Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
File: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft (raw, json)
Hash identifier: ZBm8Ahr8rCzk/cL3t1EcNBcRQfx5yv04SpfqrMG+1o0=
Subject key identifier: 45:B4:04:DE:0C:98:A8:C4:2A:DF:B2:F4:73:02:B4:9D:70:9A:20:48
Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
Certificate issuer: /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Certificate serial: 019CF805FBB8ED7511E5C117D04ECA93EA73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
Manifest number: 1800
Signing time: Mon 16 Mar 2026 19:01:07 +0000
Manifest this update: Mon 16 Mar 2026 19:01:07 +0000
Manifest next update: Tue 17 Mar 2026 19:01:07 +0000
Files and hashes: 1: 8Lq3lIQ57V2x5XRAthwXhjdfPZ0.roa (hash: 11Z2xFuTQAhf/AKwmMmwrf1P3F5XfEX9AMFlRSFk2p4=)
2: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl (hash: nKuTyDh+iZZeDdwFyqhEBLl2WnLAGdLp0WBiftjrrKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f8:05:fb:b8:ed:75:11:e5:c1:17:d0:4e:ca:93:ea:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Validity
Not Before: Mar 16 19:01:07 2026 GMT
Not After : Mar 17 19:01:07 2026 GMT
Subject: CN=45b404de0c98a8c42adfb2f47302b49d709a2048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d0:b4:7f:e1:97:84:bc:e1:b0:07:de:06:f7:
26:00:81:39:54:74:ee:bb:64:85:df:65:6a:3e:55:
9d:9c:23:ba:d2:8f:52:d2:3e:14:41:f0:29:af:c4:
ab:50:bf:6a:84:43:46:d7:31:e7:98:c3:52:62:0b:
e5:c1:de:03:90:5e:5a:04:68:e9:18:71:ea:fd:4c:
6c:bd:cc:1c:f3:69:ed:24:84:33:3c:3a:17:a9:82:
3f:ac:0c:93:e1:72:e5:44:11:b7:96:c0:38:5d:91:
31:24:af:e6:73:db:ef:22:56:b7:54:f7:2f:6c:3d:
8c:a9:a9:3b:02:da:06:88:4e:9a:a9:03:ee:50:3a:
56:20:67:0d:b3:49:21:26:3b:b5:4c:3d:8e:1d:1c:
4f:0f:a3:2c:09:20:b7:38:4f:8e:98:4c:1d:9f:c1:
e1:38:11:6a:dd:2c:1e:88:1e:98:5a:88:c3:9f:79:
fb:c1:0d:88:7b:08:39:79:e3:e7:1c:cf:6c:f4:a6:
c2:d4:50:3e:f1:81:5d:c5:97:d8:e5:11:8e:96:5c:
7d:83:19:6d:f6:38:ba:7d:54:38:6d:b3:e6:64:88:
c8:44:58:18:8f:7c:e5:7a:f0:90:d5:c1:2b:87:7f:
66:0a:ac:59:bf:ce:d6:e5:de:e3:a5:51:f1:b1:ab:
b6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B4:04:DE:0C:98:A8:C4:2A:DF:B2:F4:73:02:B4:9D:70:9A:20:48
X509v3 Authority Key Identifier:
keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:11:fc:3d:1b:a3:d6:19:34:0b:eb:07:ea:d5:27:40:d6:87:
ff:d8:f5:b2:8e:f5:e8:a7:6c:5c:64:60:84:bb:48:57:33:e7:
6b:ea:2a:a0:d1:15:34:92:db:d7:68:02:7e:c5:6e:76:61:21:
85:fd:5a:5b:cb:56:aa:54:0b:10:bd:1f:fa:62:f6:8f:33:d0:
9b:21:7f:e5:f1:ce:cb:0d:5b:f6:b5:59:1c:ea:05:6e:68:33:
4d:67:31:e2:3e:c7:9b:df:4c:a5:91:0b:d5:ae:a3:53:df:5c:
db:fb:8f:7f:7e:d5:1e:df:47:9b:7b:92:da:b2:80:0e:88:cd:
86:02:44:4a:2c:56:9c:df:89:69:34:f1:1a:a4:70:29:c6:23:
7b:81:2b:c6:36:13:c3:ce:cc:5a:d7:05:a6:e1:d6:b9:24:aa:
0c:0f:cd:c5:72:31:0a:51:69:86:e3:13:83:23:58:cd:67:97:
09:8f:4c:42:ae:12:8b:8f:cc:17:7e:bb:23:8b:72:00:4f:c2:
80:c1:4e:12:cd:f8:13:fb:2e:86:15:6e:a6:5e:db:f5:33:b6:
48:e7:44:fa:13:ee:53:c2:fc:e6:b2:e8:65:ad:93:e3:4b:eb:
48:8f:b7:69:c4:54:e5:1b:68:00:ee:de:7f:30:8a:d6:5c:c5:
18:ad:f5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 02:06:42 2026 by rpki-client