Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
File: lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json)
Hash identifier: kz6D81cT18XQUY2+Er3V/yNyelWmI2PqBnro0X9C2fY=
Subject key identifier: 3A:5F:0A:5F:0E:E9:88:6A:A4:1B:EA:68:C8:63:65:41:1D:AD:E5:51
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Certificate issuer: /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial: 019CA78E81A26AEF1FD529FE34270CE027AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
Manifest number: 0355
Signing time: Sun 01 Mar 2026 04:01:00 +0000
Manifest this update: Sun 01 Mar 2026 04:01:00 +0000
Manifest next update: Mon 02 Mar 2026 04:01:00 +0000
Files and hashes: 1: EhjDtKMsVMUs0ZuH-lX2Q3No4_k.roa (hash: dyUmYbTgpywEf3UhaQdBj3HPVSQs7lYIPuCIHhpwi/A=)
2: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: LtxiDTtTwxN+1ZEeoYSkFcTRhtj162+P1MVAngy8I9M=)
3: qSRvXrdptD4XaBcPuWnB0wy-xHE.asa (hash: LBd4BHNIXy8q3KkJ/pwL33B6PZyMCIS5FmTlLkB/4dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:8e:81:a2:6a:ef:1f:d5:29:fe:34:27:0c:e0:27:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Validity
Not Before: Mar 1 04:01:00 2026 GMT
Not After : Mar 2 04:01:00 2026 GMT
Subject: CN=3a5f0a5f0ee9886aa41bea68c86365411dade551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:82:c4:1c:7b:04:64:e5:54:1d:e8:98:a3:
8a:51:04:41:5a:6c:11:e0:a2:44:16:3a:00:49:97:
3f:79:2b:69:84:8f:93:58:c3:e1:ef:74:86:61:c5:
24:3a:e4:42:69:a6:89:91:25:63:a9:c4:23:c5:43:
a5:03:33:e3:b0:1e:d7:c6:8c:5b:85:15:6a:c0:57:
31:a8:02:dc:32:fb:e6:3c:78:81:aa:90:a4:6f:7a:
40:07:36:63:46:cb:33:ee:4f:97:6f:22:cf:f4:a6:
c2:39:ec:d9:19:5d:da:2a:31:ea:4d:fa:b0:33:93:
be:62:51:f5:66:22:b2:4a:88:26:af:a1:35:f2:d0:
34:e2:5d:78:36:ce:d1:d5:d9:c0:bd:c4:8f:44:02:
b2:2b:19:79:a2:f6:63:bf:16:91:8a:26:41:82:10:
18:9a:f8:28:b3:fb:cc:b8:e9:d4:c4:32:06:a3:9c:
6f:9a:df:03:87:7f:68:e3:32:9f:b4:67:15:04:2a:
64:cd:5d:73:de:d5:fd:58:3c:15:00:3c:32:21:70:
53:9b:dd:8f:c3:58:b7:0b:24:38:d0:f0:74:5f:84:
52:b9:1c:8d:80:2b:a1:65:69:2b:c1:3b:3c:a6:48:
f5:c5:f3:5b:6b:12:f5:34:0a:1c:20:8e:a5:12:16:
83:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5F:0A:5F:0E:E9:88:6A:A4:1B:EA:68:C8:63:65:41:1D:AD:E5:51
X509v3 Authority Key Identifier:
keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e7:e7:fc:9f:62:ee:13:ff:c7:eb:7b:19:50:ff:21:33:bb:
c7:9a:bc:21:4c:e7:5c:11:6a:2e:9d:97:d9:a5:83:58:9a:53:
66:ae:45:8b:59:b8:6a:4a:53:00:d3:65:4c:ab:a0:7d:34:b4:
0d:b2:5f:54:8b:62:93:e5:08:09:26:4e:9b:73:e1:31:14:44:
a9:48:32:c3:4a:b7:78:fd:f2:1c:a0:6d:07:5a:4f:b7:a0:3d:
44:6a:4e:a1:86:0f:66:03:d2:07:e7:6b:ea:1f:0f:b2:9a:8a:
41:2a:fc:4d:ea:0b:b2:30:80:f0:3c:a7:a8:b2:f0:9f:d2:ac:
de:f9:a9:fe:d6:84:42:51:bc:5f:79:b1:23:c1:6b:f0:c1:8a:
c1:22:af:e3:e7:02:67:f7:2b:a8:0f:b3:a9:b9:b7:7c:f7:92:
87:42:fa:09:a1:13:ca:01:91:8d:69:f7:75:b5:b9:6b:4f:95:
74:29:6e:d2:25:01:c6:74:a0:4c:37:6b:b8:b5:cc:00:30:a2:
7e:7c:4e:2e:4d:13:25:10:f2:fe:04:9d:da:dd:c1:6f:cd:0f:
0a:a9:d5:9c:57:06:4a:b2:d3:96:4f:1e:d1:79:b2:1f:2e:51:
b6:cd:fd:bb:fa:0a:be:f2:e5:3b:0c:24:fb:e3:0b:7a:fc:28:
f1:ab:95:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:46:23 2026 by rpki-client