Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
File: lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json)
Hash identifier: zW0eK/62yQX7FxmiNMMwkA1hnDiUNCC5jYU71oKbeA4=
Subject key identifier: C5:15:84:61:9A:CE:4E:8C:45:63:2B:0E:A9:40:04:7C:57:28:75:AA
Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Certificate serial: 019D992B0C0B65C40EBD18056941FCD8CEB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
Manifest number: 0BE1
Signing time: Fri 17 Apr 2026 02:00:28 +0000
Manifest this update: Fri 17 Apr 2026 02:00:28 +0000
Manifest next update: Sat 18 Apr 2026 02:00:28 +0000
Files and hashes: 1: Hw97gFeq9kX_yGiriy5YWSviL7I.roa (hash: geBLQXUNVCDp1lRH1gHpPHwudjQBTslh6GIdsZoKBSA=)
2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: KhV/viHLEOo3UBskunbKQBN99A0mT8tZExyYJKec1p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:0c:0b:65:c4:0e:bd:18:05:69:41:fc:d8:ce:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Validity
Not Before: Apr 17 02:00:28 2026 GMT
Not After : Apr 18 02:00:28 2026 GMT
Subject: CN=c51584619ace4e8c45632b0ea940047c572875aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:77:b7:0b:eb:e6:eb:ad:da:2d:7f:c8:64:69:
ae:f4:81:f4:1e:ad:41:ed:89:5f:74:4f:6e:bf:02:
23:49:79:23:aa:4c:43:82:8b:53:d6:ad:67:40:7f:
19:5e:c9:25:cb:fc:07:92:b3:e5:9b:78:bb:b7:f3:
8f:24:1c:2d:46:22:f1:49:a7:aa:7f:3c:95:83:53:
cf:fb:2a:48:9a:96:37:de:5b:f1:54:e0:8f:c0:23:
05:10:fe:9b:e4:7a:09:e8:ca:39:90:af:75:c4:60:
85:15:df:fe:9d:fc:c7:2a:49:27:15:c5:ff:c5:65:
cf:7a:70:01:37:2e:4f:3d:c5:f3:49:b0:28:91:0b:
c0:96:0f:91:73:46:d6:20:1f:5a:d9:dc:93:b6:5e:
a0:08:11:dd:04:32:8f:29:26:f2:ff:8a:e7:a7:06:
e7:6a:b4:4a:75:55:21:d8:7e:3c:6c:c2:2b:57:ff:
86:c3:73:2b:9e:eb:79:a3:ec:f5:18:86:1c:49:a5:
95:cf:2f:cc:83:c5:d4:c5:68:c9:9b:51:c8:1d:51:
cd:f3:2c:bb:cb:45:3e:67:2f:0f:eb:a5:ed:ad:32:
33:63:7d:55:f5:2c:1b:86:22:99:dc:2a:17:f4:d5:
99:ac:ac:95:fd:d9:27:6e:c0:b9:62:98:32:dd:f0:
c1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:15:84:61:9A:CE:4E:8C:45:63:2B:0E:A9:40:04:7C:57:28:75:AA
X509v3 Authority Key Identifier:
keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:29:29:e9:6a:7d:c4:87:73:bd:5f:e3:5d:61:72:c8:c2:50:
22:14:af:f9:23:80:fa:94:d6:ee:88:d2:a0:05:6e:72:d1:1a:
0f:ec:e1:53:4a:ef:a8:0a:b8:86:07:14:fb:cd:96:f3:84:8f:
21:c8:9f:b5:d4:3b:63:af:d2:49:10:65:a5:26:c0:a8:14:b9:
67:14:b5:bd:7e:5e:a8:17:a0:32:7c:2d:c9:62:77:40:3a:f3:
d2:97:b2:1a:7c:5e:c0:53:17:9b:d4:2b:bb:74:a0:21:40:4b:
ff:b6:e0:63:2d:bf:29:52:f8:a1:5f:c1:08:18:e7:41:cd:fd:
34:a6:89:ef:42:e7:b9:ba:d8:c7:f9:cb:13:8f:ac:b1:2a:91:
0f:93:ab:92:85:a2:67:24:71:17:87:dd:19:b4:d7:d9:e3:46:
7b:8a:fd:4c:16:a6:f0:30:4d:97:b4:aa:25:ac:e2:6e:ee:5b:
4f:48:aa:23:b1:64:db:45:7a:b9:95:4d:b1:95:19:1e:63:4c:
65:6d:1e:9e:9a:50:87:cf:9f:07:35:15:b9:6c:94:43:f4:8f:
b8:c3:bf:58:90:cb:6a:06:35:39:f2:9b:27:e6:73:ae:7f:ac:
9d:76:f7:53:cb:68:bf:58:04:7f:34:f6:52:14:54:4d:08:15:
29:8c:eb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:11 2026 by rpki-client