Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
File: lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json)
Hash identifier: REzNjL6ZjACxwq5+I5Vt4LXfbcFkIXmcC5vUhxnt6Ro=
Subject key identifier: 44:C3:C8:7E:8B:DE:37:86:DF:1C:D2:F4:3E:97:59:27:84:C3:39:BC
Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Certificate serial: 019EC0A3E209D2C3BEA75AEC22174E7A7297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
Manifest number: 0C7A
Signing time: Sat 13 Jun 2026 11:00:26 +0000
Manifest this update: Sat 13 Jun 2026 11:00:26 +0000
Manifest next update: Sun 14 Jun 2026 11:00:26 +0000
Files and hashes: 1: Hw97gFeq9kX_yGiriy5YWSviL7I.roa (hash: geBLQXUNVCDp1lRH1gHpPHwudjQBTslh6GIdsZoKBSA=)
2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: IKTZGDyPNo8XZyvJP1BvWELSIt6148ATpCjXo1QWYEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:e2:09:d2:c3:be:a7:5a:ec:22:17:4e:7a:72:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Validity
Not Before: Jun 13 11:00:26 2026 GMT
Not After : Jun 14 11:00:26 2026 GMT
Subject: CN=44c3c87e8bde3786df1cd2f43e97592784c339bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:14:41:cf:82:06:73:65:74:6f:67:77:34:
e8:7b:86:fc:23:73:85:3f:76:4d:b9:f7:84:f7:48:
32:5a:eb:9f:9b:50:0d:53:45:97:45:38:b8:77:64:
00:4d:1b:05:fb:c9:bd:c3:4c:f5:d1:50:d4:69:13:
1b:4b:6e:76:fa:6a:0c:65:7a:6c:4f:6e:18:b6:5b:
7c:ee:17:81:77:97:8c:6a:99:17:b6:ec:f4:b1:b7:
e4:73:1e:3d:70:1b:70:fa:f0:ba:54:64:96:c1:40:
7e:34:b4:41:c2:bf:93:59:00:19:67:4d:1f:ba:af:
55:45:2c:33:be:8a:f5:50:8a:32:e3:99:7f:46:29:
67:fc:e4:14:46:8d:20:6f:f8:97:4c:b9:7e:44:43:
b8:50:3d:75:46:bd:b8:e4:ec:ff:4e:d2:47:0c:05:
25:b4:c9:46:96:29:98:84:cf:6b:86:0c:5c:49:5e:
9f:1d:86:1e:bd:b5:0c:2c:38:32:e2:37:1f:77:e5:
f9:57:ae:31:c6:db:31:c8:a3:14:54:ce:3c:07:e0:
fb:31:52:d3:12:2f:ca:5e:be:f4:b2:61:c9:38:95:
52:1b:28:a3:a5:7a:37:91:50:dc:d5:c7:a0:00:24:
29:9c:cb:62:c9:f1:e8:2c:84:8a:ba:54:99:bc:50:
37:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C3:C8:7E:8B:DE:37:86:DF:1C:D2:F4:3E:97:59:27:84:C3:39:BC
X509v3 Authority Key Identifier:
keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:59:a7:d9:1a:d8:74:a6:c4:fb:59:b3:40:81:61:fb:87:64:
9a:ba:b6:d7:c5:ce:b6:20:71:ac:c0:ce:bd:1d:88:82:56:37:
a0:9f:a5:27:fb:08:44:f9:0d:f6:e5:9f:0d:5b:16:30:55:d5:
00:57:cd:5a:40:65:67:10:48:85:c3:c4:47:4e:8b:67:c6:d2:
ff:a3:25:02:21:34:04:6a:45:07:b2:b2:8b:f9:96:43:50:4c:
d2:72:c8:ae:fb:09:58:9e:f6:9a:93:b2:53:7d:50:f7:42:ee:
ad:47:93:29:14:55:f9:fa:54:64:7d:fc:16:47:83:7d:18:94:
ac:6e:25:12:84:46:bb:66:de:b7:33:f7:40:9d:4a:9e:31:a9:
7c:c2:20:07:ee:ef:34:8f:ca:49:6f:17:95:c9:ed:5c:78:55:
29:cb:16:92:2e:88:ca:66:05:7d:0c:6d:ed:bf:4f:89:92:2b:
f7:79:0e:69:96:38:08:82:93:5d:99:76:40:c8:97:c2:cc:af:
cb:3c:c7:75:ad:14:7d:5c:6e:1b:09:87:ab:e2:56:3f:0f:aa:
ab:bd:59:87:90:56:eb:93:92:2a:cd:11:c2:21:5e:9b:dc:4f:
a1:e1:17:18:41:e1:3d:38:bc:5c:19:da:49:f7:a1:2c:1d:cd:
8a:98:b3:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Ao+IJ0sO+p1rsIhdOenKXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MTI0ZjI1MjQ2YTU0MDlmYmVlMTFiNTM3MmRkOGJlMjRj
NmU5ZWIwHhcNMjYwNjEzMTEwMDI2WhcNMjYwNjE0MTEwMDI2WjAzMTEwLwYDVQQD
Eyg0NGMzYzg3ZThiZGUzNzg2ZGYxY2QyZjQzZTk3NTkyNzg0YzMzOWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9kUQc+CBnNldG9ndzToe4b8I3OF
P3ZNufeE90gyWuufm1ANU0WXRTi4d2QATRsF+8m9w0z10VDUaRMbS252+moMZXps
T24Ytlt87heBd5eMapkXtuz0sbfkcx49cBtw+vC6VGSWwUB+NLRBwr+TWQAZZ00f
uq9VRSwzvor1UIoy45l/Riln/OQURo0gb/iXTLl+REO4UD11Rr245Oz/TtJHDAUl
tMlGlimYhM9rhgxcSV6fHYYevbUMLDgy4jcfd+X5V64xxtsxyKMUVM48B+D7MVLT
Ei/KXr70smHJOJVSGyijpXo3kVDc1cegACQpnMtiyfHoLISKulSZvFA3hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETDyH6L3jeG3xzS9D6XWSeEwzm8MB8GA1UdIwQY
MBaAFJYSTyUkalQJ++4RtTct2L4kxunrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8xNGI1OGQtYTFhMy00NmMxLWFjNjIt
OGVlZmI5NTJkOGMxLzEvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8xNGI1OGQtYTFhMy00NmMxLWFjNjItOGVlZmI5NTJkOGMx
LzEvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFmn2RrY
dKbE+1mzQIFh+4dkmrq218XOtiBxrMDOvR2IglY3oJ+lJ/sIRPkN9uWfDVsWMFXV
AFfNWkBlZxBIhcPER06LZ8bS/6MlAiE0BGpFB7Kyi/mWQ1BM0nLIrvsJWJ72mpOy
U31Q90LurUeTKRRV+fpUZH38FkeDfRiUrG4lEoRGu2betzP3QJ1KnjGpfMIgB+7v
NI/KSW8XlcntXHhVKcsWki6IymYFfQxt7b9PiZIr93kOaZY4CIKTXZl2QMiXwsyv
yzzHda0UfVxuGwmHq+JWPw+qq71Zh5BW65OSKs0RwiFem9xPoeEXGEHhPTi8XBna
SfehLB3NipizOA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:16:41 2026 by rpki-client