Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.mft
File: lh80Y53Jb_GEYziBzXBzrjGf4to.mft (raw, json)
Hash identifier: wXUgnxwUMNTVpeghRG8fx1JVIVFYkznwdLGdFBNOfEg=
Subject key identifier: 5F:EA:F7:A8:43:D2:0B:B3:F3:07:AD:42:96:CD:58:CF:23:4B:2C:3C
Authority key identifier: 96:1F:34:63:9D:C9:6F:F1:84:63:38:81:CD:70:73:AE:31:9F:E2:DA
Certificate issuer: /CN=961f34639dc96ff184633881cd7073ae319fe2da
Certificate serial: 019F122EE68478C69C81E3224CAC21E01A37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lh80Y53Jb_GEYziBzXBzrjGf4to.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.mft
Manifest number: 0117
Signing time: Mon 29 Jun 2026 07:01:31 +0000
Manifest this update: Mon 29 Jun 2026 07:01:31 +0000
Manifest next update: Tue 30 Jun 2026 07:01:31 +0000
Files and hashes: 1: kjCR_bdCRqh1misX4Uz-yIyS1po.asa (hash: 82A011Hf6oJtQgxOAq1FBWNeCl3xvpnApBB5CdfqWUg=)
2: lh80Y53Jb_GEYziBzXBzrjGf4to.crl (hash: jEuDdBzIrleXwAuuPXCjHSa697mXMaRDNWuR8bldV0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.mft
rsync://rpki.ripe.net/repository/DEFAULT/lh80Y53Jb_GEYziBzXBzrjGf4to.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:e6:84:78:c6:9c:81:e3:22:4c:ac:21:e0:1a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961f34639dc96ff184633881cd7073ae319fe2da
Validity
Not Before: Jun 29 07:01:31 2026 GMT
Not After : Jun 30 07:01:31 2026 GMT
Subject: CN=5feaf7a843d20bb3f307ad4296cd58cf234b2c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:53:e5:43:8b:c9:1c:e7:d9:cc:4d:29:df:a7:
ed:3d:9d:d1:7a:2d:f7:06:bd:81:78:ca:3c:bd:3c:
3e:5d:e0:51:fe:e6:b7:6f:a8:6a:1c:dd:65:00:e7:
dd:50:43:f5:2e:ff:e3:ef:99:fc:71:a3:22:cd:d2:
4e:15:22:d8:ef:e6:d6:7a:cc:ad:b4:0a:56:32:73:
01:4c:7b:9a:e1:d9:73:a4:cd:d5:23:1f:97:4e:1b:
1c:b5:75:b1:22:21:ed:c4:52:5f:8b:49:29:ba:8d:
da:56:b4:97:3d:71:23:a6:1c:79:48:1d:8e:71:44:
ca:77:af:ba:39:20:13:9e:1b:da:ea:fc:c3:f9:01:
d8:10:64:39:4d:94:a4:b9:77:3d:d1:38:d8:40:94:
5e:43:98:eb:c8:10:7e:13:95:8f:95:9f:65:f6:8c:
d3:e4:6f:79:07:b1:f6:08:0e:23:2e:53:3b:31:49:
47:d9:80:40:c1:71:6f:67:d5:e1:16:21:b7:f7:05:
bd:8a:80:f9:70:bc:a5:c9:65:27:d2:08:bf:67:f0:
70:0c:e8:b4:32:86:ac:80:82:29:21:27:f9:bc:72:
8e:b0:b8:d9:f6:c2:6b:46:dc:8f:2a:7c:1f:2b:92:
25:75:4a:fb:1e:1c:a7:39:db:12:f8:82:e4:7b:59:
0a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EA:F7:A8:43:D2:0B:B3:F3:07:AD:42:96:CD:58:CF:23:4B:2C:3C
X509v3 Authority Key Identifier:
keyid:96:1F:34:63:9D:C9:6F:F1:84:63:38:81:CD:70:73:AE:31:9F:E2:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lh80Y53Jb_GEYziBzXBzrjGf4to.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1e:c1:89:c1:f4:ec:cf:81:a4:3a:04:89:a9:1f:c9:b9:b8:
51:87:8d:07:3c:0c:0d:81:35:62:a9:22:b2:7a:99:17:58:8d:
1b:da:0a:cb:f2:8e:e6:4c:5b:1c:e1:23:97:55:16:83:46:00:
92:b5:fa:e6:80:91:25:54:09:e4:06:29:7f:c7:57:ff:54:22:
1a:c4:4c:db:1d:b2:98:e2:e1:ef:f7:7e:09:3f:18:8c:d9:32:
af:46:97:20:df:05:d2:6b:ef:b1:ac:8f:71:4f:aa:0c:66:28:
76:f0:4a:4f:a3:95:37:5a:bd:ae:22:3b:6c:7c:9d:b7:b9:64:
bd:8b:69:97:59:f3:60:2d:97:b5:53:13:30:5c:5e:85:6f:4f:
f6:04:2d:a4:91:bf:8c:05:0a:42:a9:8d:65:be:f2:d8:44:30:
dd:e9:c9:65:94:9f:8b:74:46:54:bd:a4:ee:50:00:8e:1a:22:
66:39:19:85:65:cf:75:4d:1f:f1:99:4d:44:4f:2d:4e:e2:a4:
e2:4d:1a:e0:6a:35:99:e4:64:a7:43:56:59:d5:90:29:f3:f2:
13:24:c3:f1:75:54:88:6d:26:99:33:44:47:03:d1:dd:17:7d:
44:e1:69:7a:44:45:8c:4d:80:35:42:ab:1d:15:45:43:74:86:
29:36:a6:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SLuaEeMacgeMiTKwh4Bo3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MWYzNDYzOWRjOTZmZjE4NDYzMzg4MWNkNzA3M2FlMzE5
ZmUyZGEwHhcNMjYwNjI5MDcwMTMxWhcNMjYwNjMwMDcwMTMxWjAzMTEwLwYDVQQD
Eyg1ZmVhZjdhODQzZDIwYmIzZjMwN2FkNDI5NmNkNThjZjIzNGIyYzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VPlQ4vJHOfZzE0p36ftPZ3Rei33
Br2BeMo8vTw+XeBR/ua3b6hqHN1lAOfdUEP1Lv/j75n8caMizdJOFSLY7+bWesyt
tApWMnMBTHua4dlzpM3VIx+XThsctXWxIiHtxFJfi0kpuo3aVrSXPXEjphx5SB2O
cUTKd6+6OSATnhva6vzD+QHYEGQ5TZSkuXc90TjYQJReQ5jryBB+E5WPlZ9l9ozT
5G95B7H2CA4jLlM7MUlH2YBAwXFvZ9XhFiG39wW9ioD5cLylyWUn0gi/Z/BwDOi0
MoasgIIpISf5vHKOsLjZ9sJrRtyPKnwfK5IldUr7HhynOdsS+ILke1kKJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/q96hD0guz8wetQpbNWM8jSyw8MB8GA1UdIwQY
MBaAFJYfNGOdyW/xhGM4gc1wc64xn+LaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGg4MFk1M0piX0dFWXppQnpYQnpyakdmNHRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mZTgwMTgtY2FlMC00YTRjLWI5YzEt
YzEzNjAyN2E3NGUwLzEvbGg4MFk1M0piX0dFWXppQnpYQnpyakdmNHRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9mZTgwMTgtY2FlMC00YTRjLWI5YzEtYzEzNjAyN2E3NGUw
LzEvbGg4MFk1M0piX0dFWXppQnpYQnpyakdmNHRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEh7BicH0
7M+BpDoEiakfybm4UYeNBzwMDYE1YqkisnqZF1iNG9oKy/KO5kxbHOEjl1UWg0YA
krX65oCRJVQJ5AYpf8dX/1QiGsRM2x2ymOLh7/d+CT8YjNkyr0aXIN8F0mvvsayP
cU+qDGYodvBKT6OVN1q9riI7bHydt7lkvYtpl1nzYC2XtVMTMFxehW9P9gQtpJG/
jAUKQqmNZb7y2EQw3enJZZSfi3RGVL2k7lAAjhoiZjkZhWXPdU0f8ZlNRE8tTuKk
4k0a4Go1meRkp0NWWdWQKfPyEyTD8XVUiG0mmTNERwPR3Rd9ROFpekRFjE2ANUKr
HRVFQ3SGKTam/g==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:39:49 2026 by rpki-client