Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
File: LhmWbA6l3zqYf4NlUktRKMun_JA.mft (raw, json)
Hash identifier: /Cb0RwRDiW9jufBtBAbEr5rwZML2OiFKF64Ra8g2wcc=
Subject key identifier: FD:E3:27:0A:8A:98:9A:81:CF:BE:3D:E1:9B:46:DF:42:92:0E:7F:48
Authority key identifier: 2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
Certificate issuer: /CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Certificate serial: 019F9EF227B0F20D70845FD8560C993A471C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
Manifest number: 19CE
Signing time: Sun 26 Jul 2026 15:01:37 +0000
Manifest this update: Sun 26 Jul 2026 15:01:37 +0000
Manifest next update: Mon 27 Jul 2026 15:01:37 +0000
Files and hashes: 1: LhmWbA6l3zqYf4NlUktRKMun_JA.crl (hash: mJY0scEVs6nW4kjIcNuiuCSUxxTPeUCzf+YuWDFy4WY=)
2: S22IS1ytfAHZisgvUmyvGk-8FNg.roa (hash: gXnDrgQVCJ9KXbT9Gx6Ic3/hpo6fdcPJXpi41swj64s=)
3: xFsHUXQAhTrcAhcEagihKj_bLB0.roa (hash: fUcuoh5nCrUpLQdbdf9ANcbMiNKkrpJCJisA83ImkP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f2:27:b0:f2:0d:70:84:5f:d8:56:0c:99:3a:47:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Validity
Not Before: Jul 26 15:01:37 2026 GMT
Not After : Jul 27 15:01:37 2026 GMT
Subject: CN=fde3270a8a989a81cfbe3de19b46df42920e7f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e9:13:c8:f1:10:1a:4f:25:f9:e0:d9:a9:8f:
94:0b:8f:7a:26:43:dd:97:fa:d9:bc:22:1c:cb:7a:
4f:5e:b7:2c:86:1e:67:db:47:e9:51:23:8b:12:12:
26:ff:ba:59:9d:dd:38:42:ac:24:b6:24:57:91:cf:
0f:ef:6d:7d:f4:56:04:d2:d1:31:97:3a:f8:4b:4b:
f5:66:6d:0f:8c:5c:11:be:97:51:dc:0e:85:5e:99:
10:a9:46:6f:d8:38:88:1a:a2:1a:69:f1:ef:69:b7:
2e:0f:9b:9f:be:07:81:e4:ad:da:6f:02:2b:74:8c:
82:16:f0:a2:a1:e2:e6:71:68:c0:e8:b5:d6:28:f4:
7a:b7:16:cb:20:d3:6a:53:7f:57:c0:35:5a:4e:19:
e1:4f:70:ea:01:fd:6e:5d:b1:80:72:0a:eb:a3:54:
ae:c1:ea:4a:cd:e3:24:bf:6a:7f:1e:a1:bf:ee:27:
bc:7c:ac:61:a5:f3:7c:f7:5e:7b:19:98:8a:6c:62:
52:03:e6:c7:01:5c:b8:d0:77:df:f1:fe:88:50:bc:
60:f3:7a:bc:e7:b7:04:9f:03:a1:8c:cf:33:d8:fc:
60:1f:0f:70:42:e6:4c:ee:87:b8:c2:9f:44:6d:f8:
bc:be:7b:3c:03:89:e1:79:6e:a4:97:be:80:10:37:
ef:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E3:27:0A:8A:98:9A:81:CF:BE:3D:E1:9B:46:DF:42:92:0E:7F:48
X509v3 Authority Key Identifier:
keyid:2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f4:1f:84:14:78:92:00:ae:a5:17:76:26:63:cf:22:87:64:
f5:7d:4c:b4:b2:77:04:46:66:fb:ff:22:d7:bf:20:7b:f7:ee:
e5:c3:cc:1a:9d:73:b7:89:50:f6:f9:05:8c:bf:fc:80:4b:98:
83:cd:36:c4:af:28:a4:4a:f2:d2:5f:11:38:82:b7:3d:94:d6:
00:3d:8e:65:24:62:85:85:36:2d:f9:4f:ee:ff:1d:27:fc:f8:
bb:7c:59:3b:ec:7f:c3:f7:15:4c:66:69:84:78:3b:39:49:ac:
97:95:69:5e:f0:7a:73:3a:95:f4:5b:0f:69:35:ca:0c:ca:fc:
07:5d:23:ed:ca:e3:a2:9c:a7:cf:24:d7:62:d3:15:ad:fa:3e:
7b:f1:8a:96:58:3f:a4:04:00:36:e8:4d:15:38:39:58:7b:eb:
cb:64:1d:38:11:3d:5a:c9:2f:2c:2a:aa:76:4f:5b:4e:cf:dd:
bf:30:d6:95:f9:42:4e:35:b8:2b:e4:c3:c8:9f:5f:22:41:bc:
62:79:a5:db:ec:8e:45:dc:0e:f4:e1:bf:0b:0f:48:33:37:e5:
a6:cd:9b:56:55:d9:3a:b0:aa:f6:86:d1:2e:e7:f5:7a:04:c3:
d2:ae:b2:33:a6:56:fd:0f:c9:7c:79:9a:50:d5:5a:a9:a6:39:
68:39:20:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:17:31 2026 by rpki-client