:5d:50:02:cd:c3:a9:1c:b4:ba:14:29:12:59:
7d:03:e9:2c:38:c6:39:73:04:ad:65:92:b2:ec:85:92:28:09:
d2:d9:15:8e:36:59:d7:06:4a:74:b5:72:2f:0a:7b:9c:56:1f:
fc:81:d3:73:6c:e7:03:6b:76:0c:04:f7:f5:c1:4f:bd:28:57:
29:92:0b:b1:96:d9:16:21:34:4c:47:6a:60:87:7d:37:bc:48:
6e:7c:55:c1:06:df:17:61:1f:26:ac:87:86:bb:24:33:ac:8f:
a0:4e:79:fd:82:08:6a:03:97:17:f7:e9:27:9e:51:8d:63:b6:
92:16:90:4d:62:d8:b2:ef:48:3f:e0:ab:e6:d6:d0:fe:57:d9:
41:3f:4d:51:f7:bc:38:61:06:87:9b:f3:3b:1c:41:39:41:8e:
b0:0a:70:3a:69:77:22:39:dd:9f:61:f2:f2:93:a4:6d:14:3d:
2e:d4:c5:29:eb:f3:62:06:07:61:13:38:e3:18:b2:d3:68:80:
41:4b:13:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:38 2026 by rpki-client