Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
File: LhmWbA6l3zqYf4NlUktRKMun_JA.mft (raw, json)
Hash identifier: 19KYR6IargYK9WgfMfhzrqGVZMXjYNwA+HM8b/MEC0k=
Subject key identifier: 01:15:C1:A5:E0:F4:0E:7F:25:97:68:04:68:AE:E7:76:7C:90:1C:37
Authority key identifier: 2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
Certificate issuer: /CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Certificate serial: 01A17A0431C0AB994F2B6A2C3385877A14D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
Manifest number: 1AC4
Signing time: Mon 26 Oct 2026 21:00:57 +0000
Manifest this update: Mon 26 Oct 2026 21:00:57 +0000
Manifest next update: Tue 27 Oct 2026 21:00:57 +0000
Files and hashes: 1: LhmWbA6l3zqYf4NlUktRKMun_JA.crl (hash: svJjzm1DASrRO24EveidBt+zKQmfL4VTlzyWk9zFsLQ=)
2: S22IS1ytfAHZisgvUmyvGk-8FNg.roa (hash: gXnDrgQVCJ9KXbT9Gx6Ic3/hpo6fdcPJXpi41swj64s=)
3: xFsHUXQAhTrcAhcEagihKj_bLB0.roa (hash: fUcuoh5nCrUpLQdbdf9ANcbMiNKkrpJCJisA83ImkP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:04:31:c0:ab:99:4f:2b:6a:2c:33:85:87:7a:14:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Validity
Not Before: Oct 26 21:00:57 2026 GMT
Not After : Oct 27 21:00:57 2026 GMT
Subject: CN=0115c1a5e0f40e7f2597680468aee7767c901c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:59:a2:3c:02:ea:e0:2d:c1:dc:ad:80:70:73:
59:f2:ea:50:a1:c9:b5:50:17:87:26:6a:0e:eb:e9:
c6:8e:0d:bc:32:ad:2f:6a:f7:82:bc:dc:ac:a3:89:
5b:4c:36:0c:69:e1:eb:8f:3e:4f:67:b5:71:de:43:
72:a6:17:d8:9f:3a:e4:77:3e:84:e6:15:5b:28:23:
85:32:0c:91:92:3b:ea:25:d4:7a:02:f4:eb:47:01:
c9:45:b1:57:6f:e3:e3:bf:76:c1:8c:3d:73:ec:e3:
e0:4a:ff:26:71:3b:d1:97:23:e1:69:d3:3d:d2:07:
10:19:35:33:c8:69:99:c4:e3:ba:14:1f:05:4f:ed:
2d:b5:b4:76:36:ba:68:ff:58:e5:93:2c:42:bd:9e:
4b:b2:d8:53:53:04:5c:cd:06:6b:c0:a3:ec:65:61:
a0:f2:42:b9:0c:f6:e9:b6:15:c9:f7:d0:cb:50:24:
37:aa:48:c7:ee:15:aa:b4:d8:37:62:cd:be:6b:68:
70:81:4f:54:fb:83:fa:e8:28:a0:2a:ec:0b:89:e7:
7d:ad:91:a2:65:bd:fd:f0:ac:9d:87:61:31:d3:ec:
2b:39:c9:96:ea:e8:c4:72:0f:ec:59:bd:4e:47:8a:
14:c1:13:87:ea:5a:85:8e:42:ff:a3:08:4f:28:2e:
3c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:15:C1:A5:E0:F4:0E:7F:25:97:68:04:68:AE:E7:76:7C:90:1C:37
X509v3 Authority Key Identifier:
keyid:2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:24:06:f6:93:f7:08:47:5f:4a:64:6d:fe:69:94:c8:8d:d2:
8f:c4:f7:8a:19:df:a1:66:fe:45:32:9f:97:82:0a:4f:cd:a2:
0e:1e:cf:ac:32:60:44:a9:be:20:96:d8:7f:4b:32:eb:30:7a:
09:74:3e:b6:ab:0b:af:e0:e9:24:32:8c:84:4e:54:1e:49:b9:
62:61:d6:14:78:69:e8:02:07:02:69:ac:3a:63:fe:e7:35:c1:
59:98:4d:f2:f0:bd:f1:1c:ed:62:5f:37:d7:60:6e:a1:fb:24:
94:8a:6c:b1:26:ff:53:35:58:29:93:5d:9d:28:c1:df:3e:3a:
5a:50:83:73:52:fe:1b:1f:54:aa:d7:e2:38:c1:3a:2d:4f:8c:
85:1f:a5:92:d8:79:36:42:5f:0b:19:92:26:24:1b:65:5a:40:
f7:dd:a9:e4:cb:62:a2:4e:cb:94:87:ac:b7:1b:73:76:3d:8e:
1b:08:25:61:3d:a6:29:98:75:bb:90:f7:50:b9:2b:34:8c:81:
39:3d:61:7a:a2:70:99:18:ad:0c:76:5d:7c:47:ec:92:18:bc:
cc:34:a5:60:c4:d6:39:ab:dd:77:79:fe:d4:43:16:ed:15:be:
6a:b0:8a:5d:7c:4c:be:e8:05:03:61:d7:45:89:51:20:67:69:
5f:70:d0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 02:57:52 2026 by rpki-client