Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
File: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft (raw, json)
Hash identifier: QXiZL3G2kFsEIqZfB45YpOy9kqtQM5zGmPPZct+m/hY=
Subject key identifier: B0:2F:19:92:6F:6D:C1:DA:A5:E2:19:37:4B:60:C6:21:47:FC:EC:F7
Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
Certificate issuer: /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Certificate serial: 019CACB52F1B55426A7C2CA54D8149C900E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
Manifest number: 17D9
Signing time: Mon 02 Mar 2026 04:01:21 +0000
Manifest this update: Mon 02 Mar 2026 04:01:21 +0000
Manifest next update: Tue 03 Mar 2026 04:01:21 +0000
Files and hashes: 1: 8Lq3lIQ57V2x5XRAthwXhjdfPZ0.roa (hash: 11Z2xFuTQAhf/AKwmMmwrf1P3F5XfEX9AMFlRSFk2p4=)
2: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl (hash: 3eYN5LUIq+zh9qV0XshwvRO+5PkPKLFWh+tBiUBAAHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:2f:1b:55:42:6a:7c:2c:a5:4d:81:49:c9:00:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Validity
Not Before: Mar 2 04:01:21 2026 GMT
Not After : Mar 3 04:01:21 2026 GMT
Subject: CN=b02f19926f6dc1daa5e219374b60c62147fcecf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9a:0f:84:46:e7:50:9a:e5:64:c9:32:4d:74:
1f:39:68:75:32:97:52:b8:93:3f:52:4e:8f:35:91:
d1:fc:83:a3:a6:f1:f9:8a:68:f4:a2:8a:05:2c:3f:
dc:87:a1:aa:d4:33:a1:ff:fe:27:4a:b7:9f:aa:d7:
89:5a:a7:0a:6c:59:b7:db:86:a9:f9:a6:33:68:29:
d0:73:06:f8:90:f9:4f:ce:aa:6a:3a:a4:36:f0:08:
51:71:d2:58:38:e2:ee:c7:a0:83:c8:cb:cd:14:64:
ea:af:ff:95:01:0b:8e:67:86:0b:08:03:df:ea:57:
15:f2:71:20:e3:80:9c:e6:2d:95:2c:6f:d0:c7:1f:
bf:9e:f7:4a:47:be:fc:43:90:0a:3c:b1:a6:7c:b1:
b0:ff:54:67:df:87:12:72:6d:03:8e:bd:5f:37:1b:
a0:9d:6f:3d:ba:36:c4:49:7d:8b:7b:90:af:d4:81:
7e:af:cd:2c:74:0b:86:32:7a:9a:20:3b:9a:bb:85:
f3:ca:4d:e0:c4:d1:1f:c1:3e:c8:2e:e4:58:96:70:
50:54:f0:81:3e:5a:c9:cc:e3:14:6d:bb:7e:f6:03:
82:bd:75:40:b6:fe:0d:b1:9b:c0:96:b9:31:eb:64:
e9:ca:8a:fa:e9:3e:b1:c7:43:9d:48:50:04:44:47:
6a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2F:19:92:6F:6D:C1:DA:A5:E2:19:37:4B:60:C6:21:47:FC:EC:F7
X509v3 Authority Key Identifier:
keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:fc:c5:c3:b9:19:34:13:fd:c9:39:a6:f9:85:18:a8:78:ee:
63:70:fb:d3:25:42:6d:7a:64:0f:32:9b:4c:07:3e:f7:1b:20:
f8:81:d3:26:8f:46:e9:4a:8a:47:ec:74:61:1e:58:78:a8:c3:
f1:8e:77:d9:a8:94:b4:22:de:fe:65:29:58:84:b2:15:4a:69:
f5:b1:3f:16:1a:b6:73:e5:b4:b5:01:a0:9e:44:77:41:eb:d6:
05:45:63:4c:22:b5:57:e2:b2:77:c0:c7:ff:c9:cb:eb:85:73:
40:ec:69:1e:9a:66:04:6a:ab:31:81:a0:54:e9:a7:71:ed:9e:
e4:1a:ac:80:6b:12:b5:fb:93:3b:cf:42:4f:9f:2a:87:fb:b6:
fe:56:28:6b:c0:67:f5:35:cc:1e:a7:f8:33:6a:6b:01:65:62:
88:57:c2:c8:a2:3e:8b:a1:89:1e:07:1e:c6:cd:28:7b:10:3b:
ae:33:d5:40:b3:31:be:02:b5:18:44:b8:8e:35:c1:e0:f1:9f:
70:0a:bc:2d:c9:a5:c4:cb:2a:de:dc:d5:e8:63:5c:49:5e:ee:
d2:0e:1b:f4:b1:16:40:5c:be:4c:d0:58:b1:35:5a:ab:d0:23:
3c:51:c6:02:a6:9c:10:df:d0:c6:8e:df:bc:dd:8e:21:77:36:
2e:4a:ab:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystS8bVUJqfCylTYFJyQDmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MTEyNjRiYjllNGU2ZmE5OTQ0OWVlNDU2YzVkMDUzZjNh
ZDAxYzUwHhcNMjYwMzAyMDQwMTIxWhcNMjYwMzAzMDQwMTIxWjAzMTEwLwYDVQQD
EyhiMDJmMTk5MjZmNmRjMWRhYTVlMjE5Mzc0YjYwYzYyMTQ3ZmNlY2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JoPhEbnUJrlZMkyTXQfOWh1MpdS
uJM/Uk6PNZHR/IOjpvH5imj0oooFLD/ch6Gq1DOh//4nSrefqteJWqcKbFm324ap
+aYzaCnQcwb4kPlPzqpqOqQ28AhRcdJYOOLux6CDyMvNFGTqr/+VAQuOZ4YLCAPf
6lcV8nEg44Cc5i2VLG/Qxx+/nvdKR778Q5AKPLGmfLGw/1Rn34cScm0Djr1fNxug
nW89ujbESX2Le5Cv1IF+r80sdAuGMnqaIDuau4Xzyk3gxNEfwT7ILuRYlnBQVPCB
PlrJzOMUbbt+9gOCvXVAtv4NsZvAlrkx62Tpyor66T6xx0OdSFAEREdqqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAvGZJvbcHapeIZN0tgxiFH/Oz3MB8GA1UdIwQY
MBaAFJYRJku55Ob6mUSe5FbF0FPzrQHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGhFbVM3bms1dnFaUko3a1ZzWFFVX090QWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82MGU5YTAtYzljMS00MWU5LTg5ZmMt
MjRiNjc2YjU2NzgzLzEvbGhFbVM3bms1dnFaUko3a1ZzWFFVX090QWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS82MGU5YTAtYzljMS00MWU5LTg5ZmMtMjRiNjc2YjU2Nzgz
LzEvbGhFbVM3bms1dnFaUko3a1ZzWFFVX090QWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB/zFw7kZ
NBP9yTmm+YUYqHjuY3D70yVCbXpkDzKbTAc+9xsg+IHTJo9G6UqKR+x0YR5YeKjD
8Y532aiUtCLe/mUpWISyFUpp9bE/Fhq2c+W0tQGgnkR3QevWBUVjTCK1V+Kyd8DH
/8nL64VzQOxpHppmBGqrMYGgVOmnce2e5BqsgGsStfuTO89CT58qh/u2/lYoa8Bn
9TXMHqf4M2prAWViiFfCyKI+i6GJHgcexs0oexA7rjPVQLMxvgK1GES4jjXB4PGf
cAq8LcmlxMsq3tzV6GNcSV7u0g4b9LEWQFy+TNBYsTVaq9AjPFHGAqacEN/Qxo7f
vN2OIXc2LkqrBw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:39:59 2026 by rpki-client