Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
File: lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json)
Hash identifier: m/8IPPa3ti6rhhZy8WISQmdapmgEGKujaONYSoJiOb4=
Subject key identifier: 7B:66:DE:32:09:A4:D9:8A:A4:FC:D6:F9:AB:BD:66:25:BB:72:7D:86
Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Certificate serial: 019EB6FBC6FE1CA6E02C09767F6BAF007670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
Manifest number: 0C75
Signing time: Thu 11 Jun 2026 14:00:14 +0000
Manifest this update: Thu 11 Jun 2026 14:00:14 +0000
Manifest next update: Fri 12 Jun 2026 14:00:14 +0000
Files and hashes: 1: Hw97gFeq9kX_yGiriy5YWSviL7I.roa (hash: geBLQXUNVCDp1lRH1gHpPHwudjQBTslh6GIdsZoKBSA=)
2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: +USeD1xWu5eZ5MNwopcvFzSFy6MO/iAzGQJ+f/2WpIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fb:c6:fe:1c:a6:e0:2c:09:76:7f:6b:af:00:76:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Validity
Not Before: Jun 11 14:00:14 2026 GMT
Not After : Jun 12 14:00:14 2026 GMT
Subject: CN=7b66de3209a4d98aa4fcd6f9abbd6625bb727d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:72:61:e4:e2:e4:84:5d:98:82:70:42:00:53:
e3:7d:48:cf:53:7b:cc:62:cc:de:84:42:90:c2:1b:
88:6f:68:18:5a:75:c2:f5:9f:a9:82:d7:02:46:bc:
b4:60:00:1c:d7:55:fe:71:56:34:a1:97:6c:1d:2d:
45:09:a1:aa:ac:3d:f7:cd:10:7c:da:66:35:5a:9b:
8c:52:8c:a2:6e:44:dd:d4:9e:3f:bc:c2:86:0e:db:
ea:fa:0d:b6:0e:26:54:c7:9a:b6:b6:9c:73:22:da:
f0:c6:15:52:1d:c5:eb:fa:0f:d2:80:1a:ad:a9:60:
24:3e:8d:6a:45:f8:8b:1c:da:52:35:2a:c5:09:8d:
90:d9:c4:f2:f8:e9:72:de:fa:05:33:24:0c:fe:59:
65:76:ea:08:fc:9a:b4:9f:f6:2f:01:a1:85:ad:bd:
42:80:37:5a:d0:9a:ce:b6:f3:93:d8:8d:46:c0:f0:
6f:52:1c:18:69:a8:a6:ef:d3:59:26:00:71:45:bc:
80:9c:22:63:d2:fe:63:d9:7b:42:55:71:14:fe:32:
4f:15:d4:28:1f:1a:a3:6c:8e:97:dc:d7:4a:cf:ca:
39:68:1a:20:ed:3d:0b:7d:92:47:b6:1a:a0:df:0a:
28:98:79:82:16:f8:bf:43:93:1b:69:c4:6c:14:46:
3d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:66:DE:32:09:A4:D9:8A:A4:FC:D6:F9:AB:BD:66:25:BB:72:7D:86
X509v3 Authority Key Identifier:
keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4f:54:30:ad:71:4b:bb:76:1e:f1:8e:54:63:bc:f0:91:e3:
aa:67:30:5b:b6:f4:90:e1:1d:72:96:ab:e2:73:d0:1a:e8:2e:
51:b8:da:c3:3e:b1:28:39:51:39:30:19:40:10:1f:51:33:94:
d6:96:35:95:e4:dd:ab:a5:3c:8b:62:5d:24:19:50:37:bb:bf:
c3:81:21:cb:4c:52:58:a7:7d:52:3d:23:5f:f0:f1:17:ff:cf:
b5:e3:73:a8:d6:2b:b1:45:14:f9:b4:73:b5:95:19:da:72:15:
70:25:aa:b7:16:0c:b2:9f:c2:f0:8b:6b:c2:1e:8c:f6:a6:7e:
16:c4:5a:c5:14:ce:58:47:70:17:be:52:09:44:21:34:c6:19:
fd:24:f0:1a:5c:6c:06:5f:83:ba:05:f3:c3:53:1f:d7:f7:9f:
15:22:f3:7c:e9:da:fd:52:e4:cd:f2:15:8c:dc:66:11:0c:99:
27:26:88:e1:be:ac:fd:a0:ea:f2:ad:24:cb:fb:fb:78:e6:b6:
22:63:13:6d:f7:e6:98:97:95:30:24:e0:2e:c8:cb:a7:ea:8d:
d9:f1:70:87:10:2b:d3:ac:5b:e7:2a:ed:dd:9d:e7:be:e0:7e:
61:a1:71:6e:93:80:4b:0f:0d:61:83:b4:4c:cd:77:ac:e2:e7:
e9:40:78:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62+8b+HKbgLAl2f2uvAHZwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MTI0ZjI1MjQ2YTU0MDlmYmVlMTFiNTM3MmRkOGJlMjRj
NmU5ZWIwHhcNMjYwNjExMTQwMDE0WhcNMjYwNjEyMTQwMDE0WjAzMTEwLwYDVQQD
Eyg3YjY2ZGUzMjA5YTRkOThhYTRmY2Q2ZjlhYmJkNjYyNWJiNzI3ZDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnJh5OLkhF2YgnBCAFPjfUjPU3vM
YszehEKQwhuIb2gYWnXC9Z+pgtcCRry0YAAc11X+cVY0oZdsHS1FCaGqrD33zRB8
2mY1WpuMUoyibkTd1J4/vMKGDtvq+g22DiZUx5q2tpxzItrwxhVSHcXr+g/SgBqt
qWAkPo1qRfiLHNpSNSrFCY2Q2cTy+Oly3voFMyQM/lllduoI/Jq0n/YvAaGFrb1C
gDda0JrOtvOT2I1GwPBvUhwYaaim79NZJgBxRbyAnCJj0v5j2XtCVXEU/jJPFdQo
HxqjbI6X3NdKz8o5aBog7T0LfZJHthqg3woomHmCFvi/Q5MbacRsFEY9uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtm3jIJpNmKpPzW+au9ZiW7cn2GMB8GA1UdIwQY
MBaAFJYSTyUkalQJ++4RtTct2L4kxunrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8xNGI1OGQtYTFhMy00NmMxLWFjNjIt
OGVlZmI5NTJkOGMxLzEvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8xNGI1OGQtYTFhMy00NmMxLWFjNjItOGVlZmI5NTJkOGMx
LzEvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFE9UMK1x
S7t2HvGOVGO88JHjqmcwW7b0kOEdcpar4nPQGuguUbjawz6xKDlROTAZQBAfUTOU
1pY1leTdq6U8i2JdJBlQN7u/w4Ehy0xSWKd9Uj0jX/DxF//PteNzqNYrsUUU+bRz
tZUZ2nIVcCWqtxYMsp/C8Itrwh6M9qZ+FsRaxRTOWEdwF75SCUQhNMYZ/STwGlxs
Bl+DugXzw1Mf1/efFSLzfOna/VLkzfIVjNxmEQyZJyaI4b6s/aDq8q0ky/v7eOa2
ImMTbffmmJeVMCTgLsjLp+qN2fFwhxAr06xb5yrt3Z3nvuB+YaFxbpOASw8NYYO0
TM13rOLn6UB44A==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:15:59 2026 by rpki-client