Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
File: lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json)
Hash identifier: Q1jXnsFXdzRPxxu1/+ZzHzuglqLN3CrKymjmhapPHS4=
Subject key identifier: 40:30:64:9F:62:49:F3:6A:83:51:2D:1F:C5:2D:3F:15:6F:F9:74:0B
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Certificate issuer: /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial: 019CEC6F5E167E79F67535FF2BB086652459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
Manifest number: 0379
Signing time: Sat 14 Mar 2026 13:00:47 +0000
Manifest this update: Sat 14 Mar 2026 13:00:47 +0000
Manifest next update: Sun 15 Mar 2026 13:00:47 +0000
Files and hashes: 1: EhjDtKMsVMUs0ZuH-lX2Q3No4_k.roa (hash: dyUmYbTgpywEf3UhaQdBj3HPVSQs7lYIPuCIHhpwi/A=)
2: Lw7L_6TL3xXAOYbu4BXtgufTgsE.asa (hash: PLDlG1iHC8FjmM9ZbPbgJZ/cE8eZpKuBZFtO/3E37fU=)
3: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: +pKWqRSlzJcmAw+4cW2VREKKsvTYQCZ4Jmxy95azXJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:6f:5e:16:7e:79:f6:75:35:ff:2b:b0:86:65:24:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Validity
Not Before: Mar 14 13:00:47 2026 GMT
Not After : Mar 15 13:00:47 2026 GMT
Subject: CN=4030649f6249f36a83512d1fc52d3f156ff9740b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:13:2f:60:6b:4d:94:8c:7e:26:3e:17:4f:3a:
20:59:34:c3:e4:6e:7b:13:0e:ef:e6:40:a0:43:a5:
5f:fb:89:e7:af:e3:ac:88:8d:9a:bb:5d:cc:1b:54:
bd:2a:c6:76:e2:6b:45:b0:d6:6d:a0:9a:5b:fb:11:
4e:1b:92:9a:55:4b:79:99:fb:b1:62:a8:2a:af:c1:
6c:5c:3e:31:a3:df:88:0e:9e:2b:f8:2f:cb:74:f1:
b0:36:32:cb:af:ad:aa:73:22:ca:a5:9d:14:07:75:
1a:7d:32:9d:89:4f:61:06:1f:cc:e4:ea:99:f5:2b:
98:8f:92:f5:6d:03:a0:47:3a:c6:32:cc:a6:36:60:
ab:ea:6d:4b:f6:b7:7d:64:46:76:0d:f7:07:3c:0f:
be:90:3e:e5:6f:3e:84:3a:70:ee:3a:d3:20:91:35:
27:9f:a2:b1:94:fc:f1:e6:d9:96:74:d9:63:84:95:
71:e3:f9:36:00:f0:e6:13:20:ad:90:a5:38:d4:57:
00:69:64:b6:d8:5e:dd:f6:f7:6e:db:65:d4:6d:84:
26:47:37:b6:1f:0e:ec:35:74:4f:85:a2:a3:2b:43:
cb:8c:3b:67:37:27:d5:18:24:fc:85:c3:f6:13:35:
ac:f4:b5:23:16:1e:89:0f:db:2b:8b:fd:e1:fe:e9:
8d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:30:64:9F:62:49:F3:6A:83:51:2D:1F:C5:2D:3F:15:6F:F9:74:0B
X509v3 Authority Key Identifier:
keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ae:f7:6e:7a:99:47:32:99:75:27:e7:a7:35:0e:24:30:b4:
28:0b:5e:37:af:ca:e5:4e:5f:f2:4c:9a:48:13:99:83:7f:e4:
75:ba:39:37:b3:26:d8:91:52:4d:87:5f:98:26:58:4f:e2:dd:
d3:4b:e4:98:f6:17:93:56:9a:d2:7a:25:1d:df:35:d5:7b:85:
e9:20:1e:83:32:c7:00:f7:24:ff:af:b1:98:12:66:37:53:88:
5d:65:0f:dc:f7:8a:03:d2:f6:51:d3:d8:95:8f:d5:19:5a:28:
62:a0:e5:3d:4f:63:c8:87:3a:8d:59:ec:d0:95:8d:f4:58:83:
92:77:66:f3:76:c5:62:c9:e7:00:90:53:ab:bb:5c:d2:e4:8c:
12:a9:68:e3:39:62:fa:3d:09:61:69:1b:13:cc:cd:55:60:a7:
82:0e:8d:05:02:31:88:ac:60:fe:c9:3f:6c:b9:5d:81:44:ee:
2e:60:79:e6:28:7a:4c:cc:91:75:5a:4b:17:ba:d9:a9:0a:45:
80:e6:d4:f8:2c:6e:f4:32:63:0d:f8:84:4f:f6:ad:1b:8c:3c:
21:25:d5:84:00:ed:a2:84:61:2e:f3:90:61:98:d1:fd:9d:04:
16:7e:71:94:1b:d8:b2:ee:bc:58:38:c6:ed:1e:2a:70:90:76:
68:38:92:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 23:50:05 2026 by rpki-client