Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.mft
File: lh80Y53Jb_GEYziBzXBzrjGf4to.mft (raw, json)
Hash identifier: C1nCVVagegyQczYh+2Qz5XlyHXmsYDeyholhAk1C2Vo=
Subject key identifier: D8:16:71:02:99:AC:D5:60:01:2E:83:56:E3:0B:F0:5A:9E:38:7C:26
Authority key identifier: 96:1F:34:63:9D:C9:6F:F1:84:63:38:81:CD:70:73:AE:31:9F:E2:DA
Certificate issuer: /CN=961f34639dc96ff184633881cd7073ae319fe2da
Certificate serial: 019D9B87C89F9760A42004BF4DDA6BAA1702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lh80Y53Jb_GEYziBzXBzrjGf4to.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.mft
Manifest number: 55
Signing time: Fri 17 Apr 2026 13:01:00 +0000
Manifest this update: Fri 17 Apr 2026 13:01:00 +0000
Manifest next update: Sat 18 Apr 2026 13:01:00 +0000
Files and hashes: 1: kjCR_bdCRqh1misX4Uz-yIyS1po.asa (hash: 82A011Hf6oJtQgxOAq1FBWNeCl3xvpnApBB5CdfqWUg=)
2: lh80Y53Jb_GEYziBzXBzrjGf4to.crl (hash: Xa3Vf2VsVvWHDiMrFYtxoY9Oh7+KzLspp0qt10e/8FE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.mft
rsync://rpki.ripe.net/repository/DEFAULT/lh80Y53Jb_GEYziBzXBzrjGf4to.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:c8:9f:97:60:a4:20:04:bf:4d:da:6b:aa:17:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961f34639dc96ff184633881cd7073ae319fe2da
Validity
Not Before: Apr 17 13:01:00 2026 GMT
Not After : Apr 18 13:01:00 2026 GMT
Subject: CN=d816710299acd560012e8356e30bf05a9e387c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:44:5c:85:a1:8b:a3:82:d7:0b:b0:00:12:
a9:db:30:15:f0:88:59:c8:5f:9a:4a:9e:2b:48:50:
eb:fb:79:cb:ac:bc:02:9c:67:bb:07:96:ae:74:f1:
5f:07:8a:aa:92:05:75:02:e3:f1:89:72:5d:ae:d0:
52:b5:60:2e:11:ad:76:25:62:78:e1:49:cc:09:18:
fa:40:fc:cd:73:1f:08:a3:95:5e:56:50:89:8d:1b:
7d:c8:af:13:1d:78:6d:20:4e:f4:5c:82:e6:bc:88:
a7:ae:7c:56:06:bc:86:52:10:5c:c9:24:cc:b7:43:
28:57:69:86:9a:9f:fe:61:81:11:93:e2:c1:f0:ad:
14:4e:0e:b8:69:7a:c0:34:a1:fb:2e:1b:21:1d:8d:
00:65:30:ee:b3:f0:98:b4:13:ba:97:52:c9:8e:12:
54:dd:b2:54:fb:16:71:12:56:a0:4a:b8:48:5a:6a:
cc:14:a0:33:92:68:9d:f7:6b:7c:04:ad:05:ae:d8:
3c:83:fd:e8:80:23:8c:12:77:c3:4b:dc:e0:5a:32:
a3:92:7c:40:ba:26:b7:ce:70:7f:9d:2b:8f:f9:63:
fa:3f:69:7c:08:93:ef:33:12:67:38:49:29:05:1a:
77:5a:25:90:87:a9:b5:21:b9:78:7a:31:08:3d:d4:
51:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:16:71:02:99:AC:D5:60:01:2E:83:56:E3:0B:F0:5A:9E:38:7C:26
X509v3 Authority Key Identifier:
keyid:96:1F:34:63:9D:C9:6F:F1:84:63:38:81:CD:70:73:AE:31:9F:E2:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lh80Y53Jb_GEYziBzXBzrjGf4to.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/lh80Y53Jb_GEYziBzXBzrjGf4to.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:df:5a:21:69:4c:61:1e:57:cc:11:cc:bd:19:31:c1:7c:d7:
6d:ae:d5:ee:2c:ca:44:eb:e3:22:30:2c:51:bb:75:3c:ca:89:
fe:fc:d6:82:96:b4:f7:af:12:eb:38:e3:56:63:39:da:fa:99:
6a:cd:4e:2e:0b:f1:02:45:6b:b1:f8:17:a4:93:7e:f9:3f:46:
47:2e:cf:3a:ad:13:e7:1e:13:73:e3:70:1c:5a:b8:c3:b1:1e:
2d:5c:b4:a1:d2:68:71:7f:d3:e8:19:27:b0:80:9e:ce:7d:7b:
74:72:ff:74:2c:6e:72:68:7f:39:24:3b:7f:b9:36:ec:0a:9a:
e2:fd:e7:ab:78:7b:eb:ce:d1:6d:61:47:ca:91:af:54:8d:eb:
42:0f:e8:79:c3:e6:e7:d8:11:d2:fd:a2:5a:9d:75:87:2d:8e:
e0:8f:5a:0c:0b:c4:7d:85:47:fa:2d:ee:ef:48:a7:fa:c6:ab:
bd:f1:26:73:2f:5e:f8:f9:bb:3c:a0:27:db:78:26:d5:90:15:
32:c5:2f:a3:73:13:55:75:19:42:4e:6c:58:d0:24:e6:ed:5e:
fd:a0:58:d3:a8:d2:03:0e:c3:1e:84:43:a5:61:49:af:c6:86:
31:f8:1e:cc:55:93:43:35:92:de:e2:cb:74:51:52:83:b6:9f:
dd:af:0a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:13 2026 by rpki-client