
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
File: lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json)
Hash identifier: 7Q3wdj7G4Kbeyl2QJumdM7VEBVeXd2pn2R22Dd1a4Sg=
Subject key identifier: EF:3C:39:6B:F7:A2:3A:18:85:EE:5C:FC:00:1A:6F:4A:F8:00:14:99
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Certificate issuer: /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial: 01A14FBEBB729178BFCB6AF3CBF7F24C5A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
Manifest number: 05C0
Signing time: Sun 18 Oct 2026 16:01:02 +0000
Manifest this update: Sun 18 Oct 2026 16:01:02 +0000
Manifest next update: Mon 19 Oct 2026 16:01:02 +0000
Files and hashes: 1: 7lwx1zJrY0F3LdoEn_iJXa3pM84.asa (hash: Q0oQMweHsmrfdfYTRFNKYhoRxahIkowVFvNwfkroZB4=)
2: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: D+6pYs/P3iLJDVLiYXlx+3DCAEqz5zHYquVLSiKdvV8=)
3: muW2gXnRp1qaODo0ouyKGYdXRQM.roa (hash: uwoS++UOOAyVAxFL4NeJEEd/lYaAh16OBVSecbqpdiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 16:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4f:be:bb:72:91:78:bf:cb:6a:f3:cb:f7:f2:4c:5a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Validity
Not Before: Oct 18 16:01:02 2026 GMT
Not After : Oct 19 16:01:02 2026 GMT
Subject: CN=ef3c396bf7a23a1885ee5cfc001a6f4af8001499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8d:f1:62:6e:93:22:db:ec:da:cd:81:ee:9d:
24:42:1f:23:49:f3:fa:08:2d:5c:4c:48:43:04:b9:
9a:91:59:5f:45:0f:8b:61:e5:9b:f3:b6:b2:a9:a8:
14:32:bc:a0:7f:1d:2f:a2:ec:f3:73:36:7c:c5:2d:
1b:bd:11:73:89:58:41:e6:3d:02:e1:5f:db:a9:b6:
c7:00:80:38:ea:f8:7e:2a:c5:25:be:ce:80:8b:50:
eb:2e:84:51:8b:33:87:b3:ed:b1:d3:18:fb:5e:04:
db:68:00:b9:55:71:08:f0:77:73:a4:ae:71:d9:21:
34:84:bd:eb:de:58:43:89:67:d0:00:c0:7a:b3:fc:
15:15:ca:95:58:9e:96:a6:95:80:0f:4f:0d:32:ac:
07:77:96:a7:66:72:21:bc:46:9d:49:28:6d:b4:cd:
22:6f:dc:9c:9b:a4:35:6d:8f:29:2e:24:c0:e6:3d:
c1:cf:d3:80:a7:fe:76:96:44:45:4a:1e:88:dc:27:
58:28:45:1a:7d:36:98:e4:b2:aa:8b:4f:a6:ec:42:
7e:e4:84:34:57:20:55:a0:67:9a:86:11:ce:5e:65:
f9:7e:1b:c5:e1:4c:ee:c0:f9:e7:db:ee:76:98:3f:
ab:95:f6:6e:be:7a:a5:0f:4f:ff:46:d4:1f:b4:e3:
f3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3C:39:6B:F7:A2:3A:18:85:EE:5C:FC:00:1A:6F:4A:F8:00:14:99
X509v3 Authority Key Identifier:
keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ac:94:4c:82:8d:23:b7:8c:aa:9a:6b:7b:dd:d1:da:ab:f4:
43:57:0a:8a:42:2c:75:09:6d:bf:1b:0f:9d:3a:d6:e0:ad:6f:
d9:61:f3:cd:98:98:21:21:9d:aa:58:b2:25:f3:0b:9d:b9:c9:
06:53:f8:3c:9f:0b:eb:08:18:1d:d1:af:ff:ee:fa:64:bf:6f:
05:81:d7:00:c6:ba:2b:82:58:32:ac:05:83:6c:96:74:f0:20:
29:8b:76:a7:c2:3b:b3:77:99:2a:6a:41:b8:d9:5e:e6:4a:28:
90:35:85:31:20:b2:5f:33:5b:e4:8a:74:48:4b:f7:93:a5:f8:
09:b2:62:9d:91:b4:07:df:7c:27:e1:44:78:cb:6e:a3:ac:73:
91:a0:f8:75:2d:38:ec:e7:7e:61:39:40:d5:14:28:24:b0:2f:
9c:0a:6f:ba:78:df:29:59:d0:e5:9f:af:c6:53:2f:69:86:3a:
30:0f:95:c3:50:07:bc:ed:b9:79:ed:3e:48:ae:04:2a:b6:f6:
84:b3:11:d2:ad:d8:a6:1e:d0:32:29:fa:1f:0c:c3:82:00:e8:
de:00:22:29:ab:f4:8a:d1:39:b9:da:b7:71:e9:48:9d:27:75:
61:16:88:c0:60:6e:40:7e:3f:bb:d2:95:5f:24:39:32:be:12:
c8:96:2d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 01:42:20 2026 by rpki-client