Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
File: lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json)
Hash identifier: F47TnZvEBwGqfhwHvVd0YRUN085VORFG4mYVUS1WbxY=
Subject key identifier: B2:3D:F0:3B:43:A8:8C:FE:7C:EC:4E:77:0D:15:38:2B:E8:B2:58:6F
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Certificate issuer: /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial: 019FA82C215F5414ECB43E0B73A4822DA134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
Manifest number: 04E4
Signing time: Tue 28 Jul 2026 10:01:32 +0000
Manifest this update: Tue 28 Jul 2026 10:01:32 +0000
Manifest next update: Wed 29 Jul 2026 10:01:32 +0000
Files and hashes: 1: 7lwx1zJrY0F3LdoEn_iJXa3pM84.asa (hash: Q0oQMweHsmrfdfYTRFNKYhoRxahIkowVFvNwfkroZB4=)
2: EhjDtKMsVMUs0ZuH-lX2Q3No4_k.roa (hash: dyUmYbTgpywEf3UhaQdBj3HPVSQs7lYIPuCIHhpwi/A=)
3: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: AKk5E3vJQuKFrOvrrapz844gsaZ/SuEEPXC2MOYCdls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2c:21:5f:54:14:ec:b4:3e:0b:73:a4:82:2d:a1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Validity
Not Before: Jul 28 10:01:32 2026 GMT
Not After : Jul 29 10:01:32 2026 GMT
Subject: CN=b23df03b43a88cfe7cec4e770d15382be8b2586f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0f:fb:c1:de:ec:6d:c6:07:7f:ea:c9:a1:5e:
49:a6:0d:54:76:13:0e:c8:51:c1:1d:fd:a2:bf:1c:
93:c6:6f:8a:af:bd:ed:87:cc:a7:2b:87:79:7d:76:
91:87:00:a1:5a:7a:76:3e:b7:79:cc:b1:00:9f:b7:
74:6c:b0:82:1c:c8:22:0b:d9:17:06:c8:99:00:07:
d5:0b:44:b9:62:47:21:3f:cb:80:bc:7e:0f:f7:c5:
f9:6a:23:02:5b:1a:b1:ca:c6:c1:0a:fb:50:cb:5b:
7b:12:d5:65:73:99:c3:f9:3a:a8:c7:08:73:93:ef:
3b:f3:e1:a3:35:6a:7f:f6:7d:85:10:61:0d:73:5e:
da:08:dd:fb:93:10:a6:b5:a2:b9:f7:15:90:a1:aa:
57:fd:75:b9:3d:38:58:9d:b0:66:58:ef:45:c2:09:
65:12:d9:ea:d7:38:bd:3f:7f:d5:14:b1:08:1b:13:
41:20:89:85:4d:bb:24:cd:41:e9:3a:75:39:c2:83:
4d:08:9e:7b:8d:59:a6:6d:d7:8d:a9:b3:9c:b9:dc:
f2:b1:af:71:87:ca:30:03:c8:12:5f:a3:af:d1:12:
c3:0f:d6:91:b6:f3:16:1a:b9:4f:96:a7:d1:e0:cc:
75:fe:3d:ed:ee:7f:34:b7:4c:dc:da:b1:5c:f1:7f:
42:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3D:F0:3B:43:A8:8C:FE:7C:EC:4E:77:0D:15:38:2B:E8:B2:58:6F
X509v3 Authority Key Identifier:
keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:98:1b:28:84:e8:06:97:0c:43:04:fc:9c:34:73:e0:76:f7:
da:a5:cf:16:a7:b0:43:c3:ec:cd:01:cc:c1:39:51:45:43:d8:
43:0f:2d:6d:7b:a0:b9:bc:73:36:cf:07:bd:67:68:2b:51:4b:
f9:51:43:1c:55:f8:c8:a2:ef:2b:e9:1f:8d:39:32:0f:81:0f:
bf:c3:f3:c1:d6:8f:f1:cd:37:6d:71:75:7d:f6:ad:3d:be:e4:
02:10:d4:dd:44:74:41:2d:56:7b:22:76:b1:be:45:63:31:ce:
0e:6a:13:b4:0d:68:15:b5:db:cc:28:b4:65:00:df:6b:bc:3d:
39:c9:89:56:8b:d2:b5:b5:f3:35:db:b0:84:bc:7a:15:a4:ce:
67:8c:d6:48:f2:36:d9:eb:42:0c:64:19:93:09:f5:83:08:e6:
a4:d6:78:4f:df:24:7a:b6:34:2f:da:38:c6:6c:99:79:6d:a9:
d2:1f:40:33:19:34:a6:f8:e2:19:0c:40:01:b1:64:40:1d:f6:
6b:6f:1f:88:2e:e3:3a:73:69:95:49:55:fd:c5:9c:87:6f:05:
3d:d7:57:8f:cb:a4:31:fa:69:b5:17:81:10:5c:d5:24:4c:a2:
f8:ee:66:94:a1:54:37:d5:95:d3:e3:0a:71:1d:62:f3:82:53:
62:42:37:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oLCFfVBTstD4Lc6SCLaE0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NzRiNTI0MWI2M2MzYWZiZGIzNDJjYzQ3NjM0YzU1YWIy
ZmY4NDYwHhcNMjYwNzI4MTAwMTMyWhcNMjYwNzI5MTAwMTMyWjAzMTEwLwYDVQQD
EyhiMjNkZjAzYjQzYTg4Y2ZlN2NlYzRlNzcwZDE1MzgyYmU4YjI1ODZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug/7wd7sbcYHf+rJoV5Jpg1UdhMO
yFHBHf2ivxyTxm+Kr73th8ynK4d5fXaRhwChWnp2Prd5zLEAn7d0bLCCHMgiC9kX
BsiZAAfVC0S5YkchP8uAvH4P98X5aiMCWxqxysbBCvtQy1t7EtVlc5nD+Tqoxwhz
k+878+GjNWp/9n2FEGENc17aCN37kxCmtaK59xWQoapX/XW5PThYnbBmWO9Fwgll
Etnq1zi9P3/VFLEIGxNBIImFTbskzUHpOnU5woNNCJ57jVmmbdeNqbOcudzysa9x
h8owA8gSX6Ov0RLDD9aRtvMWGrlPlqfR4Mx1/j3t7n80t0zc2rFc8X9C8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLI98DtDqIz+fOxOdw0VOCvoslhvMB8GA1UdIwQY
MBaAFJR0tSQbY8OvvbNCzEdjTFWrL/hGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEhTMUpCdGp3Ni05czBMTVIyTk1WYXN2LUVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83ZjAyYjAtZDlhZC00ZjVkLTliNjkt
NDhmNjIxYWNiOWI3LzEvbEhTMUpCdGp3Ni05czBMTVIyTk1WYXN2LUVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83ZjAyYjAtZDlhZC00ZjVkLTliNjktNDhmNjIxYWNiOWI3
LzEvbEhTMUpCdGp3Ni05czBMTVIyTk1WYXN2LUVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5gbKITo
BpcMQwT8nDRz4Hb32qXPFqewQ8PszQHMwTlRRUPYQw8tbXugubxzNs8HvWdoK1FL
+VFDHFX4yKLvK+kfjTkyD4EPv8PzwdaP8c03bXF1ffatPb7kAhDU3UR0QS1WeyJ2
sb5FYzHODmoTtA1oFbXbzCi0ZQDfa7w9OcmJVovStbXzNduwhLx6FaTOZ4zWSPI2
2etCDGQZkwn1gwjmpNZ4T98kerY0L9o4xmyZeW2p0h9AMxk0pvjiGQxAAbFkQB32
a28fiC7jOnNplUlV/cWch28FPddXj8ukMfpptReBEFzVJEyi+O5mlKFUN9WV0+MK
cR1i84JTYkI37A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:38:18 2026 by rpki-client