Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
File: Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft (raw, json)
Hash identifier: Cps/hOUZc6PSQwLNai/9zWLDlNciWaOkcsXB5eHSClY=
Subject key identifier: 20:9E:4E:49:A7:2F:B9:AA:77:21:4A:60:C9:C7:06:32:AB:40:50:8F
Authority key identifier: 2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
Certificate issuer: /CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Certificate serial: 01A13B92B9D692CD1FF3760D15E288D924D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
Manifest number: 14AF
Signing time: Wed 14 Oct 2026 18:00:33 +0000
Manifest this update: Wed 14 Oct 2026 18:00:33 +0000
Manifest next update: Thu 15 Oct 2026 18:00:33 +0000
Files and hashes: 1: Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl (hash: 3wbH+6NhFr+iCpBVHaP2AGA2orzmyiLbQ78w2ekN4ms=)
2: cxkSmIpEvqEgX4ngmD4597AK9SA.roa (hash: DfRU/sR9mUrJtx0wMuwQ4hVIgyHyvsCZqXVQHIZbmPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 18:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:92:b9:d6:92:cd:1f:f3:76:0d:15:e2:88:d9:24:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Validity
Not Before: Oct 14 18:00:33 2026 GMT
Not After : Oct 15 18:00:33 2026 GMT
Subject: CN=209e4e49a72fb9aa77214a60c9c70632ab40508f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d0:8d:91:bf:a9:94:0b:a8:cb:0a:e7:7a:83:
de:35:ed:55:92:ac:1c:f0:b6:6f:dd:36:3b:e0:6d:
c0:3c:b1:ba:3d:cb:c2:ac:a4:1c:b4:a2:cf:3f:e9:
a3:23:05:ff:fc:ee:62:90:57:b8:f9:82:e7:ff:5b:
99:5d:7a:f8:cc:55:4d:ee:f1:24:8b:ef:fc:80:15:
b5:e9:91:96:30:1b:7f:d1:7e:19:91:6b:8d:49:c8:
6b:87:3f:84:1e:c2:9b:39:28:86:e2:45:60:8c:19:
86:aa:ba:27:08:90:43:ee:f4:39:49:01:65:75:ea:
8c:84:cd:ea:dc:c0:33:b1:52:65:1e:74:45:42:73:
4d:26:b6:1b:8a:90:83:8d:b7:d5:5c:24:90:89:2e:
9b:2e:31:50:80:35:b3:02:50:e6:aa:08:51:9f:41:
86:a4:aa:9b:9b:5d:4b:07:2f:8c:7c:a6:de:3a:69:
40:34:95:24:6d:e6:97:48:10:26:43:cc:c1:3d:ce:
05:44:83:ec:83:42:74:81:fb:a9:cc:0f:9a:ee:c7:
d5:2f:d5:0c:ac:a9:0d:5c:b4:8f:44:aa:bf:bb:f1:
a1:67:07:92:63:e3:34:ec:b2:e9:22:9e:88:36:46:
0f:0a:c0:eb:c2:2e:e8:ab:94:8a:74:b8:f2:9b:80:
b7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9E:4E:49:A7:2F:B9:AA:77:21:4A:60:C9:C7:06:32:AB:40:50:8F
X509v3 Authority Key Identifier:
keyid:2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:bb:6c:c7:ba:46:03:0d:c8:1d:9a:97:bb:3b:10:27:6b:8d:
1e:fc:e9:2d:02:24:81:d9:b8:b3:ab:49:70:09:30:0d:6e:58:
5c:81:d3:ea:75:a4:ff:fe:4c:64:f6:13:99:6f:8c:e7:e0:10:
cb:82:21:95:01:80:ac:6c:1b:bd:fa:02:cd:e0:dc:ee:2d:84:
89:ba:97:18:4d:c2:be:15:5f:c2:17:ef:78:30:91:d5:72:e0:
1a:7a:e9:15:7a:3f:be:fd:be:b4:c1:2e:e8:64:19:f7:8a:a9:
33:1b:0a:2d:48:ce:f8:25:a8:0f:22:e2:53:92:b3:7a:aa:f1:
3e:1e:44:4d:96:71:75:d6:72:a9:c7:a8:df:f8:c4:16:5e:2f:
af:42:4b:3d:75:be:a8:ef:2d:d8:45:8c:fc:51:3f:fb:ea:05:
a3:98:e0:6a:dd:f6:9f:44:57:0e:ca:22:53:97:52:2e:4f:e9:
a0:0e:16:c4:14:01:b2:f4:37:bd:82:35:49:01:83:f7:77:59:
ed:7f:b1:7f:96:f3:66:3b:59:33:f3:c8:ad:0f:8f:38:2c:23:
e6:17:02:ee:1e:35:41:9d:a3:cb:5a:22:36:b6:ef:65:a1:f5:
bd:31:f3:88:04:27:46:47:1a:9d:ed:b9:b4:58:e6:cf:eb:b2:
dc:a1:97:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:34:10 2026 by rpki-client