Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
File: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft (raw, json)
Hash identifier: U4USANBgBgyXHbaqyhYU+W22Haj7T3JelC+ADkip78s=
Subject key identifier: 7C:71:56:D8:EF:41:3C:53:41:CC:EE:D3:D3:83:C1:EF:81:80:E0:54
Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
Certificate issuer: /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Certificate serial: 01A0EBF9CC96D32C723AA27E58B5B31E9FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
Manifest number: 1A0C
Signing time: Tue 29 Sep 2026 07:03:31 +0000
Manifest this update: Tue 29 Sep 2026 07:03:31 +0000
Manifest next update: Wed 30 Sep 2026 07:03:31 +0000
Files and hashes: 1: 8Lq3lIQ57V2x5XRAthwXhjdfPZ0.roa (hash: 11Z2xFuTQAhf/AKwmMmwrf1P3F5XfEX9AMFlRSFk2p4=)
2: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl (hash: lKfz3b/X/4yj7pjEdnRYPDlXM7a88+MtEFSIkV308LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f9:cc:96:d3:2c:72:3a:a2:7e:58:b5:b3:1e:9f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Validity
Not Before: Sep 29 07:03:31 2026 GMT
Not After : Sep 30 07:03:31 2026 GMT
Subject: CN=7c7156d8ef413c5341cceed3d383c1ef8180e054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9d:42:1d:ce:07:ea:f3:0a:8b:e1:be:ae:54:
5d:ca:8b:46:89:aa:ba:44:7b:e5:7f:4b:68:5b:5a:
98:c2:f8:7a:37:01:c6:2e:c3:2c:c7:f1:96:54:ea:
b4:a2:9b:29:46:b9:ab:7a:aa:0e:1b:3b:cc:65:7c:
42:57:38:9b:15:96:bf:69:da:93:ae:84:ba:6f:d6:
1f:03:22:e0:19:30:f0:95:a2:d4:4f:93:f0:53:16:
33:c1:d9:0d:2b:75:9d:0e:59:e3:6e:f8:f3:9f:da:
58:9f:cc:aa:41:a2:82:09:85:31:43:c5:c1:cf:5a:
2e:b8:ba:60:aa:d8:39:00:dd:b7:31:6b:61:4f:fd:
90:96:c6:b1:8a:be:c0:b9:40:fc:9a:11:3d:6e:32:
ad:74:c6:04:0a:15:e1:4a:51:6a:5e:2a:7b:76:ba:
db:1c:e2:c0:ae:7c:db:52:72:14:ae:7f:d7:32:db:
d3:65:c8:6e:c1:ef:64:fa:f5:b8:7b:32:6a:90:03:
83:7c:65:96:08:c8:68:37:f3:b7:76:d7:ed:7f:ce:
9a:36:19:db:36:00:69:4c:fe:cc:8f:f7:16:36:71:
16:48:47:38:e3:ac:26:69:24:83:cf:d3:78:b0:84:
22:ac:48:bb:ea:2c:d7:4e:d6:ca:16:3f:a9:f2:9c:
4e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:71:56:D8:EF:41:3C:53:41:CC:EE:D3:D3:83:C1:EF:81:80:E0:54
X509v3 Authority Key Identifier:
keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7e:1c:c1:e1:fa:61:87:cf:c0:19:3a:6c:b8:73:61:a7:8f:
35:d6:6c:ac:5e:00:bf:5e:5b:0e:e4:8b:ff:91:d2:61:20:f6:
7a:ed:35:ed:79:3a:f1:2a:91:04:87:a6:96:29:ec:60:e5:12:
61:8a:3e:96:03:a1:f2:d6:0d:b8:3e:90:18:8f:af:da:4d:08:
d3:80:dd:42:8c:e3:d0:a9:e3:0c:c6:b1:e7:48:51:15:d6:13:
cd:ae:10:62:23:7f:c7:68:d6:2b:dc:f8:10:0a:52:78:a0:41:
14:75:32:9f:1d:41:b4:29:92:4e:eb:38:e1:6f:50:01:48:22:
ba:c6:84:05:91:3a:bd:ad:89:6f:4c:83:90:6e:3b:2e:7a:17:
98:38:02:30:9e:cf:7a:09:a3:b1:33:71:83:d8:76:ce:aa:73:
fd:8d:3c:a3:66:c3:83:ad:b0:91:b9:72:6c:29:e6:52:47:51:
5b:85:87:04:51:18:d5:8c:2b:5b:0b:d2:b2:f7:2f:3a:b9:97:
78:09:b8:56:54:19:e8:b2:28:21:c2:c4:33:51:27:60:44:e8:
9a:b2:6c:73:9e:1d:45:9d:d4:d5:23:ae:43:60:4f:47:1a:12:
1f:10:fa:88:9f:67:9f:ba:11:e6:43:57:43:28:d5:ff:25:5a:
dc:df:ba:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:46:52 2026 by rpki-client