Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
File: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft (raw, json)
Hash identifier: OC8AodIEs+IjIQNbOfx4y0t2bSmqGra57pM5UiOTSHo=
Subject key identifier: F8:55:FA:DB:3E:EB:7B:84:2D:65:99:58:26:D2:BC:0E:75:AE:20:2E
Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
Certificate issuer: /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Certificate serial: 019DF126280D28E46446B98C51B45281E801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
Manifest number: 1881
Signing time: Mon 04 May 2026 04:01:42 +0000
Manifest this update: Mon 04 May 2026 04:01:42 +0000
Manifest next update: Tue 05 May 2026 04:01:42 +0000
Files and hashes: 1: 8Lq3lIQ57V2x5XRAthwXhjdfPZ0.roa (hash: 11Z2xFuTQAhf/AKwmMmwrf1P3F5XfEX9AMFlRSFk2p4=)
2: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl (hash: O/m7WJgRzGWuzLQ84cL+TK0Y/33J+o5Lqt4VikTM+gM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 May 2026 04:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f1:26:28:0d:28:e4:64:46:b9:8c:51:b4:52:81:e8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Validity
Not Before: May 4 04:01:42 2026 GMT
Not After : May 5 04:01:42 2026 GMT
Subject: CN=f855fadb3eeb7b842d65995826d2bc0e75ae202e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:00:b9:c1:12:12:5b:2a:67:44:1b:a1:d8:
55:8a:8f:11:56:1a:b0:6c:5f:12:c8:e1:f1:fd:53:
5b:d6:fe:2e:fc:82:6e:a9:d7:e6:53:f7:da:a7:61:
0a:ef:07:f1:05:d4:05:b6:a3:34:4c:8a:3f:a0:6d:
88:ca:cb:e3:a2:a4:7f:4a:0a:ef:f0:72:04:68:d6:
46:05:eb:e2:69:62:34:30:73:31:8c:1f:3c:85:1e:
0a:d7:b4:89:05:b7:be:a4:34:41:93:fe:94:bd:2f:
71:4f:30:07:f0:b1:a7:04:83:57:71:8d:3e:86:76:
d4:bb:4b:16:3b:0c:5a:ee:6d:05:c6:36:38:6d:ef:
fe:9f:e5:d4:95:a7:62:78:00:ed:1f:69:db:6a:5e:
22:2c:97:71:3a:98:39:e1:df:92:35:e8:e5:2d:21:
b1:e4:8b:d1:2c:14:45:1b:06:3c:fc:1a:34:21:30:
80:1d:a1:e8:c6:db:b4:2f:6f:3e:91:34:77:00:d8:
b6:a2:30:9f:f8:61:81:2a:f1:8c:a0:4b:f6:78:2e:
23:be:7c:52:58:d0:e5:4b:86:65:a8:f2:37:f9:1b:
e7:af:51:43:22:af:b3:58:60:25:85:d9:50:67:9f:
d9:58:48:e7:5e:cf:68:22:00:87:52:53:e5:71:bb:
26:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:55:FA:DB:3E:EB:7B:84:2D:65:99:58:26:D2:BC:0E:75:AE:20:2E
X509v3 Authority Key Identifier:
keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:05:d5:0b:8a:3c:ee:6c:03:35:98:46:0b:71:d3:79:3b:b6:
2a:11:86:b4:81:2f:c1:a0:df:e8:cc:a0:f5:32:2a:cc:e9:74:
03:59:26:51:f0:a9:da:f3:34:63:f4:93:8d:9b:64:fb:17:1b:
9b:49:e8:3a:30:4b:0f:5a:d6:a2:34:04:e7:5d:83:22:b3:ab:
dc:7b:32:0e:e7:59:9d:8c:52:86:16:9c:ba:48:b7:f2:f2:7c:
70:cb:98:6a:48:6e:2a:96:e0:b3:aa:2b:ec:07:23:54:5a:64:
9d:8e:7f:96:0c:ff:91:cc:55:38:72:1a:e3:3e:43:b8:b0:48:
7e:a4:97:5b:31:a2:54:f9:66:53:57:dc:e8:38:95:53:e8:71:
bb:76:7e:f1:00:9d:d5:d0:f3:78:59:ac:7a:ce:13:ee:2f:91:
6c:ba:74:c7:ce:e1:af:fe:d8:d3:4d:88:9d:ca:7d:46:b5:b0:
29:57:95:41:83:fb:64:98:9d:fe:cf:d9:bc:10:55:d8:06:a8:
85:04:0f:39:78:99:09:76:8c:78:41:42:c7:66:87:96:c6:a4:
c3:08:6b:e1:fb:dd:b8:54:fd:9c:97:00:31:4a:78:25:e3:0e:
72:a4:9c:01:b8:9b:08:0d:71:ea:0c:97:2e:b3:17:8a:f4:fb:
26:57:f9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 13:21:35 2026 by rpki-client