Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
File: lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json)
Hash identifier: +D1zmMxnSMUFmsC9T+QpdvNCxu7xBNBg7m+13zle2uQ=
Subject key identifier: C9:FF:3E:1D:40:6E:60:3E:DE:0F:8A:D0:06:5D:06:62:53:64:62:93
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Certificate issuer: /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial: 019D9D7653AD3F1D28464FDDCA3A308034D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
Manifest number: 03D5
Signing time: Fri 17 Apr 2026 22:01:10 +0000
Manifest this update: Fri 17 Apr 2026 22:01:10 +0000
Manifest next update: Sat 18 Apr 2026 22:01:10 +0000
Files and hashes: 1: EhjDtKMsVMUs0ZuH-lX2Q3No4_k.roa (hash: dyUmYbTgpywEf3UhaQdBj3HPVSQs7lYIPuCIHhpwi/A=)
2: adJ8Ky_ronY-yz7LKBDyvuJ2060.asa (hash: XoaHtIBvAUQh2znuwTfM9cH8f4q14SD4Tb4S0zzg0E0=)
3: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: Uwit67EXeX0EXHlQF+da/+/3RezLvTLVHfuoDjt9nfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:76:53:ad:3f:1d:28:46:4f:dd:ca:3a:30:80:34:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Validity
Not Before: Apr 17 22:01:10 2026 GMT
Not After : Apr 18 22:01:10 2026 GMT
Subject: CN=c9ff3e1d406e603ede0f8ad0065d066253646293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:df:a5:26:3b:72:91:26:c9:62:db:2d:fc:c4:
c7:a0:d0:50:8c:86:5d:f4:d7:d2:78:15:ab:a1:4c:
a6:6c:d6:69:3b:2a:41:58:7e:b2:25:64:ad:41:12:
86:51:fa:60:e0:a7:84:66:6b:eb:a6:c2:f0:ae:69:
1c:c5:93:3e:fd:4c:8a:6c:ca:73:12:8d:75:e9:68:
d0:74:4f:d8:fd:91:f8:c0:f4:5d:18:50:be:f6:ce:
43:6d:2f:8e:0d:e0:75:f2:dc:08:be:13:79:ee:6c:
62:a1:d3:af:c1:89:b4:f5:1b:55:b6:0c:e7:55:33:
d3:84:03:1c:2d:24:c5:7a:eb:42:bc:93:79:54:d8:
d3:c7:d9:94:b1:ca:cc:3f:fa:d9:b0:43:a8:4c:0f:
8a:88:cc:1d:45:a5:db:2f:21:75:3c:72:4d:8d:8c:
b8:7c:73:7b:8f:2e:33:1a:fe:81:89:83:63:fb:a9:
27:b6:7d:39:56:02:dc:e9:4b:a0:37:0b:df:3f:a6:
b2:de:37:7b:34:fe:c9:ad:f4:67:18:07:ba:9e:39:
4c:c8:35:a0:64:c7:79:12:d1:71:43:8d:aa:8a:e2:
7c:c0:6d:57:99:d4:1d:8d:3e:ae:fa:99:b7:ea:09:
96:e8:93:b0:13:b4:80:07:d4:86:f5:75:35:48:a5:
f6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FF:3E:1D:40:6E:60:3E:DE:0F:8A:D0:06:5D:06:62:53:64:62:93
X509v3 Authority Key Identifier:
keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:88:7e:0a:06:6f:9a:d6:70:40:fd:bc:ce:c0:8d:99:b5:f4:
dd:42:a5:a1:b6:81:9a:98:bf:75:34:c9:bc:5e:f4:b1:aa:62:
31:4f:98:f9:fd:72:44:57:a6:26:05:3d:fd:e3:d0:44:28:7b:
db:b0:87:00:8d:75:15:99:24:d7:ef:00:28:a3:d3:02:f2:54:
c7:ea:a8:11:71:ed:11:67:30:a4:8d:f0:32:12:7c:60:98:7e:
c8:ca:2c:c7:bd:d3:e8:84:99:43:88:21:0c:c7:da:1c:c7:52:
04:dc:2a:d0:38:4d:b8:75:f9:84:23:e0:ba:e6:f5:df:39:9f:
3d:1e:0d:99:fb:e6:f1:ec:0e:42:c8:9d:fe:6e:78:85:3d:16:
e4:fb:b5:fa:03:40:d5:aa:cc:1a:be:a5:b7:44:23:46:2b:9d:
9f:ea:c6:f3:d4:f0:7b:a3:e9:b6:c3:2b:1d:fe:11:ed:bd:74:
30:1c:f3:05:14:bb:a1:df:ae:18:3a:55:60:4a:91:60:f1:2d:
fb:ef:e2:57:81:e3:9d:88:00:62:c8:1b:4c:8a:4b:cc:0d:e3:
90:9b:77:9e:1a:81:81:de:d0:6b:f1:6d:c7:f5:7c:e7:7d:35:
09:a0:65:3a:b3:e1:31:75:a7:dd:e1:13:ac:23:c4:04:31:ab:
0f:cd:df:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:05:24 2026 by rpki-client