Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
File: LhmWbA6l3zqYf4NlUktRKMun_JA.mft (raw, json)
Hash identifier: VxljHS4G7BEn3+Lrue12Aj4uExorATDTVXnlj6f7N94=
Subject key identifier: C6:80:68:ED:36:B4:3A:1A:BA:9F:56:DE:D1:BC:8D:21:B0:D6:CA:EF
Authority key identifier: 2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
Certificate issuer: /CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Certificate serial: 01A0DD97824C33E2038FBBDF59A74E58E2D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 12:01:29 +0000
Manifest this update: Sat 26 Sep 2026 12:01:29 +0000
Manifest next update: Sun 27 Sep 2026 12:01:29 +0000
Files and hashes: 1: LhmWbA6l3zqYf4NlUktRKMun_JA.crl (hash: KozZpQZcLaL91QhqJ0fjTM1TL8IUKngOHvdKmTiaP1A=)
2: S22IS1ytfAHZisgvUmyvGk-8FNg.roa (hash: gXnDrgQVCJ9KXbT9Gx6Ic3/hpo6fdcPJXpi41swj64s=)
3: xFsHUXQAhTrcAhcEagihKj_bLB0.roa (hash: fUcuoh5nCrUpLQdbdf9ANcbMiNKkrpJCJisA83ImkP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:82:4c:33:e2:03:8f:bb:df:59:a7:4e:58:e2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Validity
Not Before: Sep 26 12:01:29 2026 GMT
Not After : Sep 27 12:01:29 2026 GMT
Subject: CN=c68068ed36b43a1aba9f56ded1bc8d21b0d6caef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:49:55:f7:41:f7:b1:0f:74:b0:7e:45:ef:39:
b3:8a:0f:e2:19:fe:0f:75:07:ff:df:d7:db:2f:80:
8f:72:4e:e3:94:95:62:c5:2c:83:a9:ef:a5:33:c3:
b9:c2:a0:65:48:a4:95:0f:22:79:45:80:84:ee:c5:
ee:97:3f:71:12:34:b4:ce:2f:17:90:43:b1:f7:b0:
de:48:4b:98:6f:f6:1e:0d:82:54:3e:d6:50:32:a8:
58:0b:7d:ab:59:15:a2:50:4a:e7:f0:8e:11:63:70:
3a:df:1a:37:2e:e6:db:c5:71:a9:aa:44:c5:43:6d:
3a:b7:bf:24:21:da:da:2f:60:16:5f:eb:0e:56:19:
24:93:85:1c:fc:b2:94:a9:df:cf:e1:85:9b:2d:2e:
25:3c:b8:77:51:46:19:8a:25:e0:4e:a3:c0:b0:a8:
28:74:ff:df:96:dd:69:47:05:11:26:06:1b:19:71:
d1:93:8e:90:46:32:09:90:26:f8:9e:b0:08:9d:a5:
91:2f:a3:d1:c0:42:b5:11:db:a3:d2:88:43:09:a5:
77:f0:a2:6a:23:db:92:e3:47:ce:7f:81:7d:76:83:
60:49:eb:1a:fa:58:7c:9c:26:8e:e6:45:d3:61:f1:
ed:e5:1f:27:ce:5f:11:eb:ba:2e:a9:33:71:c5:16:
f5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:80:68:ED:36:B4:3A:1A:BA:9F:56:DE:D1:BC:8D:21:B0:D6:CA:EF
X509v3 Authority Key Identifier:
keyid:2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:81:7d:a2:d6:6f:b7:8c:e6:bc:38:22:64:1d:51:dd:b5:2a:
01:13:d1:77:00:a5:d5:32:58:48:62:98:14:0a:f8:ff:b6:14:
50:b5:17:f1:e7:c0:8c:27:71:27:27:5c:a9:d0:2c:03:81:e7:
0b:ea:6d:94:fa:db:5e:56:6e:af:c0:28:5b:65:8a:75:5d:16:
b6:d1:ed:af:a3:ca:fb:95:e9:a7:6a:a0:b7:f3:0b:36:b2:f0:
a8:93:e4:64:09:dc:c5:b0:29:5f:7b:c0:8c:4c:26:fd:51:87:
42:2c:9a:a4:06:a6:5c:45:77:36:24:8f:b6:c3:19:76:67:2a:
ef:97:b3:0c:50:e6:e0:e4:17:3d:79:8f:cf:88:83:94:0d:2c:
1e:b3:ef:5e:75:29:e0:da:73:b0:af:3c:47:72:1c:3b:ad:6d:
3c:be:40:fd:a4:8d:63:42:ff:28:1c:c5:09:c3:5a:41:26:8e:
3e:8f:44:77:54:0a:74:22:08:00:c0:78:90:61:87:5b:d5:69:
4e:c1:56:0e:b6:dc:81:ec:0c:69:4c:70:f5:45:6a:95:01:d0:
02:74:67:ad:b0:42:fd:a4:0b:03:71:71:2d:e4:f7:69:48:98:
03:c8:d7:36:18:d2:70:10:83:76:f7:e4:8a:66:35:ef:7d:f8:
da:87:16:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:35:42 2026 by rpki-client