Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
File: Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft (raw, json)
Hash identifier: cI4pZhaF1uj02uZCK9kv+qGXRMysD8yptA7va8W5x90=
Subject key identifier: 65:40:8F:0C:64:56:71:4A:45:FE:C5:EC:02:3A:FA:D0:18:70:25:75
Authority key identifier: 2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
Certificate issuer: /CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Certificate serial: 019F4B432402FA94A179A2A85DA99AF0C3BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
Manifest number: 13AE
Signing time: Fri 10 Jul 2026 09:01:58 +0000
Manifest this update: Fri 10 Jul 2026 09:01:58 +0000
Manifest next update: Sat 11 Jul 2026 09:01:58 +0000
Files and hashes: 1: Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl (hash: /HgHPfG8v84egnQkK+2AaX7G+jQdY9XFx368NKAAfn8=)
2: cxkSmIpEvqEgX4ngmD4597AK9SA.roa (hash: DfRU/sR9mUrJtx0wMuwQ4hVIgyHyvsCZqXVQHIZbmPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:43:24:02:fa:94:a1:79:a2:a8:5d:a9:9a:f0:c3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Validity
Not Before: Jul 10 09:01:58 2026 GMT
Not After : Jul 11 09:01:58 2026 GMT
Subject: CN=65408f0c6456714a45fec5ec023afad018702575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fa:f2:79:fc:c9:8a:df:b8:65:70:2e:70:f4:
69:6c:38:ac:fe:dc:5d:57:15:aa:2f:1b:14:00:cc:
a7:39:a9:7f:5b:ac:46:be:0a:2a:0b:ee:b4:f7:95:
55:00:85:57:7a:8d:1e:55:26:a8:51:93:dc:6d:42:
9e:56:8d:92:c1:da:37:b8:e6:50:63:43:ce:1a:0b:
6a:33:eb:db:b3:b7:2c:30:62:56:68:be:16:41:eb:
62:26:7c:00:15:df:63:82:56:4d:ba:40:a8:3e:ec:
85:69:c9:26:c3:72:bb:fc:4b:a8:6b:7d:03:c2:8c:
37:ef:05:fc:3d:28:57:4f:e4:a2:c8:46:06:8f:f6:
7d:0c:1d:3f:cd:4b:56:d6:df:7d:5a:e1:f5:b5:4d:
06:27:8d:de:e4:c2:8c:16:28:f5:73:8f:0f:49:e4:
32:95:e7:a7:be:4e:91:f1:f2:8e:1e:ca:c8:3a:fa:
07:d7:53:13:2d:61:30:00:35:ce:f8:08:93:71:37:
32:95:75:b3:e6:84:59:c9:8f:5e:e8:ff:44:78:cb:
be:59:50:fb:60:26:11:7e:f4:7b:73:21:76:44:c8:
89:14:d1:d4:ab:0e:16:68:fd:97:3d:b9:73:41:75:
aa:b4:8b:cb:d1:84:dc:59:af:58:9e:eb:51:e4:67:
e7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:40:8F:0C:64:56:71:4A:45:FE:C5:EC:02:3A:FA:D0:18:70:25:75
X509v3 Authority Key Identifier:
keyid:2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6d:ed:2e:e0:e9:2c:c2:ce:75:8d:db:27:19:47:40:2f:e9:
fd:b4:50:a5:8c:5a:85:62:1e:1e:4f:f7:43:5e:d7:da:6a:18:
48:18:6e:f2:c9:fd:b3:3a:6b:f6:5e:c1:3f:e1:84:33:88:c1:
68:3c:6d:a6:7c:fa:aa:79:57:6f:a8:51:2f:ca:97:9d:87:54:
7b:90:f9:ea:34:4e:58:56:2a:8d:6f:41:7c:bf:3d:9c:a9:1e:
4d:78:eb:19:8d:68:16:e5:14:fd:6e:5f:4e:be:b5:e1:9b:27:
b0:3d:c4:77:5a:52:2a:e8:99:d4:f0:c9:bf:a6:19:45:63:41:
e4:cc:6a:55:60:24:66:82:c3:cf:ec:c1:19:a3:13:50:aa:d9:
09:7a:34:94:08:c0:f0:2b:74:1e:4b:5b:40:7b:f6:03:04:b9:
fd:84:be:3b:a4:2c:de:57:1a:4d:96:76:9f:bb:a7:0f:86:8b:
5a:9e:77:29:c8:7c:b5:56:e6:80:b9:9f:14:72:1a:7e:75:99:
98:95:54:61:f9:e2:1b:26:39:f6:5b:aa:49:e9:fc:80:22:91:
ca:ef:1c:ca:26:a1:d3:dd:51:8e:22:9c:5f:0d:1b:54:cb:71:
eb:12:13:28:ab:50:a6:cf:ce:b3:fd:1e:05:db:f8:46:5b:57:
66:18:19:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 17:05:43 2026 by rpki-client