Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
File: Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft (raw, json)
Hash identifier: TJlDJz5I/KApuAwnnCTdKxNjs4GQ08YFOqNQxMYusDY=
Subject key identifier: EC:93:A5:FE:F6:9F:E9:25:24:03:F3:C4:AD:11:58:73:7A:4B:D8:85
Authority key identifier: 2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
Certificate issuer: /CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Certificate serial: 019E5FA79100C66B0EA5FF9839D61793C7AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
Manifest number: 1334
Signing time: Mon 25 May 2026 15:01:17 +0000
Manifest this update: Mon 25 May 2026 15:01:17 +0000
Manifest next update: Tue 26 May 2026 15:01:17 +0000
Files and hashes: 1: Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl (hash: H30QRsXsQlwQFNjkltxbFcyxaBTcYZan2SfcbASnF58=)
2: cxkSmIpEvqEgX4ngmD4597AK9SA.roa (hash: DfRU/sR9mUrJtx0wMuwQ4hVIgyHyvsCZqXVQHIZbmPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5f:a7:91:00:c6:6b:0e:a5:ff:98:39:d6:17:93:c7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Validity
Not Before: May 25 15:01:17 2026 GMT
Not After : May 26 15:01:17 2026 GMT
Subject: CN=ec93a5fef69fe9252403f3c4ad1158737a4bd885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:8c:6e:70:74:c4:e1:78:d2:89:a7:37:2f:
35:0b:f4:e4:55:81:e1:fd:60:35:b3:7b:c5:b0:8e:
34:f4:77:71:8a:a2:40:59:d5:8d:f0:37:f9:7b:63:
91:1f:0b:0a:ad:c7:52:c4:13:c1:d3:59:8e:dd:29:
7e:f8:19:f1:44:45:e6:a4:0a:76:63:26:7f:51:3b:
9e:48:20:07:5f:2b:50:c3:8f:d5:7e:5a:9f:b7:d5:
6e:4a:5f:f1:f6:cf:71:41:5f:28:4f:c8:2d:97:6e:
63:8a:dd:5d:a9:62:cf:06:f2:73:c7:4d:84:a4:2c:
ba:43:cd:48:07:73:66:ea:7c:c7:20:87:99:cb:27:
9f:24:90:8f:c4:05:d2:b5:17:a0:ca:ed:f0:12:ad:
58:8d:21:15:89:7f:5c:1f:0f:63:d0:2b:03:ef:5b:
36:b1:52:3d:e5:3e:29:ef:c9:e9:42:cd:83:2c:4f:
1a:f8:61:a3:4a:16:83:50:73:bd:41:6f:22:04:ee:
76:bd:3f:f0:47:e6:5a:a5:1b:92:f7:3a:b8:40:66:
82:f8:e8:74:67:1f:77:c4:58:75:eb:57:2e:f3:6f:
3a:ac:8b:62:80:90:40:ad:cc:67:b2:61:ad:56:69:
cf:46:ae:fd:57:05:2d:45:cd:20:be:02:f4:1c:cf:
45:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:93:A5:FE:F6:9F:E9:25:24:03:F3:C4:AD:11:58:73:7A:4B:D8:85
X509v3 Authority Key Identifier:
keyid:2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:15:4d:1a:74:be:a5:dc:a7:16:ac:45:a2:b7:0f:d9:96:6a:
ab:6c:72:be:52:cc:58:b0:13:14:08:9d:ef:8c:cf:4c:63:67:
8d:ca:25:35:a5:52:6c:b5:ef:48:48:c9:2c:a3:f4:7d:3a:2d:
30:d7:dc:4a:5a:58:d0:30:db:81:4c:7c:bb:15:d0:2d:ee:db:
4c:e7:de:e3:cc:fa:cc:01:bd:d1:91:3d:d6:ec:f3:96:7a:f7:
c4:72:d8:bc:27:79:f0:49:3a:ca:e7:7e:27:2c:e6:57:22:52:
55:78:e5:78:e3:14:1f:c9:5e:6c:1a:3b:90:bf:bd:a3:4f:a2:
03:a8:4d:a6:d1:1c:d4:17:ec:13:ff:c1:92:85:80:b7:95:c0:
4f:f2:67:f5:ae:9d:0b:1d:2d:60:ba:a8:a8:5e:26:20:e9:17:
ba:a8:9f:92:5b:dd:a5:56:19:e5:01:ba:d6:05:0a:3d:a6:44:
df:56:81:c5:5a:b5:7b:0b:27:40:63:ee:7e:5f:52:d6:8e:76:
d5:b8:e4:1f:3d:e5:9f:83:d8:a3:34:53:bb:0e:dc:2d:35:7f:
3a:a0:a6:66:56:05:8c:fc:db:ce:94:41:94:ea:26:e1:c3:e9:
9d:c7:10:e0:81:a5:9f:6a:7e:48:8f:5c:ad:8a:a4:fb:b8:35:
81:b4:06:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 17:39:15 2026 by rpki-client