Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
File: LhmWbA6l3zqYf4NlUktRKMun_JA.mft (raw, json)
Hash identifier: FfeP3IuwBUHOVJerB+x3Uh2gKF/uBt/NpVcBZa1AeFY=
Subject key identifier: F7:2B:65:F6:A4:DE:3E:78:84:64:29:17:55:C7:6B:73:66:E2:2B:B2
Authority key identifier: 2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
Certificate issuer: /CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Certificate serial: 019F935B1063C19EE23FC663A8CB0300706E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 09:00:46 +0000
Manifest this update: Fri 24 Jul 2026 09:00:46 +0000
Manifest next update: Sat 25 Jul 2026 09:00:46 +0000
Files and hashes: 1: LhmWbA6l3zqYf4NlUktRKMun_JA.crl (hash: Z5l/DOxDNpQpmSM4JzYtGIRMTCRacszLyTszVCl+i4I=)
2: S22IS1ytfAHZisgvUmyvGk-8FNg.roa (hash: gXnDrgQVCJ9KXbT9Gx6Ic3/hpo6fdcPJXpi41swj64s=)
3: xFsHUXQAhTrcAhcEagihKj_bLB0.roa (hash: fUcuoh5nCrUpLQdbdf9ANcbMiNKkrpJCJisA83ImkP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:10:63:c1:9e:e2:3f:c6:63:a8:cb:03:00:70:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Validity
Not Before: Jul 24 09:00:46 2026 GMT
Not After : Jul 25 09:00:46 2026 GMT
Subject: CN=f72b65f6a4de3e788464291755c76b7366e22bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:64:31:47:4e:b9:b5:ac:73:15:03:1f:ab:
ea:ba:13:92:5c:d2:e3:f8:bc:8e:76:57:8e:67:14:
bc:de:d3:42:66:c4:60:6d:7d:ad:7c:a1:98:b9:98:
0d:c7:a9:8b:61:96:95:bd:a2:98:61:44:5c:7d:a8:
45:b9:6c:c6:79:1c:e3:c2:c4:d2:94:14:27:25:83:
90:6a:8b:1a:8a:79:20:89:be:d2:31:7d:fb:16:a3:
ff:9a:08:0f:bc:73:47:f6:65:5a:d2:45:a3:fc:94:
2f:0a:38:10:b1:cf:cc:fa:f8:f4:7c:ce:b6:0e:81:
8c:3e:44:bb:e2:23:ee:34:b6:31:10:41:79:89:b5:
cc:3b:d5:09:bf:a5:a8:20:d5:52:fa:98:6f:76:ed:
c5:21:2a:ce:91:eb:e9:24:05:8c:56:13:62:ed:97:
fb:16:f7:db:5e:6a:57:53:f1:1d:e0:13:0e:df:25:
4d:89:d2:bf:88:34:37:e2:a3:da:ef:72:70:66:ad:
15:04:b1:91:86:55:a8:b2:ba:40:2d:6f:1e:99:2a:
f6:c4:58:3b:c9:07:3e:a5:46:99:b2:07:47:0a:18:
24:42:60:c7:c9:2e:2d:e0:3a:92:07:80:62:f7:92:
2d:bc:d1:a9:8e:c2:b8:cc:93:1e:0c:0d:f0:aa:69:
3e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2B:65:F6:A4:DE:3E:78:84:64:29:17:55:C7:6B:73:66:E2:2B:B2
X509v3 Authority Key Identifier:
keyid:2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ad:b9:6b:ec:87:e9:b2:67:16:d4:b7:c4:91:56:71:cf:b6:
b8:8e:ed:94:cf:57:32:fe:1c:5e:1b:ae:b5:75:8b:25:0c:3c:
b0:03:4b:23:83:25:31:21:35:6b:ea:ad:c2:c5:11:7b:be:ed:
4a:b9:02:22:30:28:63:1d:52:ca:74:c1:96:55:5d:a4:a4:e1:
45:ce:c1:9c:7c:d8:16:64:ff:78:b0:39:47:46:bb:5b:56:84:
4d:d0:5a:f7:d3:6b:43:09:59:cf:01:f6:90:fe:a4:79:00:b2:
9a:a8:57:8c:00:f5:32:fc:62:f4:e0:1c:83:ff:64:24:e1:db:
b9:dc:6f:0f:95:88:03:ec:11:7e:80:27:91:03:05:29:3f:57:
33:79:4c:ec:14:80:0f:52:cb:e2:48:43:f9:26:c8:49:53:a7:
fc:72:95:36:ac:b2:31:c1:51:83:73:8e:bf:a8:6e:fb:c5:8a:
a2:b2:a2:82:99:f2:fe:f2:58:28:54:74:ed:05:76:e3:82:4f:
60:2b:10:ee:07:5d:f5:86:47:b0:51:1e:7c:8f:2a:29:14:8b:
dc:0e:80:f4:20:eb:ad:86:78:2c:a9:2c:93:96:9b:4a:57:e3:
42:f2:22:1b:2c:2f:ca:20:18:bd:cf:b0:c8:75:ff:b4:eb:63:
27:6d:2d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:58:00 2026 by rpki-client