Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
File: lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json)
Hash identifier: MSDpQk+mz037gjQ6FddW1BYWzSkQRszMH8LZIVJL+eA=
Subject key identifier: 3B:79:47:55:7E:17:16:FD:2B:18:2D:A5:12:11:C4:1D:73:EB:18:BD
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Certificate issuer: /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial: 019F5ECA049C8164A563CB9CD03BDECEC63D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
Manifest number: 04BE
Signing time: Tue 14 Jul 2026 04:02:05 +0000
Manifest this update: Tue 14 Jul 2026 04:02:05 +0000
Manifest next update: Wed 15 Jul 2026 04:02:05 +0000
Files and hashes: 1: 7lwx1zJrY0F3LdoEn_iJXa3pM84.asa (hash: Q0oQMweHsmrfdfYTRFNKYhoRxahIkowVFvNwfkroZB4=)
2: EhjDtKMsVMUs0ZuH-lX2Q3No4_k.roa (hash: dyUmYbTgpywEf3UhaQdBj3HPVSQs7lYIPuCIHhpwi/A=)
3: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: U2FubWW1dQ3wcjVjtqaU8gEtyEGZFv5YBurDNEhXo60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 04:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5e:ca:04:9c:81:64:a5:63:cb:9c:d0:3b:de:ce:c6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Validity
Not Before: Jul 14 04:02:05 2026 GMT
Not After : Jul 15 04:02:05 2026 GMT
Subject: CN=3b7947557e1716fd2b182da51211c41d73eb18bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:36:e3:04:42:86:99:bf:7a:5d:a0:02:b7:
ed:dc:82:2e:2d:8d:24:11:f7:ef:58:47:2d:98:01:
46:4b:02:bf:85:b1:77:ea:b8:a9:0c:27:31:a3:29:
7e:61:dd:fc:30:c7:26:29:3c:ff:b1:f8:d3:31:22:
08:fb:88:3c:e9:c8:9e:c1:ed:da:ca:05:c1:e2:78:
41:06:df:dd:0a:1b:dd:d3:b4:3b:89:2a:a5:51:11:
dd:84:31:22:de:f1:55:07:2f:e6:d3:ee:0a:dc:10:
df:33:33:44:43:83:6b:12:56:f1:2a:7d:f7:b7:70:
4b:e3:82:cc:02:ea:6f:df:28:4b:60:c9:54:ff:05:
90:f4:3f:31:f7:a9:d6:b0:7c:e8:62:9b:ac:7e:97:
67:67:8a:c4:02:e9:d6:7f:5b:5c:04:1c:68:cc:f6:
54:ef:e5:2c:c4:2b:cf:38:8f:5a:39:f8:40:48:4f:
d7:3d:09:4a:38:70:bd:f3:8c:20:c9:ab:03:99:ed:
b0:66:e8:c2:95:7d:2f:d5:75:dd:69:1e:eb:5b:fc:
e1:59:c7:56:88:f8:c2:fd:85:c7:a6:d2:c4:89:eb:
76:8f:24:f2:aa:d1:3b:24:14:c4:d3:36:84:11:66:
cc:af:1c:ca:ec:0e:0d:02:e7:19:59:6b:20:d1:a4:
5a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:79:47:55:7E:17:16:FD:2B:18:2D:A5:12:11:C4:1D:73:EB:18:BD
X509v3 Authority Key Identifier:
keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:6b:8d:5d:9c:92:a6:43:18:75:fe:ed:ce:c6:e7:94:e1:ed:
30:a9:db:d6:72:aa:90:b5:44:0a:73:a9:f1:50:91:59:66:71:
64:94:e9:d9:62:0c:4f:05:f6:16:9f:8d:0d:31:3b:aa:24:ac:
5b:6c:5c:81:ce:ed:d9:0b:1b:e9:42:f7:73:fe:c0:d1:cb:32:
20:c9:82:0d:c6:ab:46:ef:f8:ad:0e:07:68:cb:a5:6b:56:7a:
2c:b4:52:d3:d5:c1:44:af:07:f3:34:ca:90:72:92:eb:1f:41:
85:2d:af:ac:16:cb:e0:b4:ec:67:14:03:5b:90:fc:1c:92:d2:
ed:65:67:ce:ad:64:78:72:49:27:72:8b:d6:9b:41:6b:fd:c9:
60:53:e3:92:3b:f0:b6:21:57:de:d4:0f:53:f3:f1:e1:d5:04:
69:b7:bb:46:76:d6:97:85:a8:45:8b:96:4d:ab:a2:e7:2f:2d:
86:0f:99:f0:97:f2:70:45:77:2c:28:62:9d:9f:d8:3c:33:d8:
1f:fb:af:5d:e0:7f:82:e5:e8:56:ee:2f:3a:42:05:cb:f3:e4:
a3:7d:19:54:de:2d:06:41:8d:55:9d:e3:35:e5:26:da:87:6b:
fd:11:8d:40:f2:8e:4b:a9:0f:4a:72:e8:5d:9f:43:76:99:ac:
39:9c:b4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 12:54:09 2026 by rpki-client