Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
File: lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json)
Hash identifier: VqPQmQ83WzOdudSuNOZbdhvSgqalLRR0yemNBZLRmNo=
Subject key identifier: 07:CD:9F:06:D7:D4:AB:A2:54:6F:1F:2B:04:D1:D6:E6:02:70:BE:99
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Certificate issuer: /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial: 01A0CDB63F97C4AD7B5DE35FB4AA520B2EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
Manifest number: 057C
Signing time: Wed 23 Sep 2026 10:01:08 +0000
Manifest this update: Wed 23 Sep 2026 10:01:08 +0000
Manifest next update: Thu 24 Sep 2026 10:01:08 +0000
Files and hashes: 1: 7lwx1zJrY0F3LdoEn_iJXa3pM84.asa (hash: Q0oQMweHsmrfdfYTRFNKYhoRxahIkowVFvNwfkroZB4=)
2: EhjDtKMsVMUs0ZuH-lX2Q3No4_k.roa (hash: dyUmYbTgpywEf3UhaQdBj3HPVSQs7lYIPuCIHhpwi/A=)
3: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: o9lDrDm4r4lBGZ6dudN8AnbYMvFAmgbiAMHIPqREIhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:3f:97:c4:ad:7b:5d:e3:5f:b4:aa:52:0b:2e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Validity
Not Before: Sep 23 10:01:08 2026 GMT
Not After : Sep 24 10:01:08 2026 GMT
Subject: CN=07cd9f06d7d4aba2546f1f2b04d1d6e60270be99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:84:f9:dd:14:e6:82:b7:d9:27:57:9b:f5:3d:
26:82:3c:ab:bd:7a:af:72:7c:d1:35:93:d5:ab:54:
e5:e1:7a:2f:23:a5:5c:86:1a:94:5d:29:e9:66:cd:
1e:d5:2d:79:28:5a:5a:94:27:ad:f2:a0:b5:bd:51:
47:d4:ae:89:2b:09:fd:6c:62:31:ff:41:74:a4:9d:
ce:a8:3d:38:5a:73:7a:1f:3e:80:ff:34:35:be:cb:
b4:1c:2c:ad:72:d1:4b:1e:e3:80:ba:68:4c:1b:4a:
b7:52:90:eb:1e:e5:a1:89:62:c2:3c:78:e7:ca:e7:
f5:2b:1e:b7:2c:9b:83:54:c3:8d:66:66:ee:66:b3:
e0:11:a9:9e:72:de:31:0c:b3:42:ee:03:84:34:16:
b6:5b:ea:f3:02:2d:52:eb:fd:07:ee:db:5d:25:2b:
11:38:3b:88:e3:85:d4:34:ae:5e:01:4f:50:ef:bf:
07:11:e3:40:e0:ba:8b:65:47:30:92:bf:74:73:2e:
91:d1:22:82:4b:fa:c1:93:9f:4e:df:3d:b2:2b:a5:
99:56:47:bd:4d:bd:19:71:5e:ee:5a:41:c8:19:05:
67:4e:16:8d:34:a5:38:b2:0d:14:44:98:b1:96:86:
32:97:f5:f4:9b:14:29:3a:29:71:fb:09:55:14:b3:
a8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CD:9F:06:D7:D4:AB:A2:54:6F:1F:2B:04:D1:D6:E6:02:70:BE:99
X509v3 Authority Key Identifier:
keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:97:ac:46:6a:47:9d:5b:51:c0:14:ba:3b:02:7e:f5:47:9c:
4e:a9:13:62:83:fa:71:01:dc:61:ea:ba:69:3c:1d:b3:c5:60:
6f:c4:a6:49:eb:3a:e3:ae:70:47:59:a5:e7:9e:9a:10:44:c4:
a7:e6:ea:62:cb:07:3c:a9:c6:43:61:8e:6c:63:92:6e:e8:ea:
0d:43:33:77:72:15:b0:22:4e:e0:dc:c1:d3:ee:67:bb:c3:c3:
5c:5b:40:2b:a4:9f:85:2b:c3:de:a3:4d:8e:ac:47:8e:79:ca:
3c:c6:2c:fa:16:8c:ad:0c:09:28:b6:bc:44:0a:12:99:17:68:
aa:1f:b4:1e:ea:4b:b6:a7:ee:84:bc:27:22:da:43:be:af:37:
58:af:e4:e6:02:e5:7a:a9:68:34:6a:0f:ef:ce:9b:e0:27:78:
50:70:8a:6b:af:34:45:6c:10:a9:0c:7c:c9:a0:c6:00:6b:8a:
0e:49:57:32:f4:76:a5:1f:03:0d:20:68:dc:5a:5f:02:e7:a2:
23:31:10:ee:1a:dc:cb:d4:c6:4b:95:81:5d:44:eb:ce:36:4e:
04:e4:ad:c2:7e:75:2f:fb:4e:fb:8f:44:c8:fd:2a:32:56:5a:
40:29:ae:86:da:52:63:5c:1b:97:2f:e7:d9:fa:88:74:78:a9:
66:2a:10:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:12:43 2026 by rpki-client