Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
File: lEethLhLrsR9ViHi91Yj8-rxOWA.mft (raw, json)
Hash identifier: CVVUCtCNxWdXDPkkvfytfude4T899XuLlWCiD9yCk2Y=
Subject key identifier: F3:27:37:6F:87:45:1D:20:B1:8D:15:46:AF:1E:EE:BA:97:B2:34:4D
Authority key identifier: 94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
Certificate issuer: /CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Certificate serial: 019E8CED6798496536FE001C3401536EFBEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
Manifest number: 0519
Signing time: Wed 03 Jun 2026 10:00:29 +0000
Manifest this update: Wed 03 Jun 2026 10:00:29 +0000
Manifest next update: Thu 04 Jun 2026 10:00:29 +0000
Files and hashes: 1: 9-6uMx_1cLtSZmzwRHltNOvbN1Q.roa (hash: qkVhO869SS+g0a8EpShWW+uFhy2C8iltX3D6CRSmnec=)
2: lEethLhLrsR9ViHi91Yj8-rxOWA.crl (hash: eL8/6ElgKxxElxLOIGbCTFhDXa5zaVY/9fsxu+RpEHo=)
3: uFxrwUPGahsgU0NhkE7IqtKwEU4.roa (hash: ARBCNl7Ei4KTeE+J4rvd49qxKn5dAvgnf3fgdzfEo9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:ed:67:98:49:65:36:fe:00:1c:34:01:53:6e:fb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Validity
Not Before: Jun 3 10:00:29 2026 GMT
Not After : Jun 4 10:00:29 2026 GMT
Subject: CN=f327376f87451d20b18d1546af1eeeba97b2344d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:57:bc:48:5a:ab:5a:32:cc:49:df:18:78:2d:
d2:10:4d:03:ee:87:a1:0e:0b:fe:11:37:ab:8e:98:
74:ed:0b:01:cb:d4:38:0c:6f:cd:9d:5f:6f:82:1d:
62:a8:e6:53:d9:cb:3a:6c:47:48:8b:87:b4:8b:4a:
42:9c:b9:65:c6:6c:2d:ed:f4:02:af:3a:e0:ce:48:
57:05:d1:7f:9e:e9:0d:ce:da:0e:9f:a0:1d:c3:10:
ba:95:f2:c6:a8:14:4e:92:29:79:27:23:28:54:e8:
36:e0:01:bf:9f:67:8e:41:e2:dd:3f:90:d4:8b:9b:
78:19:d1:52:f9:9f:87:b8:41:1e:f0:99:24:24:e4:
ac:b2:bc:36:ef:1d:a8:87:61:b7:fe:e2:cf:fb:51:
8a:83:2d:82:24:2e:06:82:62:79:55:cd:e2:a6:8f:
a4:20:37:8c:e3:4f:91:65:a5:d3:73:5f:f6:0f:a8:
96:77:62:d7:ce:56:50:bf:a8:be:3e:37:6b:84:fb:
3d:f8:18:94:44:3c:56:66:93:d9:77:4a:13:12:2c:
ef:1a:e4:cd:c1:47:f8:4b:b0:cc:80:d3:6d:cc:77:
72:eb:47:03:9c:80:28:dd:eb:1f:fe:e2:a9:e8:61:
7e:16:44:51:1e:65:1e:19:ce:c5:40:20:1d:bc:90:
b0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:27:37:6F:87:45:1D:20:B1:8D:15:46:AF:1E:EE:BA:97:B2:34:4D
X509v3 Authority Key Identifier:
keyid:94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d2:77:01:50:62:dc:f3:bd:82:30:71:8a:77:36:36:16:94:
a6:29:f6:7a:14:e9:b8:ce:eb:c4:fc:f0:2f:ae:38:2e:c3:a2:
89:b6:27:a1:2f:5e:92:a1:a4:0c:96:67:1d:33:0f:a4:6a:84:
e0:3d:fe:b4:e0:3f:86:c8:74:17:10:d4:c1:81:2c:87:26:b1:
67:6e:84:ad:23:14:42:20:c6:18:88:ff:c5:a5:61:61:68:5c:
b9:f4:3f:a7:ac:2a:e5:52:09:a8:9b:2f:dd:4a:79:b0:c0:87:
27:e6:01:1f:c9:ea:77:d0:ea:61:27:3a:16:c6:7a:0c:f2:1c:
96:c5:12:f0:7e:58:e9:4c:0a:b0:73:0a:4f:4b:31:6f:12:d9:
b8:a3:12:a5:42:c8:37:e3:33:dd:ff:15:59:69:51:01:cd:2b:
91:2f:0a:22:53:43:dc:61:ba:46:2c:90:19:36:42:36:be:4c:
59:2d:02:a2:2f:ef:9a:20:f7:2c:b3:bb:ed:81:46:7e:f7:a8:
45:7d:e8:99:2f:4a:4f:61:41:5b:16:c8:4b:d2:df:30:81:14:
9d:76:0b:95:b1:cb:5b:50:6a:a9:f4:c1:ac:5d:38:eb:4b:eb:
b2:fc:20:31:57:84:eb:9c:22:33:81:51:59:91:7c:58:ab:45:
9c:36:de:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:00:27 2026 by rpki-client