Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
File: lEethLhLrsR9ViHi91Yj8-rxOWA.mft (raw, json)
Hash identifier: 3d59T+mtBx8fw80YLakHtmrL1c3FZMqhL1fXbNy/TUc=
Subject key identifier: 59:CC:53:25:A4:D6:3C:F8:72:4D:2C:B5:10:A6:24:CD:44:84:45:B1
Authority key identifier: 94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
Certificate issuer: /CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Certificate serial: 019D3909FAB9A9201DC0BD9B08AEB8804B4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
Manifest number: 0468
Signing time: Sun 29 Mar 2026 10:00:48 +0000
Manifest this update: Sun 29 Mar 2026 10:00:48 +0000
Manifest next update: Mon 30 Mar 2026 10:00:48 +0000
Files and hashes: 1: 9-6uMx_1cLtSZmzwRHltNOvbN1Q.roa (hash: qkVhO869SS+g0a8EpShWW+uFhy2C8iltX3D6CRSmnec=)
2: bHmwkKHYcuuFCn6rBcwSS1SIkOI.roa (hash: JuddnmoR945Cb2W113D4wQWWPxgzuL0VIbc2wYWg78I=)
3: lEethLhLrsR9ViHi91Yj8-rxOWA.crl (hash: t+ceITI+HemKt/gW85rTjdTf3qNCIC6p0dBavCHNH1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:fa:b9:a9:20:1d:c0:bd:9b:08:ae:b8:80:4b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Validity
Not Before: Mar 29 10:00:48 2026 GMT
Not After : Mar 30 10:00:48 2026 GMT
Subject: CN=59cc5325a4d63cf8724d2cb510a624cd448445b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:52:26:20:72:63:15:c5:12:b1:17:3c:8f:
91:75:cf:eb:48:ef:20:b0:dd:f8:94:3c:16:ef:c0:
ff:93:f6:fd:9f:66:5e:62:1f:4c:c3:e6:95:74:85:
07:9e:83:72:0a:d8:61:d9:e8:05:f7:28:4c:f3:99:
9d:b6:35:22:76:f4:5e:12:e2:98:95:98:ec:8b:07:
c1:18:85:ca:ba:05:81:0f:71:f5:47:9f:d7:d3:5c:
a8:05:e6:0e:3b:96:2f:94:10:94:4b:89:f5:e1:2c:
13:3d:73:3a:4b:0c:c3:7d:42:7a:a8:bf:be:68:6a:
25:a6:c1:0a:2b:44:15:7c:28:a8:0c:6d:72:3c:b7:
ba:c3:71:b7:2b:ba:69:7c:52:16:50:0c:18:1e:3b:
c8:1e:bc:20:ce:63:4d:64:f1:2e:85:35:21:a2:01:
e8:66:50:82:5a:49:67:53:99:48:8a:3c:2a:0d:14:
4c:70:80:c2:0d:f1:52:3c:e1:39:06:63:49:3f:16:
7c:aa:f7:4a:bc:08:a7:18:d5:4d:95:a8:60:6e:68:
db:c0:4d:17:30:64:50:c4:3d:71:25:98:0c:36:d3:
a7:c9:a6:12:cd:ca:ab:a7:b4:4c:67:7c:3e:9b:35:
ea:5a:1f:d9:53:78:57:d1:83:c0:7e:f9:9e:a8:24:
eb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CC:53:25:A4:D6:3C:F8:72:4D:2C:B5:10:A6:24:CD:44:84:45:B1
X509v3 Authority Key Identifier:
keyid:94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4f:de:15:ee:32:67:08:73:ef:52:e6:b5:0f:9d:b2:51:13:
79:4f:8b:1d:11:9f:ac:e2:49:81:3e:8f:3d:50:b2:28:91:ef:
b1:4e:57:9f:cf:91:c7:9e:d1:15:e0:de:61:8b:15:14:92:cc:
49:fe:c8:75:6e:b5:87:4f:99:b9:4b:79:e7:a9:31:37:11:26:
43:ef:95:4d:c0:3f:64:48:8c:04:bd:6d:59:5f:4a:d2:f2:6e:
4a:69:11:4d:84:df:24:8d:5b:a7:49:96:1b:04:80:fe:02:f6:
a8:f0:ce:9c:e5:3c:83:d2:9b:bb:46:95:a0:15:ba:5a:36:25:
86:17:2b:f7:c6:71:00:d3:47:ba:d9:42:db:43:e4:4b:c7:ff:
5d:5d:16:3d:85:aa:ff:da:63:fb:fd:7d:f1:03:2f:3a:5a:ea:
06:79:92:97:59:cc:f1:10:62:2d:21:28:5b:e9:36:e6:aa:db:
20:65:d7:7f:10:5b:e1:c7:6d:3f:aa:27:ed:ae:bf:0e:25:0b:
61:b4:a9:6c:96:e8:86:cd:c4:af:cb:a8:5e:cf:c6:86:df:ff:
a0:8d:dc:7d:67:6a:e1:9a:c1:ed:97:7a:2d:66:21:73:d9:7b:
06:a5:47:ff:c0:e6:9d:32:dd:64:a4:41:9e:7b:ed:61:3b:bb:
0e:41:1d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:30 2026 by rpki-client