Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
File: lEethLhLrsR9ViHi91Yj8-rxOWA.mft (raw, json)
Hash identifier: DysB460kXnnNZnAfc8wQbaAp9gdYaaoq386SRaZOO/E=
Subject key identifier: 2A:30:18:F1:99:FD:C3:FA:F6:42:8F:12:3E:C0:2A:7E:5F:CD:11:76
Authority key identifier: 94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
Certificate issuer: /CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Certificate serial: 019E1ED9EECD183EA7E7D99AF14028349526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
Manifest number: 04DF
Signing time: Wed 13 May 2026 01:00:59 +0000
Manifest this update: Wed 13 May 2026 01:00:59 +0000
Manifest next update: Thu 14 May 2026 01:00:59 +0000
Files and hashes: 1: 9-6uMx_1cLtSZmzwRHltNOvbN1Q.roa (hash: qkVhO869SS+g0a8EpShWW+uFhy2C8iltX3D6CRSmnec=)
2: bHmwkKHYcuuFCn6rBcwSS1SIkOI.roa (hash: JuddnmoR945Cb2W113D4wQWWPxgzuL0VIbc2wYWg78I=)
3: lEethLhLrsR9ViHi91Yj8-rxOWA.crl (hash: P+fPUHf1nmMxb3FAiYnCMybEvunXT5rdAWobEE612s0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:ee:cd:18:3e:a7:e7:d9:9a:f1:40:28:34:95:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Validity
Not Before: May 13 01:00:59 2026 GMT
Not After : May 14 01:00:59 2026 GMT
Subject: CN=2a3018f199fdc3faf6428f123ec02a7e5fcd1176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:eb:d2:0f:4a:c0:25:a3:c6:72:90:02:7d:38:
7d:52:eb:10:79:25:1d:44:0e:cf:0c:3b:e0:da:e1:
96:9e:29:4e:d9:12:98:c2:94:20:3c:20:f2:ee:cb:
31:06:e7:3e:4f:02:10:bc:82:fe:c9:f2:6a:29:71:
d2:b2:b0:90:21:17:af:02:3e:6a:94:6e:df:86:f4:
13:13:23:98:76:99:14:e7:c4:cd:bc:11:ec:1f:62:
b6:20:4d:a8:cc:c3:fb:b8:8b:d5:fe:96:c6:a4:82:
e3:20:d8:ff:e7:d2:ae:0b:c3:26:42:67:68:a9:01:
a5:f4:6c:86:e5:10:96:f7:a6:17:13:9a:aa:73:14:
b6:5c:dd:e2:e8:86:59:2c:50:fb:db:06:c1:e2:52:
9c:55:07:c5:1d:37:cd:aa:6e:d0:1d:a0:cc:63:48:
d6:f9:d5:07:b7:e1:8f:33:80:04:4e:7e:b6:a9:82:
a1:62:d6:3e:32:05:e1:cc:1a:f2:48:e9:29:dc:25:
29:72:9b:e6:5d:4f:2f:57:77:ed:10:ca:8f:cf:2c:
72:c9:b6:79:29:31:fb:13:d0:e9:01:36:20:1e:9d:
40:fc:87:9f:3c:d4:46:70:50:90:db:28:e9:68:2e:
93:2a:47:c4:b4:9d:f3:ad:27:4a:f1:54:25:6b:a1:
75:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:30:18:F1:99:FD:C3:FA:F6:42:8F:12:3E:C0:2A:7E:5F:CD:11:76
X509v3 Authority Key Identifier:
keyid:94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b6:33:5a:89:af:3f:36:b0:39:2d:28:2c:3e:b0:23:16:b1:
0f:ad:1b:04:c8:54:bc:8b:12:a4:8a:c7:de:62:90:e9:63:30:
70:60:38:98:42:94:92:70:14:68:56:23:e1:bf:c8:9f:6b:af:
ad:01:8a:d2:ce:7c:3a:a9:66:cb:f0:de:ba:03:86:db:0d:59:
ea:26:47:1a:7a:24:5e:e4:4e:3b:a4:ab:e9:18:41:4f:b3:d5:
82:8b:d4:4d:d3:2d:2a:f5:71:e1:bd:af:9e:8a:0a:02:e1:0b:
3b:27:48:e0:db:33:a4:14:06:ac:68:be:70:62:94:dc:30:b6:
c9:5c:e4:d2:6e:27:72:5a:07:98:71:f0:4d:0a:4f:38:b4:f5:
f5:be:8d:23:a0:04:a1:63:4c:15:3d:45:94:ee:5c:90:23:88:
ad:49:74:93:ea:2d:f4:58:76:2a:2f:12:50:6c:94:fc:ea:f9:
f1:32:0a:eb:96:77:68:60:5b:2d:5c:22:c4:8e:db:18:8d:a9:
89:bb:14:17:b7:ad:3e:52:bd:fd:16:51:61:07:a7:fb:23:85:
a7:de:e8:6f:13:cb:c8:34:bf:83:a0:c4:28:e0:63:7a:b2:95:
1e:3d:57:a1:69:d6:37:7c:b4:e7:ac:8c:24:da:69:e6:7c:cd:
7d:1f:20:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:35:12 2026 by rpki-client