Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
File: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft (raw, json)
Hash identifier: Pl2C4YKSb1J/8YVRO+Op0TMVUZtnJF/0ItsXVy5H0PY=
Subject key identifier: 59:62:EC:8D:FE:E5:74:F1:58:11:FA:FB:E8:D1:47:FE:4C:71:E8:33
Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
Certificate issuer: /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Certificate serial: 019D265FBEDE76BADBDB38A576D497CA577B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
Manifest number: 1818
Signing time: Wed 25 Mar 2026 19:01:42 +0000
Manifest this update: Wed 25 Mar 2026 19:01:42 +0000
Manifest next update: Thu 26 Mar 2026 19:01:42 +0000
Files and hashes: 1: 8Lq3lIQ57V2x5XRAthwXhjdfPZ0.roa (hash: 11Z2xFuTQAhf/AKwmMmwrf1P3F5XfEX9AMFlRSFk2p4=)
2: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl (hash: blP8MUsbhMlyFLjv5KAyvSCZ92hRzTuLtgmqaEsvHUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:be:de:76:ba:db:db:38:a5:76:d4:97:ca:57:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Validity
Not Before: Mar 25 19:01:42 2026 GMT
Not After : Mar 26 19:01:42 2026 GMT
Subject: CN=5962ec8dfee574f15811fafbe8d147fe4c71e833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ce:43:5a:8c:f4:f4:2a:6e:1c:c7:0a:be:04:
42:b0:6c:6c:2a:41:a5:24:e8:a9:7c:48:ee:89:a4:
97:ee:4f:de:b5:58:26:59:7f:df:2a:2c:00:71:cf:
ce:05:10:35:ba:07:54:82:42:8f:22:0c:6a:94:7c:
22:7b:db:a9:e6:e0:c8:ab:33:c7:b1:af:58:db:28:
8a:21:12:27:0a:bd:23:90:89:f5:e2:12:a6:67:0f:
91:29:b2:fe:de:c3:19:1b:bc:8e:3f:93:7e:9c:d8:
ea:84:f8:4e:94:d1:7f:af:15:6b:1d:00:ad:87:a0:
07:6e:a8:da:4c:d4:d5:c6:31:4f:55:f0:53:28:06:
3d:0a:b2:bf:d6:01:a8:a1:1b:7d:0f:04:26:52:ea:
17:52:eb:a0:49:92:7c:f7:1f:01:48:77:9e:84:e3:
3b:eb:7b:3f:57:2a:a8:c8:67:53:5e:1b:4c:02:c0:
de:14:d6:c0:a4:2f:a3:f7:17:2f:46:79:6a:84:14:
6b:ca:1f:2c:8f:75:40:95:06:5b:c7:76:cf:36:7f:
6c:1d:84:bc:b4:67:4f:a0:e3:58:f7:28:c0:60:65:
c5:21:7c:69:70:95:12:26:a4:ba:8c:30:d1:4d:cb:
2f:f9:48:14:26:25:ad:a4:da:5b:66:c1:38:c6:39:
ec:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:62:EC:8D:FE:E5:74:F1:58:11:FA:FB:E8:D1:47:FE:4C:71:E8:33
X509v3 Authority Key Identifier:
keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:0c:3d:29:09:eb:75:8f:c7:d4:b3:b7:3d:b7:7e:6e:11:a2:
e1:28:6b:b3:1c:dd:78:03:f9:71:13:a7:ba:7d:e6:74:19:53:
fd:a7:28:1c:5b:d7:d3:47:8b:1b:71:0d:83:11:e5:93:51:20:
f6:25:0f:7a:44:d7:92:0e:d4:20:ac:18:25:af:4b:97:a3:01:
f4:c7:ca:a9:e9:34:d1:22:80:54:ec:4a:e4:6c:a5:9f:ca:89:
8c:af:16:6f:61:67:1f:3d:e9:0a:c4:08:91:88:fc:6d:12:3a:
84:56:54:09:14:7f:32:9b:bf:f8:76:3f:2b:7d:ab:0b:da:67:
10:53:15:e7:d0:53:59:7c:f5:29:4b:1b:bd:a6:73:fc:c7:33:
ae:d2:df:07:a8:50:50:28:fb:dd:93:34:c4:f4:98:da:6d:4a:
5a:ea:54:2e:b2:ea:f6:11:f0:5c:ec:48:54:57:8b:8c:2c:d3:
9a:e7:1e:05:bf:4c:36:13:93:03:c9:4d:29:b4:8e:f5:5c:39:
62:b0:f8:4a:97:82:df:af:2d:bf:6f:6f:0b:6b:46:3e:ae:5f:
a2:56:06:b0:02:fb:77:d5:32:56:62:a9:9b:22:80:ae:d7:65:
1e:16:a6:e1:e3:aa:6b:09:c1:76:c3:86:4a:01:5b:c4:4e:15:
1f:d1:52:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:49:54 2026 by rpki-client