Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
File: lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json)
Hash identifier: Q4pfRJGvyiQEWLJcLE0PaPSn3pPHQrSQIYraHa9dM1s=
Subject key identifier: 5E:19:0E:C5:4B:D4:08:E0:FA:B3:C2:18:79:29:88:FD:95:C1:20:0F
Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Certificate serial: 019FA0A8643CCE0F5F2EBAB27E2EBC3BBD61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
Manifest number: 0CEE
Signing time: Sun 26 Jul 2026 23:00:17 +0000
Manifest this update: Sun 26 Jul 2026 23:00:17 +0000
Manifest next update: Mon 27 Jul 2026 23:00:17 +0000
Files and hashes: 1: Hw97gFeq9kX_yGiriy5YWSviL7I.roa (hash: geBLQXUNVCDp1lRH1gHpPHwudjQBTslh6GIdsZoKBSA=)
2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: pKyZ1jwyjR7ynWNmgBxYIR3zvmGNGsGnu3XR6IAUoIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:64:3c:ce:0f:5f:2e:ba:b2:7e:2e:bc:3b:bd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Validity
Not Before: Jul 26 23:00:17 2026 GMT
Not After : Jul 27 23:00:17 2026 GMT
Subject: CN=5e190ec54bd408e0fab3c218792988fd95c1200f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:48:dc:e1:05:16:be:35:55:27:aa:98:d5:a1:
a0:ca:a0:69:e6:db:c5:04:14:ac:e2:61:0d:87:ab:
50:6a:8d:70:f1:00:1e:19:90:b5:ce:db:a0:86:ba:
05:6c:94:60:d0:af:2d:bc:08:25:6f:cb:6d:1a:16:
d3:90:7f:31:5f:e2:9c:3e:b3:3f:39:17:1e:c0:b8:
8c:6f:0c:30:42:ba:db:69:3e:73:48:8d:b5:7f:7f:
aa:c4:fd:7a:04:c5:21:bf:0d:ff:e0:7e:91:c9:bd:
3d:47:56:56:ea:d3:d3:06:83:ea:1f:bb:ab:8a:b2:
2e:2c:bc:b8:c4:90:c4:20:9d:15:40:02:46:55:fb:
d8:a7:d5:b4:15:1e:35:ac:5b:60:9b:cb:b4:17:2b:
ec:e6:66:9a:ec:27:ce:37:08:63:50:10:9f:10:ce:
bb:0e:72:4f:a9:6d:e1:a0:3d:09:35:5a:3f:2c:4d:
8c:c3:ae:a1:2f:6c:01:f4:95:f8:c1:8a:8d:b0:c7:
0f:ef:5e:06:4f:e4:ec:b3:d7:95:87:51:bb:6d:59:
99:bf:5f:56:87:0d:f0:a0:80:0d:cd:70:93:23:fa:
92:19:a0:7a:40:f1:dd:94:f9:81:2d:cb:80:d0:38:
87:52:60:3b:52:28:26:22:fe:a6:54:43:d5:d2:f5:
02:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:19:0E:C5:4B:D4:08:E0:FA:B3:C2:18:79:29:88:FD:95:C1:20:0F
X509v3 Authority Key Identifier:
keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:94:82:96:3c:e8:1f:0e:8d:0f:1c:24:b4:f7:30:8f:9c:84:
51:42:bc:b6:00:59:c5:7a:83:d5:13:38:85:f0:bf:f5:1d:9a:
9b:be:73:97:d4:78:fe:fb:7d:e5:f2:b1:81:dd:84:b1:ae:5c:
bb:6f:ee:7f:02:f3:d8:15:f8:52:e3:a6:d5:18:1f:9f:66:d3:
98:83:9e:59:87:9c:6d:d5:ed:0e:c6:92:aa:52:3d:3a:43:a3:
a9:35:76:e6:13:eb:f1:ac:f8:47:70:bc:b5:cf:db:b2:38:f8:
0b:de:db:de:14:74:ee:37:40:1e:4a:61:e1:45:2f:49:1a:f5:
65:3a:4b:65:fc:6f:d6:33:cd:aa:0d:fe:f8:9f:7f:77:54:f2:
bd:52:2b:56:2c:c2:84:c5:d8:7e:56:a5:ee:e5:2e:cf:9e:51:
1e:dc:88:73:48:27:7a:c4:3f:17:24:5e:b3:40:b6:64:df:38:
b5:f7:b8:86:cc:9b:12:76:1b:10:31:7e:48:2d:b2:88:83:18:
c2:f6:9a:88:9f:8d:d0:83:b3:4f:9f:6a:bf:c6:fe:fa:47:40:
69:6f:14:49:40:fb:1d:77:65:2e:3b:04:53:ee:80:3e:fe:f0:
ee:5e:f0:1f:c5:bb:a8:3f:8c:c3:8e:5a:90:5a:13:ae:06:ba:
14:0e:0e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:54:02 2026 by rpki-client