Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.mft
File: lh80Y53Jb_GEYziBzXBzrjGf4to.mft (raw, json)
Hash identifier: C0F/6xRSmTVCKkHSh/IAr894cNWvVDDEB81ElA/7HNg=
Subject key identifier: C1:E9:F1:5E:2E:B3:0B:DD:DA:F5:89:EE:D2:A8:EF:FB:CD:F9:BE:A9
Authority key identifier: 96:1F:34:63:9D:C9:6F:F1:84:63:38:81:CD:70:73:AE:31:9F:E2:DA
Certificate issuer: /CN=961f34639dc96ff184633881cd7073ae319fe2da
Certificate serial: 019E1CEBDEC68C7A1075D158E1F0ECBAD1C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lh80Y53Jb_GEYziBzXBzrjGf4to.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.mft
Manifest number: 98
Signing time: Tue 12 May 2026 16:01:20 +0000
Manifest this update: Tue 12 May 2026 16:01:20 +0000
Manifest next update: Wed 13 May 2026 16:01:20 +0000
Files and hashes: 1: kjCR_bdCRqh1misX4Uz-yIyS1po.asa (hash: 82A011Hf6oJtQgxOAq1FBWNeCl3xvpnApBB5CdfqWUg=)
2: lh80Y53Jb_GEYziBzXBzrjGf4to.crl (hash: HY9TB/ag+woIazkA7d+IRDRvNuj5kJMPUlSuSiKeO1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.mft
rsync://rpki.ripe.net/repository/DEFAULT/lh80Y53Jb_GEYziBzXBzrjGf4to.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:de:c6:8c:7a:10:75:d1:58:e1:f0:ec:ba:d1:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961f34639dc96ff184633881cd7073ae319fe2da
Validity
Not Before: May 12 16:01:20 2026 GMT
Not After : May 13 16:01:20 2026 GMT
Subject: CN=c1e9f15e2eb30bdddaf589eed2a8effbcdf9bea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a9:ce:a1:ee:e4:04:0f:1d:a1:df:32:11:72:
20:8e:03:0b:eb:04:1d:dc:1a:17:6d:74:9d:84:e2:
da:b7:c8:1b:c8:f7:af:c0:55:4a:dd:e9:ae:f2:f1:
04:ca:36:27:43:a1:77:85:e8:ae:03:4b:ea:84:c6:
2f:22:4f:bd:0a:57:03:aa:73:8f:86:73:88:02:10:
62:97:6f:bc:92:68:65:a1:06:cb:dd:20:08:af:e2:
1a:84:5b:60:1e:74:d8:41:e5:94:ab:32:88:5e:cc:
1e:d4:af:43:43:d1:4e:68:63:b4:b4:dd:e7:db:e9:
59:99:8e:e2:e5:69:26:1d:7b:8d:8c:80:c4:06:d4:
61:1e:da:e5:cd:c1:25:36:74:bf:5e:25:28:26:c7:
a2:24:38:d9:bd:32:82:ff:97:a8:37:4b:d6:65:3d:
1b:f2:8c:e4:b3:e3:4e:67:31:c5:4d:87:c8:f4:eb:
36:0c:ed:8e:22:73:56:ac:8e:c3:23:09:cd:8a:55:
73:fe:43:55:30:1e:58:29:2b:75:26:3c:fd:17:79:
d4:88:ed:48:1a:3f:b1:c7:a7:c5:b1:ed:34:01:46:
72:7c:78:0f:73:fc:8c:0e:8f:4d:7e:f2:ec:8a:84:
8b:05:d9:97:b0:54:97:b8:68:53:ff:53:5d:da:51:
27:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E9:F1:5E:2E:B3:0B:DD:DA:F5:89:EE:D2:A8:EF:FB:CD:F9:BE:A9
X509v3 Authority Key Identifier:
keyid:96:1F:34:63:9D:C9:6F:F1:84:63:38:81:CD:70:73:AE:31:9F:E2:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lh80Y53Jb_GEYziBzXBzrjGf4to.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f6:46:51:ee:ff:2c:6b:8f:7c:b2:07:b2:98:d6:2e:5c:67:
7d:04:5f:d1:6e:3b:b2:e9:9e:6d:11:d9:d4:af:1a:2d:fd:ca:
3c:f5:44:92:8d:86:14:3c:b4:5e:4d:b5:eb:08:c7:91:9f:01:
5f:fe:50:19:67:21:fc:20:1d:df:26:35:77:7d:4d:ed:8c:bf:
5d:6f:e8:76:e3:a1:85:26:74:ba:85:ac:ff:99:2f:89:bd:06:
86:48:94:c2:25:74:66:63:e8:70:77:54:87:3c:75:d7:d6:e2:
3f:97:bc:53:27:91:e3:d3:11:9b:4b:1a:10:6e:b9:7d:b5:f0:
3f:31:31:7a:0e:dc:d1:1a:6e:91:78:45:72:50:65:3c:a8:d1:
b4:fa:ed:2a:a0:f5:7d:d4:ce:41:95:af:4f:e0:7d:34:58:91:
d8:c2:0e:94:3c:fe:a2:05:6e:ad:bc:f5:32:7a:c7:14:4d:62:
50:c4:10:cb:7d:3f:b4:56:ad:0a:c0:36:a0:2e:7e:6d:d4:08:
57:39:08:f0:e1:b9:66:51:fc:0d:4e:8b:ca:89:bd:36:a5:0c:
fe:3c:0c:39:c0:b6:ed:b0:08:30:f9:20:49:bd:cf:5b:97:78:
6b:c3:22:3c:3a:47:de:45:a4:23:f2:73:d9:11:f3:ac:9f:8e:
32:07:8c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:27:08 2026 by rpki-client