Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
File: lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json)
Hash identifier: NKLunSbTQ79E4vIeoRR12ykCHGH1V5FGrB4L9dn8+6A=
Subject key identifier: 2D:B6:33:11:D7:33:59:1C:AA:66:20:C4:B9:F2:4C:9F:16:F1:82:6A
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Certificate issuer: /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial: 019C981B690A5F540C92BF58C77865F053FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
Manifest number: 034D
Signing time: Thu 26 Feb 2026 04:00:58 +0000
Manifest this update: Thu 26 Feb 2026 04:00:58 +0000
Manifest next update: Fri 27 Feb 2026 04:00:58 +0000
Files and hashes: 1: EhjDtKMsVMUs0ZuH-lX2Q3No4_k.roa (hash: dyUmYbTgpywEf3UhaQdBj3HPVSQs7lYIPuCIHhpwi/A=)
2: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: 3fKFewV58OJ+uvSCVz6zDEg07AmxVsY9QQVluXv/LrI=)
3: qSRvXrdptD4XaBcPuWnB0wy-xHE.asa (hash: LBd4BHNIXy8q3KkJ/pwL33B6PZyMCIS5FmTlLkB/4dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:98:1b:69:0a:5f:54:0c:92:bf:58:c7:78:65:f0:53:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Validity
Not Before: Feb 26 04:00:58 2026 GMT
Not After : Feb 27 04:00:58 2026 GMT
Subject: CN=2db63311d733591caa6620c4b9f24c9f16f1826a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:42:5d:26:1e:2c:78:df:c4:f1:f4:3f:7f:b9:
af:a3:3e:ad:e4:e3:a3:78:cd:fc:fd:c9:ec:98:6a:
83:d8:9b:2f:3e:cf:8b:43:9e:cb:f2:54:a1:46:78:
1f:18:47:13:43:25:6c:48:07:41:d4:fa:da:07:f7:
c6:3d:78:d6:ea:cd:48:da:5c:84:27:29:2d:2e:88:
fe:e0:8d:5a:f6:3a:b7:ef:e7:a3:3c:28:b2:e5:44:
39:b6:be:70:76:2c:ba:5f:3d:f5:98:16:a3:e2:1a:
cd:24:61:e3:71:a2:5c:fc:b5:bf:80:86:5c:7c:30:
52:f6:8c:09:f9:e2:e9:97:6e:67:75:96:aa:9e:1d:
3a:08:bf:ad:f9:95:21:4c:15:7a:9f:57:0c:60:07:
18:7c:9a:ee:83:e7:71:ff:4b:1e:61:09:0d:fb:08:
87:0d:c6:91:89:05:bc:9f:63:df:c0:38:1d:9d:c0:
0b:1e:63:55:5a:bb:68:54:58:17:c5:72:df:7c:8c:
f0:b3:5c:89:1b:69:7d:94:7c:da:e6:6a:91:97:a4:
be:3c:52:76:65:3e:ce:54:4e:5f:0b:83:1c:91:70:
c4:e1:cc:7b:1f:3c:67:fb:79:e6:7d:90:46:0e:0e:
de:69:29:7a:d9:d0:47:28:36:a2:04:00:6d:25:61:
8c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B6:33:11:D7:33:59:1C:AA:66:20:C4:B9:F2:4C:9F:16:F1:82:6A
X509v3 Authority Key Identifier:
keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3d:62:d4:e8:80:c9:f9:b1:d7:17:c4:d8:c8:c9:a5:37:6c:
ad:6a:18:36:a9:15:71:06:80:d2:87:27:8a:0f:19:0c:52:b8:
73:de:ae:af:ee:e7:58:b1:73:ed:88:f1:48:b1:54:a9:d4:c6:
0d:75:9b:db:b4:ef:3c:2b:87:ef:98:3e:79:4d:69:0c:0e:d7:
a4:a6:fc:69:db:bd:2a:60:91:82:9f:26:01:e8:c8:5a:47:8a:
0c:b2:b3:37:19:79:ac:00:ef:26:1f:61:81:50:2a:f9:da:42:
f3:d7:90:6e:1e:7a:82:a8:6b:4f:07:c9:6a:25:1c:8f:2f:e1:
16:2d:15:28:96:44:15:6f:57:6c:af:25:9c:59:e4:80:e6:19:
8f:d2:7e:b5:75:ee:07:d2:c3:93:6c:e9:22:8c:d2:8d:6e:63:
5c:92:96:18:82:5c:20:85:8f:65:8e:fa:a4:7d:a3:6a:cb:3d:
21:ec:d1:64:a6:5f:56:dc:e5:71:36:92:3e:c5:53:0c:12:0a:
42:ef:c0:de:f0:87:1d:19:0a:4e:2d:28:41:6b:c2:36:d8:ba:
ac:40:94:71:5c:57:65:48:38:e0:93:a7:a4:81:41:49:77:10:
62:6f:0d:6d:ef:62:d6:5d:b8:f5:39:c6:26:59:33:92:7b:4f:
da:14:a8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 10:39:13 2026 by rpki-client