Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
File: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft (raw, json)
Hash identifier: pVRNp4DD19qRlzyQ6Ia/lmUQ3RbpLL1HCPvwEU6DsAQ=
Subject key identifier: 86:50:D4:F1:AE:40:31:68:85:6A:26:4C:D2:F5:5E:4F:63:02:00:AD
Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
Certificate issuer: /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Certificate serial: 019F92487654EFBAE45518D2BCC6AA50DC41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
Manifest number: 1959
Signing time: Fri 24 Jul 2026 04:00:49 +0000
Manifest this update: Fri 24 Jul 2026 04:00:49 +0000
Manifest next update: Sat 25 Jul 2026 04:00:49 +0000
Files and hashes: 1: 8Lq3lIQ57V2x5XRAthwXhjdfPZ0.roa (hash: 11Z2xFuTQAhf/AKwmMmwrf1P3F5XfEX9AMFlRSFk2p4=)
2: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl (hash: 69nVqPnBUt/LWxE74e2h9UuWYb3913lsFsdGiWp5wgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:76:54:ef:ba:e4:55:18:d2:bc:c6:aa:50:dc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Validity
Not Before: Jul 24 04:00:49 2026 GMT
Not After : Jul 25 04:00:49 2026 GMT
Subject: CN=8650d4f1ae403168856a264cd2f55e4f630200ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2c:04:66:e2:89:a1:52:6e:bc:03:5f:e5:87:
7d:16:57:b6:ca:b5:57:d0:9c:60:30:79:cb:07:e9:
f2:7b:a7:fa:15:8e:dd:ef:d0:16:98:07:ee:49:95:
f1:fb:07:01:b2:a4:b2:81:78:54:b0:23:88:18:7a:
6f:d4:e5:71:f6:31:43:38:12:a4:87:1b:d4:76:b4:
37:fd:ca:55:93:ac:e3:23:5c:2b:d9:64:3f:c8:0e:
b6:df:cf:7b:39:d9:0d:9e:c9:e1:80:cd:8d:5a:4e:
71:63:59:83:da:c8:0a:75:c5:e6:24:c3:2e:21:1c:
aa:c9:ea:4e:80:43:85:5c:ba:1e:53:34:64:be:37:
c5:23:6f:da:8e:61:c2:9d:5b:95:f9:90:66:de:e3:
3a:d9:0d:88:27:47:8d:4c:9e:b9:36:bb:96:be:44:
90:59:a2:21:ba:b3:a4:b6:2c:7f:11:3f:a6:a4:0c:
a1:8e:2d:d8:f5:cf:93:1a:5a:da:f2:02:ad:7b:10:
9e:b6:b7:19:44:69:99:8b:e6:db:54:cb:f8:25:a9:
31:78:8b:74:bf:d1:84:a1:4f:e2:e4:7f:48:cb:97:
87:29:08:7f:6c:1e:ec:6e:ed:7e:1b:ca:46:e4:d1:
a0:d6:6d:14:42:5f:bc:ab:b7:48:34:70:9d:82:95:
a3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:50:D4:F1:AE:40:31:68:85:6A:26:4C:D2:F5:5E:4F:63:02:00:AD
X509v3 Authority Key Identifier:
keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:68:74:d9:69:5e:55:27:e9:0d:44:3d:b6:84:33:81:fa:e1:
9f:68:7a:21:2a:6e:f2:2f:e6:d9:43:79:f2:80:65:e9:cf:56:
7c:ea:90:3a:44:bc:1e:64:44:68:91:5a:7c:fe:4a:f5:fb:59:
2b:2c:95:22:22:6b:fc:3b:1c:f0:60:ae:c3:db:3e:47:93:8c:
ab:05:12:1a:18:78:05:33:30:04:70:50:01:65:9c:53:41:ac:
ef:23:15:9a:50:72:cd:02:3e:1e:e5:62:69:98:d5:ec:e8:f9:
8c:c1:47:2b:36:0f:df:26:ad:0d:56:0f:cc:01:7f:0c:12:97:
43:41:d5:dc:14:15:25:62:47:5c:a8:eb:d1:ff:77:8e:25:b3:
e3:76:78:dd:6e:f1:56:f6:53:8e:da:c4:db:e9:4b:94:51:fe:
2c:6d:c6:cd:62:7c:16:07:c0:46:43:63:ce:93:b6:f9:74:b4:
94:4f:80:77:8b:f1:30:3a:3c:f1:99:1a:eb:87:26:cb:0d:95:
57:f1:00:8b:0d:bb:b2:98:bb:d3:de:2f:06:51:ab:46:c1:14:
78:4f:95:e3:05:be:7b:be:8c:ff:a2:cc:d3:ab:1a:80:52:af:
99:e9:7a:d5:91:22:84:81:59:e8:ae:9d:e1:d3:e3:07:b9:93:
a1:be:a9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:17:29 2026 by rpki-client