Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
File: lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json)
Hash identifier: FHcD4CmwB4fajjzhIvwBGOJ07O+nbdh6Jdz9a2fDLaU=
Subject key identifier: F3:84:01:5F:07:16:FC:29:84:B1:DD:85:D7:45:85:E0:CB:49:5D:53
Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Certificate serial: 019CABA2100375AC4C26BADA186235627198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
Manifest number: 0B66
Signing time: Sun 01 Mar 2026 23:00:50 +0000
Manifest this update: Sun 01 Mar 2026 23:00:50 +0000
Manifest next update: Mon 02 Mar 2026 23:00:50 +0000
Files and hashes: 1: Hw97gFeq9kX_yGiriy5YWSviL7I.roa (hash: geBLQXUNVCDp1lRH1gHpPHwudjQBTslh6GIdsZoKBSA=)
2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: YdWzHXm6mBU68Mvp5nDB4e/cxI13DKfQHCeRx6UU/s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:10:03:75:ac:4c:26:ba:da:18:62:35:62:71:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Validity
Not Before: Mar 1 23:00:50 2026 GMT
Not After : Mar 2 23:00:50 2026 GMT
Subject: CN=f384015f0716fc2984b1dd85d74585e0cb495d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:70:65:7b:42:43:f7:ec:a9:dd:61:52:79:2f:
71:a6:46:9f:b0:4b:69:43:83:0e:7e:c4:58:a7:aa:
e9:7f:0a:90:79:66:10:e1:2a:7b:34:ab:3a:82:41:
36:69:63:32:1c:cb:e9:79:18:49:10:9a:ff:57:75:
e1:fb:ce:1f:bf:83:9d:32:2e:c4:2c:d2:0d:1a:f8:
fd:23:c7:c8:26:4d:31:04:48:73:2d:42:0c:20:50:
e0:06:dd:04:61:21:b9:7c:0e:88:de:0d:ea:5c:78:
6b:8d:3d:f5:c4:eb:38:61:a5:60:59:bf:a6:e2:42:
68:16:7b:b5:ec:2c:22:c4:11:cb:ab:fd:cb:4b:f4:
2d:68:e8:36:8e:ed:e0:54:21:92:a5:ea:6b:a9:4b:
09:3f:93:3d:72:a1:60:94:87:70:0b:a0:ae:cf:9c:
63:c5:9c:69:bb:5a:ff:2b:76:75:21:d2:cf:c7:72:
ca:ed:38:90:46:20:99:a5:48:95:b6:47:3b:29:76:
d2:6b:0e:ad:28:16:f1:80:f6:90:94:d3:43:d6:57:
79:72:8f:f5:04:57:3b:ce:36:67:3a:72:5a:30:27:
04:0e:d6:14:b2:76:c4:47:b3:84:80:4e:17:ac:43:
7f:ad:52:91:f0:84:61:00:4d:98:fa:cf:58:ba:88:
e4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:84:01:5F:07:16:FC:29:84:B1:DD:85:D7:45:85:E0:CB:49:5D:53
X509v3 Authority Key Identifier:
keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a1:69:79:ec:2c:57:b9:54:1f:c7:b1:e6:e6:5b:2f:c7:8a:
c8:e9:1c:af:a5:04:76:8d:fc:7c:ff:1d:3f:4d:75:8d:1b:97:
a7:fb:25:7a:a8:32:d0:0c:47:ac:52:33:ba:97:e1:bf:34:41:
76:2d:17:5c:0c:ec:a3:da:2b:29:60:ad:00:49:06:b1:d0:1b:
0e:18:19:2e:44:bd:6e:12:c8:71:dc:c6:33:22:5f:f8:c5:6c:
cb:dc:a6:bc:57:47:17:80:8f:ab:db:ce:b0:11:9f:f0:c3:39:
aa:c8:2c:92:cf:da:47:c5:fa:8f:20:ce:e8:02:43:33:34:94:
29:1b:52:78:ac:ed:89:d5:7c:a9:20:9a:64:02:cc:44:fc:d7:
18:32:82:d2:2c:c7:8c:03:4b:de:b2:df:ac:49:4d:65:1e:9f:
4e:a1:3e:c7:2f:04:08:45:70:fc:96:de:49:90:93:b8:11:5b:
ea:98:6c:b0:f9:1b:65:bc:37:50:e8:7d:17:33:b4:91:c1:27:
d9:c1:ac:36:b2:74:68:78:79:5b:b3:95:d9:15:38:0a:eb:4d:
fc:56:c6:62:13:58:a1:b5:65:7d:e6:c7:d4:7c:25:6c:c9:ac:
72:80:09:54:d5:b0:9e:2d:42:05:c1:c3:4f:d9:42:8b:76:50:
b4:a5:81:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrohADdaxMJrraGGI1YnGYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MTI0ZjI1MjQ2YTU0MDlmYmVlMTFiNTM3MmRkOGJlMjRj
NmU5ZWIwHhcNMjYwMzAxMjMwMDUwWhcNMjYwMzAyMjMwMDUwWjAzMTEwLwYDVQQD
EyhmMzg0MDE1ZjA3MTZmYzI5ODRiMWRkODVkNzQ1ODVlMGNiNDk1ZDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunBle0JD9+yp3WFSeS9xpkafsEtp
Q4MOfsRYp6rpfwqQeWYQ4Sp7NKs6gkE2aWMyHMvpeRhJEJr/V3Xh+84fv4OdMi7E
LNINGvj9I8fIJk0xBEhzLUIMIFDgBt0EYSG5fA6I3g3qXHhrjT31xOs4YaVgWb+m
4kJoFnu17CwixBHLq/3LS/QtaOg2ju3gVCGSpeprqUsJP5M9cqFglIdwC6Cuz5xj
xZxpu1r/K3Z1IdLPx3LK7TiQRiCZpUiVtkc7KXbSaw6tKBbxgPaQlNND1ld5co/1
BFc7zjZnOnJaMCcEDtYUsnbER7OEgE4XrEN/rVKR8IRhAE2Y+s9YuojkWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOEAV8HFvwphLHdhddFheDLSV1TMB8GA1UdIwQY
MBaAFJYSTyUkalQJ++4RtTct2L4kxunrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8xNGI1OGQtYTFhMy00NmMxLWFjNjIt
OGVlZmI5NTJkOGMxLzEvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8xNGI1OGQtYTFhMy00NmMxLWFjNjItOGVlZmI5NTJkOGMx
LzEvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlqFpeews
V7lUH8ex5uZbL8eKyOkcr6UEdo38fP8dP011jRuXp/sleqgy0AxHrFIzupfhvzRB
di0XXAzso9orKWCtAEkGsdAbDhgZLkS9bhLIcdzGMyJf+MVsy9ymvFdHF4CPq9vO
sBGf8MM5qsgsks/aR8X6jyDO6AJDMzSUKRtSeKztidV8qSCaZALMRPzXGDKC0izH
jANL3rLfrElNZR6fTqE+xy8ECEVw/JbeSZCTuBFb6phssPkbZbw3UOh9FzO0kcEn
2cGsNrJ0aHh5W7OV2RU4CutN/FbGYhNYobVlfebH1HwlbMmscoAJVNWwni1CBcHD
T9lCi3ZQtKWBoA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:19 2026 by rpki-client