Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft
File: lMhsmzXXghFrLNhYOifOtAO49ho.mft (raw, json)
Hash identifier: nAjiOngAw911p67PgHYNwJG0p4JxeOvXWS0Ck93wYg0=
Subject key identifier: 29:11:3A:C5:17:2A:75:F6:A9:9D:CB:4B:F9:8F:CA:18:A4:BE:53:14
Authority key identifier: 94:C8:6C:9B:35:D7:82:11:6B:2C:D8:58:3A:27:CE:B4:03:B8:F6:1A
Certificate issuer: /CN=94c86c9b35d782116b2cd8583a27ceb403b8f61a
Certificate serial: 019EC300BF5D767A2EBE1C60D9185A787EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 22:01:06 +0000
Manifest this update: Sat 13 Jun 2026 22:01:06 +0000
Manifest next update: Sun 14 Jun 2026 22:01:06 +0000
Files and hashes: 1: lMhsmzXXghFrLNhYOifOtAO49ho.crl (hash: co2ycdDtXBoxYAWfpwOXU3GJPcaQYD0Bi4dX5SeoJNE=)
2: tz4P9nF3Ei3wUS8VYP6Gfwtlguc.roa (hash: WI+TvaMT1Y9cC04iUl0U1l9xEwrwqSAkBoEDvp55Sj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:bf:5d:76:7a:2e:be:1c:60:d9:18:5a:78:7e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94c86c9b35d782116b2cd8583a27ceb403b8f61a
Validity
Not Before: Jun 13 22:01:06 2026 GMT
Not After : Jun 14 22:01:06 2026 GMT
Subject: CN=29113ac5172a75f6a99dcb4bf98fca18a4be5314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:83:12:60:34:ea:da:b9:00:b3:d8:48:f4:
d3:4d:46:50:0d:85:90:4b:9e:71:4f:f2:e2:d4:f0:
26:0f:21:50:fe:bb:f3:43:3c:1b:3a:4e:0a:c4:b0:
83:71:97:e5:aa:c1:52:62:a0:92:de:2b:91:72:f9:
96:70:2b:92:8d:93:92:d4:91:80:60:77:04:95:02:
8e:d7:09:67:5e:56:0f:59:2c:bf:57:82:41:b4:b6:
88:fa:24:59:72:cb:a4:32:3d:a0:7d:37:44:85:cf:
5c:44:45:c2:cd:19:97:d5:88:ae:0e:db:d7:04:2d:
31:62:e6:49:7a:78:c4:71:11:7c:6a:da:89:93:11:
a9:60:a0:c3:2a:6c:9f:4f:b9:19:59:69:47:00:7e:
60:ea:e0:c4:8d:b3:50:d2:ca:fe:66:f7:58:a3:ef:
1b:d4:2c:42:97:26:9c:72:b6:d1:bc:96:00:ac:8a:
07:00:28:0c:1f:25:c3:0b:5a:6a:66:90:8b:1b:d1:
51:35:59:e9:8c:b8:66:91:b9:e8:0d:90:44:a6:e8:
01:5e:76:a8:37:88:00:8a:0e:7c:1d:ea:cc:10:bc:
33:fa:44:e4:d2:f9:6a:58:e3:4f:db:3f:15:0d:f7:
2d:17:57:4e:47:1e:ee:56:63:a7:1a:a6:c6:84:82:
d8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:11:3A:C5:17:2A:75:F6:A9:9D:CB:4B:F9:8F:CA:18:A4:BE:53:14
X509v3 Authority Key Identifier:
keyid:94:C8:6C:9B:35:D7:82:11:6B:2C:D8:58:3A:27:CE:B4:03:B8:F6:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lMhsmzXXghFrLNhYOifOtAO49ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fdd688-3e23-46f4-a073-35b0c96524fa/1/lMhsmzXXghFrLNhYOifOtAO49ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:18:48:e0:a3:7c:49:9e:a8:a4:50:05:aa:ec:27:49:e2:7a:
ac:ec:e9:df:ca:78:aa:a8:e6:0c:51:9a:15:a8:4d:1c:a3:34:
9b:c6:5d:55:96:76:17:46:b3:5c:9c:30:3b:54:57:8f:90:2b:
8d:20:86:94:76:2d:f7:6b:69:18:1f:24:a8:a5:de:3a:d5:18:
78:57:da:a6:60:f9:78:10:46:2b:ce:34:f6:9a:c6:da:fd:98:
b0:ce:92:2d:fe:bc:15:83:81:4f:29:e8:91:8e:73:38:79:01:
40:b0:94:f8:a5:f7:3c:fc:9f:90:e2:1d:0e:78:cb:16:4c:dc:
65:a7:32:eb:9a:58:49:8c:a3:da:95:e3:d9:65:df:be:d5:b4:
8b:fc:1d:3f:9c:5f:e2:cd:4e:26:f4:ba:75:96:6b:97:b5:14:
ec:7b:87:0d:7e:2d:52:73:4f:f0:d5:c8:06:db:0c:dd:eb:d7:
a4:ca:87:7d:22:b9:39:83:41:c0:ed:62:1d:50:92:c2:72:6c:
35:7e:49:fe:0d:6b:84:be:cc:5b:6b:ba:73:b0:70:61:39:6a:
fe:93:ba:f3:4e:b0:2d:10:a0:d5:b4:fb:8a:ac:61:ca:22:ad:
49:9e:8e:38:74:8c:ad:d3:c4:2a:00:cd:43:28:6e:96:54:69:
41:50:f9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:52:23 2026 by rpki-client