Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
File: LhmWbA6l3zqYf4NlUktRKMun_JA.mft (raw, json)
Hash identifier: pJu6/LwRuVv45CHBqzv8lXMS6nejvkD0CUWU70BuGv4=
Subject key identifier: 6E:1E:B4:00:3F:2F:CE:BB:9B:F5:12:8F:45:A1:FE:E0:F3:79:72:96
Authority key identifier: 2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
Certificate issuer: /CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Certificate serial: 019E69F3BE9D2C96D8D994C30A81452B8343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
Manifest number: 192E
Signing time: Wed 27 May 2026 15:00:42 +0000
Manifest this update: Wed 27 May 2026 15:00:42 +0000
Manifest next update: Thu 28 May 2026 15:00:42 +0000
Files and hashes: 1: LhmWbA6l3zqYf4NlUktRKMun_JA.crl (hash: FjyHb9peexpKkpX16CJJ86fwPsi7BApA4RY4ikvHH3w=)
2: S22IS1ytfAHZisgvUmyvGk-8FNg.roa (hash: gXnDrgQVCJ9KXbT9Gx6Ic3/hpo6fdcPJXpi41swj64s=)
3: xFsHUXQAhTrcAhcEagihKj_bLB0.roa (hash: fUcuoh5nCrUpLQdbdf9ANcbMiNKkrpJCJisA83ImkP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 14:25:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:69:f3:be:9d:2c:96:d8:d9:94:c3:0a:81:45:2b:83:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Validity
Not Before: May 27 15:00:42 2026 GMT
Not After : May 28 15:00:42 2026 GMT
Subject: CN=6e1eb4003f2fcebb9bf5128f45a1fee0f3797296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:1c:ae:aa:02:5e:f1:1c:6d:04:8b:04:18:
c4:71:2a:d5:7b:59:da:25:5d:d7:03:2f:32:3a:39:
41:b9:35:2c:fb:4d:19:8b:ca:f0:aa:b6:7b:0c:a5:
bf:fe:7b:8f:cc:de:1c:11:fb:da:bd:9f:d0:8a:88:
97:48:55:48:a4:aa:f6:cb:30:20:d2:6a:ab:01:4d:
fc:28:ec:26:b6:f4:ee:e8:5d:91:ed:ef:d9:66:b4:
7b:4d:0d:e4:75:17:73:5c:24:f5:3b:c5:af:2c:49:
82:77:17:a2:75:fe:ec:75:b7:93:3c:5e:0f:0c:14:
a4:66:ca:df:30:34:4c:eb:58:88:d5:cf:0c:a6:11:
75:82:44:f9:ec:8b:6f:56:f4:74:e9:21:ae:96:53:
5b:34:3e:61:2d:a9:61:25:05:ca:bd:e3:4e:d8:5c:
a1:a6:9e:12:c5:48:4b:0c:18:0e:83:c6:bb:04:5c:
30:29:69:fd:7f:8f:f0:ce:af:9e:f4:40:f5:9f:a2:
92:79:91:03:b8:da:70:34:65:08:91:f0:c7:66:8a:
e3:72:4a:63:be:7c:f1:93:ce:bd:e8:8c:cc:98:29:
70:9a:d7:6f:59:0b:15:fc:a6:fa:71:67:09:6d:34:
84:ce:03:b7:76:3d:e5:bf:18:0a:05:0b:64:9c:cf:
ad:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1E:B4:00:3F:2F:CE:BB:9B:F5:12:8F:45:A1:FE:E0:F3:79:72:96
X509v3 Authority Key Identifier:
keyid:2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0a:ba:0e:64:be:e0:76:43:35:9d:d7:c5:fd:ee:e6:a8:3f:
2e:13:3d:bb:c6:4e:ce:48:fe:a1:e7:36:12:be:e7:24:02:5e:
c8:38:8d:32:6e:c4:f1:a1:30:6c:0e:a4:c5:cd:2f:7f:0a:4f:
d1:9c:e6:01:85:bf:c2:4a:04:bd:c3:38:dc:eb:e6:d7:ed:ea:
20:60:5a:d2:b5:81:f0:bb:ca:d8:cb:fc:90:b6:0b:9e:77:99:
bf:e9:59:29:f0:10:a7:d6:7d:8b:df:93:29:26:43:32:82:70:
71:c8:79:e8:f9:f5:92:2f:e7:73:14:89:15:ee:6b:62:fb:4e:
ca:dd:d2:e6:50:58:bc:5f:40:65:60:05:24:95:d3:a1:fa:cd:
61:94:eb:19:d9:18:7a:8e:6d:99:53:5f:13:b4:95:e9:11:4e:
2a:a1:d6:4b:5b:9f:0d:c2:47:29:19:f1:26:28:8e:d0:30:6c:
26:5f:b9:05:65:12:4f:77:21:3c:e6:cc:4e:0c:6d:2c:6d:c5:
43:04:21:bb:31:f0:72:9c:9b:11:f3:ac:9b:44:e2:23:d8:ba:
5d:d2:6c:56:48:62:ee:bd:12:74:1a:2c:95:c3:04:6e:c3:93:
55:7b:f4:e8:82:08:e8:6c:cb:8b:4d:31:bc:10:a7:f5:fb:cd:
78:e1:d8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 18:42:48 2026 by rpki-client