Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
File: lNmOj-xoB3WhVyZuDGt4sUGjT14.mft (raw, json)
Hash identifier: 3pYwoJs8ro43cxsP+HsNgUlS0exieqkSRCpv/u3FYvw=
Subject key identifier: E4:6B:C0:45:BD:75:32:3A:50:A7:69:83:A4:55:E8:26:30:9D:48:8C
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial: 019DCC749CE22C7E0AC03942F4F7F749B2FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
Manifest number: 11C9
Signing time: Mon 27 Apr 2026 01:01:27 +0000
Manifest this update: Mon 27 Apr 2026 01:01:27 +0000
Manifest next update: Tue 28 Apr 2026 01:01:27 +0000
Files and hashes: 1: 1ZFzpY9gqaxllEXCBRcpbFZtvSI.roa (hash: 5BFrURuD3slP3IWW2XdDULNhAMP/7M8VYqXagPl/wDQ=)
2: 1ndrPzlCHUTjohyoAIv4ceVY91M.roa (hash: kwxcPnS+EwyAtP4vNomZBVZf4879KfPvcyviC74DpPs=)
3: 1uykX7XuB8BdjpT1ugfsAuVxO_o.roa (hash: +nVFIj8xJeJ89FbQF7uxdxGPy/z6Fq4PX9E3VSgew2Y=)
4: EtJ-6tnlV-8Aq-PH552cwzFu99I.roa (hash: SBFjWOaED819zRLjY2dQChZmsO5IFbHiGrw9/77Wj6s=)
5: LgBkQm7x65odd5JUqQrzXZBbc7k.roa (hash: A2GqKDmQkAQi37nNTs39AiKN/Rkw4jxRNbekXfrJVdI=)
6: LjDOVZrqVTaBdMy7LiiRAm06F6U.roa (hash: lfo+HanxOREHeonoDkwf+MHoVMUC8NNDEATyitbN46w=)
7: lNmOj-xoB3WhVyZuDGt4sUGjT14.crl (hash: DMqilmBSvr776vuigva6VfhjDu7WSlVXIyHoIe1S3Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 01:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:74:9c:e2:2c:7e:0a:c0:39:42:f4:f7:f7:49:b2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Validity
Not Before: Apr 27 01:01:27 2026 GMT
Not After : Apr 28 01:01:27 2026 GMT
Subject: CN=e46bc045bd75323a50a76983a455e826309d488c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b8:61:26:9b:66:78:1b:6b:bf:3c:1f:e0:74:
61:c4:29:26:6c:fb:e8:26:b6:d4:99:8f:7b:8d:be:
b9:93:61:94:6b:ec:a6:d6:38:a3:9c:28:53:f0:31:
0a:34:94:67:56:53:b4:08:94:c5:44:66:83:aa:ae:
7a:a2:a2:6e:c9:82:e2:d5:35:dc:0b:58:8f:58:69:
75:a6:7c:fb:6a:24:d9:f4:18:fe:a3:d4:83:11:33:
d5:af:9a:fc:58:ab:dd:c0:5a:23:71:d9:01:c6:fc:
37:5b:59:ac:c7:f5:85:ef:5d:7e:43:57:3d:09:c1:
f0:0b:d3:6c:de:d5:47:69:c8:9a:c4:f4:be:fe:2b:
c7:16:c7:dc:53:9a:33:08:34:6c:33:8e:4c:24:8e:
93:99:33:df:41:bf:51:cc:02:74:12:b2:9a:03:8f:
5d:ea:2a:0e:2c:15:74:0d:cd:a7:fe:35:c1:7d:bf:
a2:e0:a4:6f:f0:06:0b:15:22:9b:9c:f8:13:99:ad:
d1:27:c8:68:aa:cd:e2:d8:ad:0f:6c:20:2c:af:f0:
43:7d:f5:6a:bc:e6:fb:92:eb:03:e2:50:3a:86:8e:
4f:03:c0:e2:fc:de:3f:8c:e9:32:32:68:61:4d:bc:
62:e6:d6:53:20:85:7d:e7:56:4b:90:1c:04:05:6b:
03:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6B:C0:45:BD:75:32:3A:50:A7:69:83:A4:55:E8:26:30:9D:48:8C
X509v3 Authority Key Identifier:
keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:2b:47:58:d7:43:a8:01:58:e2:90:94:1a:6c:59:a6:59:b9:
d6:1b:d3:ff:fa:4e:63:fb:f1:e2:e0:ad:25:86:4e:57:7d:cc:
1c:2e:64:59:00:14:ba:19:e6:f0:c2:d9:5a:33:48:84:3e:8d:
1f:84:cc:f9:73:ca:3a:33:2d:77:51:10:eb:77:58:27:e8:59:
84:1b:ff:9b:86:40:68:3d:b7:d2:c4:c4:ba:87:71:ae:64:cc:
b4:90:9e:db:2d:2a:ba:89:5d:fc:29:32:8e:fe:34:7e:cc:af:
7c:25:28:6e:63:21:03:77:73:e2:9f:08:ec:fd:23:71:5c:e2:
43:b9:f1:64:4f:c3:02:80:b0:c9:da:b3:20:6a:a0:63:bd:ed:
1e:08:67:1a:fd:b8:f3:31:19:91:fc:cf:1c:b3:e0:0f:56:e1:
64:5c:03:20:35:02:b3:6c:5e:7d:17:e3:8d:7f:97:62:87:4a:
6e:92:13:a2:e8:73:34:8f:2b:db:4e:40:49:0c:15:6d:49:8c:
18:02:9f:f2:d2:0c:ef:6f:ef:0f:59:99:f9:ad:e0:7d:39:85:
d7:2b:ad:11:52:20:95:70:aa:85:68:d3:7f:7e:f4:d5:e5:01:
76:2f:7e:ee:ab:b2:43:cc:68:41:f5:c9:a6:b3:e6:69:47:76:
19:47:db:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:46:15 2026 by rpki-client