Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
File: lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json)
Hash identifier: XWWVG0z+VGlpYkASqsb9lb34pgoHL1yu8RvFWv4WZzM=
Subject key identifier: C6:9E:09:DB:BE:A0:9D:DE:57:61:2D:CE:DE:53:0D:9C:AA:EC:85:48
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Certificate issuer: /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial: 019D8C155DD39203F0E4CAA68FD09656E572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
Manifest number: 03CC
Signing time: Tue 14 Apr 2026 13:01:43 +0000
Manifest this update: Tue 14 Apr 2026 13:01:43 +0000
Manifest next update: Wed 15 Apr 2026 13:01:43 +0000
Files and hashes: 1: EhjDtKMsVMUs0ZuH-lX2Q3No4_k.roa (hash: dyUmYbTgpywEf3UhaQdBj3HPVSQs7lYIPuCIHhpwi/A=)
2: adJ8Ky_ronY-yz7LKBDyvuJ2060.asa (hash: XoaHtIBvAUQh2znuwTfM9cH8f4q14SD4Tb4S0zzg0E0=)
3: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: 2VwNMUWUgtx1n5QabGP6pmYc1jRCD0aqxSIjhKb0PsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Apr 2026 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8c:15:5d:d3:92:03:f0:e4:ca:a6:8f:d0:96:56:e5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Validity
Not Before: Apr 14 13:01:43 2026 GMT
Not After : Apr 15 13:01:43 2026 GMT
Subject: CN=c69e09dbbea09dde57612dcede530d9caaec8548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c9:f0:c3:d4:55:d3:d9:49:fb:f8:3f:b6:ed:
21:72:65:88:25:2f:29:d7:fc:cb:3e:52:5a:0d:98:
1e:64:8e:cb:81:b4:25:fc:82:a4:c2:26:d9:ba:b5:
c3:e8:f0:1d:30:db:c4:c2:c5:54:0d:06:1b:ab:9c:
ea:da:68:9d:42:28:ab:2e:b3:75:25:69:53:47:12:
b0:d4:19:7a:52:1f:82:dc:9e:eb:f8:46:41:e5:4d:
92:9d:76:04:03:00:2a:da:5b:c0:72:57:ef:6f:64:
f4:00:29:ec:7e:ad:0f:91:59:0e:09:9c:e0:07:65:
11:86:26:44:a7:ff:dd:3d:81:f0:5f:d2:ba:22:87:
79:64:e2:a0:da:bc:6e:f7:78:d9:b4:02:34:10:2a:
c1:b6:62:51:32:20:66:a5:57:35:33:5b:57:60:64:
2a:4f:28:6a:de:87:c5:12:e2:ec:64:72:3b:ab:4a:
29:5d:e0:af:c3:6b:fd:fa:5f:4f:5e:ad:60:eb:b0:
8f:3b:6f:cd:09:d2:39:0f:76:83:6c:7e:90:98:51:
21:6a:66:23:3f:e5:07:74:32:ba:26:d2:ab:df:be:
46:34:d1:44:c5:b0:e3:2b:f6:d3:43:ad:80:ad:92:
54:ba:8a:17:ec:10:24:81:c3:50:19:11:44:d1:cc:
ea:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9E:09:DB:BE:A0:9D:DE:57:61:2D:CE:DE:53:0D:9C:AA:EC:85:48
X509v3 Authority Key Identifier:
keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:47:52:e7:16:1b:5b:7d:bf:fa:73:46:8f:0d:f5:e5:6d:36:
8f:f3:7e:bf:44:dc:07:30:a3:6c:ea:58:58:4a:ac:d7:e8:da:
00:8b:d0:4b:d4:01:6a:e7:14:46:1f:86:65:af:b9:07:d0:70:
26:08:1a:33:5b:5a:b3:5d:9c:31:8b:71:0f:7d:34:53:66:6e:
f1:a8:d8:be:a6:18:20:ea:10:b0:72:2f:54:5e:d3:dd:98:fd:
f3:f0:aa:26:a4:f4:4a:b8:38:32:bc:ab:cc:27:0c:c4:8d:f4:
d6:b0:38:d9:7f:6b:09:51:18:8c:c0:85:01:d0:9a:61:68:96:
c8:22:e7:f2:d9:3a:f9:d8:b8:13:fb:19:e0:90:ff:b3:2a:6e:
d3:a6:61:bd:16:38:f0:bc:f4:1d:a4:f4:f4:90:e4:a7:56:f8:
1b:68:8a:05:0b:0b:8d:c8:d3:4e:1f:fb:79:e5:20:13:f2:8c:
06:6b:22:3f:61:27:69:f7:2d:02:40:85:7b:d9:eb:b2:e7:b9:
99:da:cf:07:37:5e:30:fe:e3:d7:04:1d:f8:77:dd:9b:4f:83:
d8:50:cb:e0:96:3c:13:b9:58:20:7c:d6:bc:cc:04:38:ba:76:
95:61:90:d7:03:6d:39:66:ed:d3:48:f3:10:23:64:95:c3:b5:
01:67:ce:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 14 20:13:37 2026 by rpki-client