Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
File: lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json)
Hash identifier: FGtscyqNsYxe15bH18idKI5RZF9l56zBGbZ+hW2cemU=
Subject key identifier: 6C:86:04:3B:FF:D2:67:5F:5F:59:31:A4:27:4F:7C:15:D6:6D:DB:B3
Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Certificate serial: 01A088670DBCD350B28260619A1ABE241F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
Manifest number: 0D66
Signing time: Wed 09 Sep 2026 23:00:49 +0000
Manifest this update: Wed 09 Sep 2026 23:00:49 +0000
Manifest next update: Thu 10 Sep 2026 23:00:49 +0000
Files and hashes: 1: Hw97gFeq9kX_yGiriy5YWSviL7I.roa (hash: geBLQXUNVCDp1lRH1gHpPHwudjQBTslh6GIdsZoKBSA=)
2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: 6yLeTGJ1vNx6ZcpLuCUi4CNkd74pb+Y9w5BRu2dXuRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:67:0d:bc:d3:50:b2:82:60:61:9a:1a:be:24:1f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Validity
Not Before: Sep 9 23:00:49 2026 GMT
Not After : Sep 10 23:00:49 2026 GMT
Subject: CN=6c86043bffd2675f5f5931a4274f7c15d66ddbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0f:9b:a6:00:74:00:a1:38:22:dc:44:0e:06:
3b:75:10:e4:38:cf:6a:04:d9:4b:d1:d5:12:fb:e0:
98:10:a2:fd:34:f0:2e:03:bf:7e:63:1a:05:d5:0e:
30:98:6a:0f:b8:db:c7:5a:ff:a6:89:f8:33:c1:67:
34:e7:76:1e:c1:13:a2:0c:cd:90:3e:45:1c:98:c3:
90:e3:dd:f3:e5:5e:da:34:05:a6:c7:ce:00:69:37:
3f:4e:57:b1:05:92:bb:25:48:09:1e:b8:2d:14:ba:
71:a8:63:6f:e6:bf:4a:1a:86:e6:88:13:dc:f7:2c:
33:83:61:02:67:00:04:d6:28:b3:66:3b:11:e0:d6:
bd:68:3c:df:41:02:62:bc:af:96:71:15:3c:ca:30:
1f:9d:8d:00:2c:c4:68:bc:4c:70:bb:60:ea:cd:ad:
7b:d3:2e:ac:41:93:7e:a7:0f:f7:10:34:08:b1:d5:
ad:85:13:27:9b:f9:55:bc:85:9d:8a:fa:39:a0:22:
3e:5d:6c:18:d7:3c:29:92:9a:d4:5c:f9:b9:4f:cc:
14:eb:9a:f6:a3:48:31:ee:80:11:1e:6d:c1:b4:37:
51:ab:6a:d0:08:e5:65:18:1f:d5:b8:4e:c1:91:1e:
4d:8f:1c:33:db:b4:19:01:70:ed:61:f0:2a:c1:13:
76:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:86:04:3B:FF:D2:67:5F:5F:59:31:A4:27:4F:7C:15:D6:6D:DB:B3
X509v3 Authority Key Identifier:
keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5d:6f:e0:62:7f:26:e5:72:d7:87:80:e9:82:a5:5e:13:53:
26:14:12:ae:97:b7:6f:9a:16:8f:76:12:d9:d2:1f:42:08:b5:
6b:4f:92:e2:1f:08:c7:54:78:73:b6:41:58:fa:c9:df:61:c1:
66:d0:2e:9d:52:dd:fa:d2:9a:5a:2c:da:b5:34:52:e6:0c:ed:
c5:20:9b:c7:92:cd:52:67:1a:e9:b8:b8:17:1e:83:5f:c8:81:
4a:43:fd:91:48:8b:18:e3:72:69:a7:2d:09:c1:1c:69:04:25:
ae:f1:5a:79:f0:05:25:3b:9d:38:e6:0c:a4:f4:cb:a5:4d:0d:
a1:29:c5:3d:a3:6a:7b:68:da:df:b9:cf:34:3f:67:7c:3e:db:
ef:c6:b9:3f:bc:83:64:23:fb:ea:03:78:b8:c9:82:a6:6c:2f:
9e:be:e8:b2:fe:5a:0a:f9:a7:65:0b:ee:4f:07:92:2a:0f:0c:
ff:1f:90:f4:e8:24:53:fd:01:19:b8:68:00:1c:51:ea:89:07:
34:f7:be:8f:09:d2:25:47:9a:06:b6:63:13:ca:c5:93:d3:c6:
83:27:32:81:a3:a2:83:e7:a4:9e:e7:28:42:77:80:e7:b7:1e:
d3:16:fa:76:6b:f2:17:5c:7a:16:dd:89:5d:4b:e9:d7:cd:6f:
79:a8:97:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCIZw2801CygmBhmhq+JB95MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MTI0ZjI1MjQ2YTU0MDlmYmVlMTFiNTM3MmRkOGJlMjRj
NmU5ZWIwHhcNMjYwOTA5MjMwMDQ5WhcNMjYwOTEwMjMwMDQ5WjAzMTEwLwYDVQQD
Eyg2Yzg2MDQzYmZmZDI2NzVmNWY1OTMxYTQyNzRmN2MxNWQ2NmRkYmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig+bpgB0AKE4ItxEDgY7dRDkOM9q
BNlL0dUS++CYEKL9NPAuA79+YxoF1Q4wmGoPuNvHWv+mifgzwWc053YewROiDM2Q
PkUcmMOQ493z5V7aNAWmx84AaTc/TlexBZK7JUgJHrgtFLpxqGNv5r9KGobmiBPc
9ywzg2ECZwAE1iizZjsR4Na9aDzfQQJivK+WcRU8yjAfnY0ALMRovExwu2Dqza17
0y6sQZN+pw/3EDQIsdWthRMnm/lVvIWdivo5oCI+XWwY1zwpkprUXPm5T8wU65r2
o0gx7oARHm3BtDdRq2rQCOVlGB/VuE7BkR5Njxwz27QZAXDtYfAqwRN2cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGyGBDv/0mdfX1kxpCdPfBXWbduzMB8GA1UdIwQY
MBaAFJYSTyUkalQJ++4RtTct2L4kxunrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8xNGI1OGQtYTFhMy00NmMxLWFjNjIt
OGVlZmI5NTJkOGMxLzEvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8xNGI1OGQtYTFhMy00NmMxLWFjNjItOGVlZmI5NTJkOGMx
LzEvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgF1v4GJ/
JuVy14eA6YKlXhNTJhQSrpe3b5oWj3YS2dIfQgi1a0+S4h8Ix1R4c7ZBWPrJ32HB
ZtAunVLd+tKaWizatTRS5gztxSCbx5LNUmca6bi4Fx6DX8iBSkP9kUiLGONyaact
CcEcaQQlrvFaefAFJTudOOYMpPTLpU0NoSnFPaNqe2ja37nPND9nfD7b78a5P7yD
ZCP76gN4uMmCpmwvnr7osv5aCvmnZQvuTweSKg8M/x+Q9OgkU/0BGbhoABxR6okH
NPe+jwnSJUeaBrZjE8rFk9PGgycygaOig+eknucoQneA57ce0xb6dmvyF1x6Ft2J
XUvp181veaiXpg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 09:37:31 2026 by rpki-client