
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
File: lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json)
Hash identifier: MXGWtrKYoHm/j7oPrKJL+0A9cpk+mpbDzc9Rd3YnYQk=
Subject key identifier: 5B:46:8A:D1:87:35:61:4A:F6:BF:D8:70:23:32:F2:D9:F5:68:D7:A3
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Certificate issuer: /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial: 019EC06D6731F389769922A3C76F268A19FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
Manifest number: 046C
Signing time: Sat 13 Jun 2026 10:00:55 +0000
Manifest this update: Sat 13 Jun 2026 10:00:55 +0000
Manifest next update: Sun 14 Jun 2026 10:00:55 +0000
Files and hashes: 1: 7lwx1zJrY0F3LdoEn_iJXa3pM84.asa (hash: Q0oQMweHsmrfdfYTRFNKYhoRxahIkowVFvNwfkroZB4=)
2: EhjDtKMsVMUs0ZuH-lX2Q3No4_k.roa (hash: dyUmYbTgpywEf3UhaQdBj3HPVSQs7lYIPuCIHhpwi/A=)
3: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: RYHKVtL3JgKDf4L6/1Z8bT9yOJzDRe/4/dVi9k0ARyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:67:31:f3:89:76:99:22:a3:c7:6f:26:8a:19:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Validity
Not Before: Jun 13 10:00:55 2026 GMT
Not After : Jun 14 10:00:55 2026 GMT
Subject: CN=5b468ad18735614af6bfd8702332f2d9f568d7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:8e:9d:df:f0:ed:09:54:f0:e5:c2:4e:8a:
b3:cf:f2:18:fb:22:d2:a5:94:45:ac:70:a9:02:68:
71:e6:7d:55:c0:c6:9b:bd:42:8e:09:dd:64:68:11:
5d:01:7d:87:87:6a:97:c3:25:7c:89:3c:e8:ac:d9:
bf:1a:8e:30:f4:40:38:65:02:c6:17:37:69:42:a2:
aa:80:64:7c:05:4e:c5:bb:b6:a1:9e:69:0c:21:40:
c2:de:c6:c7:02:00:66:cd:be:08:57:3c:bf:5a:ac:
b9:f7:f8:aa:86:ed:57:fb:b2:b7:5a:6d:98:11:ef:
83:c8:11:63:e9:eb:75:c7:7f:6d:1b:66:c3:8d:78:
ce:a4:fc:e6:57:8c:28:76:91:cf:18:6b:56:d3:34:
b2:2c:a2:c1:55:00:6a:41:ae:a9:c2:ce:b1:9f:01:
00:8e:76:28:de:8f:dc:36:43:19:9a:0d:69:74:b3:
1e:1c:76:dd:52:e8:b3:ae:36:b0:34:b7:81:eb:4b:
5f:7d:5e:d4:86:32:a9:e7:b4:e0:b8:66:ed:76:eb:
88:12:32:e6:6f:31:3e:7d:bb:58:0e:5d:33:b3:1f:
74:5d:30:88:9d:01:e5:9c:39:8f:5d:fe:2b:87:dc:
c6:95:b0:83:90:b8:a3:bb:69:6a:70:f3:54:f2:0b:
0e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:46:8A:D1:87:35:61:4A:F6:BF:D8:70:23:32:F2:D9:F5:68:D7:A3
X509v3 Authority Key Identifier:
keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:fe:86:4e:73:1a:19:82:73:c1:ac:42:fd:d0:e5:17:ab:93:
b6:32:b2:b9:17:a0:b9:c1:c1:67:e9:99:3f:ed:fd:7f:31:6f:
c3:ef:6b:43:60:fb:d0:7d:e3:db:48:f9:09:fe:7d:d6:f2:9f:
5a:0f:8b:0b:23:1f:e9:f2:1a:ea:e1:3b:bf:50:97:d8:a2:e9:
89:a6:20:29:b0:c6:6c:b9:19:de:9e:35:0b:0d:b4:19:22:a4:
10:a4:66:0f:90:20:54:22:8e:32:f6:0f:da:ae:c1:75:11:9f:
bd:9f:4c:23:93:e7:8b:99:75:73:ff:36:b4:69:92:08:ad:94:
0a:f7:75:e8:a3:2f:ee:76:90:d9:83:02:c0:ca:71:b4:d9:48:
39:58:08:a7:62:4a:18:88:be:66:18:08:af:7d:f3:5e:55:0f:
1b:38:2e:65:ba:d6:21:5f:52:7e:b1:9b:6e:29:e1:84:1b:e4:
74:03:99:94:2c:5c:54:2d:ca:c9:5d:14:9a:43:3e:0a:9e:93:
20:6b:1d:1e:97:72:91:1a:60:9e:72:d4:6e:29:f3:58:a4:75:
21:93:94:fa:7c:04:48:b1:4d:27:0b:f2:58:73:8c:42:00:bb:
95:e6:74:b2:e7:e5:ff:f7:61:e8:e3:11:0b:4e:bb:ee:f1:67:
60:35:2b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:26:56 2026 by rpki-client