Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft
File: lHEhWA7QLt309eWofTfgF7Mt9xs.mft (raw, json)
Hash identifier: iw2EM9thRTWAiWwYIcKMJvjKwNucO3pWiaCbDafa3CQ=
Subject key identifier: B1:75:C6:08:25:35:66:B7:B8:1C:8B:CB:3C:25:43:0C:BD:A5:DF:DD
Authority key identifier: 94:71:21:58:0E:D0:2E:DD:F4:F5:E5:A8:7D:37:E0:17:B3:2D:F7:1B
Certificate issuer: /CN=947121580ed02eddf4f5e5a87d37e017b32df71b
Certificate serial: 019D389BCDB6F8AF5E2055F3E439B063CAC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:27 +0000
Manifest this update: Sun 29 Mar 2026 08:00:27 +0000
Manifest next update: Mon 30 Mar 2026 08:00:27 +0000
Files and hashes: 1: lHEhWA7QLt309eWofTfgF7Mt9xs.crl (hash: 4fd34ODUinlMdKgiDlXx7k5IrN2+vUduqG4CucMXMKw=)
2: xINjkJL8qvMAVDbIJ4LyV80MllA.roa (hash: kboYGMyjJk+EgYXIB3KXdvFsdQ20CMBg3E1UOGt17HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:cd:b6:f8:af:5e:20:55:f3:e4:39:b0:63:ca:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947121580ed02eddf4f5e5a87d37e017b32df71b
Validity
Not Before: Mar 29 08:00:27 2026 GMT
Not After : Mar 30 08:00:27 2026 GMT
Subject: CN=b175c608253566b7b81c8bcb3c25430cbda5dfdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:63:48:ba:33:57:11:c3:67:fd:d6:da:c6:55:
03:e0:9f:37:49:0c:bb:cb:28:d1:d3:76:da:43:f9:
38:08:89:f1:37:0f:24:3b:e4:be:11:fb:e3:50:62:
dc:11:ba:0d:47:8d:8e:5d:90:f4:95:60:03:20:c7:
6a:52:78:59:d4:7d:5a:81:6a:bb:a4:cb:79:f0:91:
a2:20:0f:ab:87:b2:19:82:b1:f4:cb:4f:9b:55:b0:
2f:28:85:52:ed:73:3c:11:0d:a7:26:02:c1:03:44:
28:92:7f:92:be:8c:e5:9c:3b:43:e5:0a:2e:d1:25:
a4:3b:99:5a:df:c3:e4:6e:8a:1c:9e:49:06:a2:32:
62:11:16:57:b4:9f:f4:09:84:d3:3e:d0:18:9a:01:
f0:8e:d5:96:09:26:3f:1b:ec:f3:4f:03:00:24:7f:
9f:c4:4a:21:11:c9:24:9f:e6:c1:fa:09:7b:c1:33:
1b:de:16:a1:23:52:1f:c0:6a:4c:aa:fc:5e:96:a9:
a0:6a:b8:9b:96:fe:0c:99:d5:e4:7a:9e:ee:fe:4a:
fb:bd:57:7f:bb:df:34:95:7f:b3:a7:54:a6:8f:57:
6d:ac:b7:ad:8d:20:a6:8d:56:ee:e2:38:d0:8d:21:
9d:4a:bc:a7:c0:fc:b2:5e:d0:96:04:21:23:94:08:
13:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:75:C6:08:25:35:66:B7:B8:1C:8B:CB:3C:25:43:0C:BD:A5:DF:DD
X509v3 Authority Key Identifier:
keyid:94:71:21:58:0E:D0:2E:DD:F4:F5:E5:A8:7D:37:E0:17:B3:2D:F7:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c2:60:d9:e7:3c:71:16:12:fa:2c:28:7d:87:14:d7:d6:74:
c5:0e:a9:88:a7:a0:c1:5b:09:21:47:1a:93:38:83:f5:43:01:
e2:e9:ae:d0:7a:7c:cd:0d:1b:c6:bf:91:68:3f:08:9e:b4:85:
98:2b:d6:ba:f4:0a:1a:e9:2a:02:79:b4:fd:8d:77:2d:6d:46:
b8:b0:9b:73:1f:78:0b:03:50:96:78:72:98:29:10:3a:1a:28:
97:8c:21:9b:0e:ed:d6:2f:62:6c:48:d0:04:2f:0e:37:69:6f:
38:93:eb:e6:0b:be:d5:e8:65:74:57:c6:3e:a6:f2:2d:73:75:
26:a4:85:24:9a:73:9b:bc:37:08:5f:25:db:5f:4e:f3:b4:bf:
ab:57:d3:de:60:9c:e6:7e:5b:1a:cd:77:f1:53:28:62:00:0b:
b3:b6:dd:39:7a:64:ab:fa:93:81:0c:83:f8:8e:9c:c8:74:21:
a1:56:7c:ba:1e:0c:07:15:ff:70:d6:f5:fd:f9:a2:b5:e4:c2:
c6:f4:0f:52:5e:0e:32:28:ea:7d:ad:4b:9e:c8:0a:6e:78:66:
e3:77:53:ab:16:52:ac:9c:31:93:21:0e:5e:2f:1f:6b:70:49:
9b:ad:87:86:a0:8a:58:59:48:a1:26:06:b4:bb:b6:c4:fa:ad:
13:84:40:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:04 2026 by rpki-client