Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
File: LhmWbA6l3zqYf4NlUktRKMun_JA.mft (raw, json)
Hash identifier: o/zftdEW1IX4bvdoTTdNT4zHUQloGscPNlQ9Llb44pk=
Subject key identifier: EE:A7:C5:F3:8D:FB:4A:80:98:D3:02:6C:7E:FE:53:A6:83:D3:BB:B6
Authority key identifier: 2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
Certificate issuer: /CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Certificate serial: 019D34F60C39DB78743FCBC1231ADBF998F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
Manifest number: 188E
Signing time: Sat 28 Mar 2026 15:00:33 +0000
Manifest this update: Sat 28 Mar 2026 15:00:33 +0000
Manifest next update: Sun 29 Mar 2026 15:00:33 +0000
Files and hashes: 1: LhmWbA6l3zqYf4NlUktRKMun_JA.crl (hash: ciMG13icI0k73Lz3Ef4JAiYRd2XzRvEqZbVWnCCVYQ0=)
2: S22IS1ytfAHZisgvUmyvGk-8FNg.roa (hash: gXnDrgQVCJ9KXbT9Gx6Ic3/hpo6fdcPJXpi41swj64s=)
3: xFsHUXQAhTrcAhcEagihKj_bLB0.roa (hash: fUcuoh5nCrUpLQdbdf9ANcbMiNKkrpJCJisA83ImkP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:f6:0c:39:db:78:74:3f:cb:c1:23:1a:db:f9:98:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Validity
Not Before: Mar 28 15:00:33 2026 GMT
Not After : Mar 29 15:00:33 2026 GMT
Subject: CN=eea7c5f38dfb4a8098d3026c7efe53a683d3bbb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:d1:2f:7c:63:33:02:f8:c5:ab:cd:ef:ab:
f0:f0:9e:a9:d0:35:9f:38:9d:00:79:c6:e3:1c:98:
30:2a:41:cb:c5:38:15:b1:26:47:ef:ef:7e:14:74:
3c:79:14:34:d0:6c:a2:22:55:b1:52:57:62:2d:59:
ab:4a:90:e4:ea:17:2b:dd:42:d5:92:a9:58:81:fc:
aa:fe:f2:0c:82:9a:fd:be:2d:11:1a:2c:ad:09:63:
df:fd:ad:b2:d2:5c:7e:92:50:56:32:d7:b2:4e:51:
56:90:19:af:b9:58:66:9b:80:ec:70:a3:2d:e4:65:
41:0e:97:20:97:9b:8f:c4:17:dd:a9:fb:d6:d7:cc:
56:37:b7:1b:eb:76:e4:37:8d:7d:a0:5d:8a:93:a5:
1b:26:95:d8:e3:6a:58:50:d5:d5:86:bf:2c:93:ed:
ea:b4:5a:d2:f8:10:d4:43:51:b6:6f:6a:59:92:80:
b5:22:72:5c:80:5d:44:9e:62:88:05:17:c2:b4:c8:
02:49:74:44:dc:6b:d2:f3:10:25:1f:cf:b9:eb:bd:
fd:8b:0b:e9:ef:00:ed:86:e5:8e:ae:38:92:b7:f2:
78:f0:5a:3c:bc:12:11:2c:d9:56:35:64:de:b5:c8:
b4:2b:48:f1:aa:8e:a8:5d:b2:ee:0e:2c:63:94:b2:
96:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A7:C5:F3:8D:FB:4A:80:98:D3:02:6C:7E:FE:53:A6:83:D3:BB:B6
X509v3 Authority Key Identifier:
keyid:2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f8:e8:b0:21:ef:90:51:b8:33:ad:b5:33:3d:38:3b:b9:6d:
db:51:00:e7:79:9e:98:4f:e0:f8:ce:d5:39:b6:ce:39:0f:b8:
7f:8c:ca:f4:1f:65:42:ba:4c:47:2a:e0:34:a2:8e:35:52:62:
6e:94:d8:44:cc:f9:04:f9:9b:0a:5c:8c:00:85:71:8d:a5:ed:
e8:ae:c1:6c:01:57:c5:94:ed:96:2a:5c:0c:8a:1f:99:e2:31:
c6:a7:7c:c7:58:d4:d0:9a:8f:49:13:38:1d:7e:32:a2:74:c4:
f8:a5:08:f3:7b:ca:c6:d4:9f:9b:75:2b:87:e7:72:4a:d3:bd:
ba:2e:38:be:5d:17:e4:47:3e:a2:68:5c:84:ce:01:1a:dd:03:
d3:8c:86:2a:bf:18:27:24:89:e8:52:ac:a7:ce:78:ad:d6:2a:
17:9d:43:9b:72:17:78:7b:0b:98:4c:3d:34:cd:c9:25:37:20:
5d:fe:ce:b0:c4:a0:25:fc:ed:b7:e1:d4:8f:bd:ac:70:9f:03:
71:09:ba:9f:d4:ba:58:4f:60:da:61:25:e2:39:9c:47:56:43:
6e:d4:62:ae:a1:f7:61:58:45:56:80:e1:6e:f1:44:82:dd:07:
b3:62:8f:82:ba:0c:4b:47:0c:1e:00:8f:b1:b2:26:14:75:2c:
24:5f:c0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 21:46:14 2026 by rpki-client