Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
File: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft (raw, json)
Hash identifier: ppQK1HRudDnStIPYiT1seJroQEwAyOMYhSaZ5qQIyc0=
Subject key identifier: 5C:86:E9:62:42:13:32:43:77:3D:D5:9E:0A:57:EE:F3:2F:35:7B:8B
Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
Certificate issuer: /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Certificate serial: 019FAD51B0A7DFAFE7413017FDEEC0AEF01A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
Manifest number: 1967
Signing time: Wed 29 Jul 2026 10:00:39 +0000
Manifest this update: Wed 29 Jul 2026 10:00:39 +0000
Manifest next update: Thu 30 Jul 2026 10:00:39 +0000
Files and hashes: 1: 8Lq3lIQ57V2x5XRAthwXhjdfPZ0.roa (hash: 11Z2xFuTQAhf/AKwmMmwrf1P3F5XfEX9AMFlRSFk2p4=)
2: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl (hash: asjEN70kbpScmH7ocR7ZcpgAT+ANb/h+cV0RY7jPi4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:b0:a7:df:af:e7:41:30:17:fd:ee:c0:ae:f0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Validity
Not Before: Jul 29 10:00:39 2026 GMT
Not After : Jul 30 10:00:39 2026 GMT
Subject: CN=5c86e96242133243773dd59e0a57eef32f357b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:83:9d:34:47:69:63:b5:9d:e3:0a:a1:c6:
c8:08:89:7f:a1:31:37:12:ae:54:2a:da:86:26:ed:
12:48:b3:53:d9:32:50:e6:50:80:2d:aa:50:5c:43:
37:99:29:55:1d:a6:70:2c:fa:ef:33:48:92:e7:2e:
84:6f:8b:cc:0a:73:bc:f3:c8:f9:e9:ec:4e:93:11:
7e:d7:87:e3:bb:c6:3e:3e:da:ca:b2:e8:e7:04:ac:
e4:ec:27:2e:5c:05:f4:69:04:14:8c:c5:24:17:c1:
54:97:34:f9:01:be:18:6e:2a:b6:6b:de:56:ef:36:
61:97:d6:87:ed:1e:c0:e1:4e:ae:5b:13:02:77:8a:
53:2e:e4:d6:b0:e3:ef:d6:a6:99:ee:84:b3:e2:52:
2f:d2:0f:da:4c:63:fa:ba:da:80:6c:41:89:58:7b:
ec:62:47:79:bc:a6:98:73:81:ba:4b:2a:fb:2d:fb:
fb:1e:72:31:f7:71:c0:ec:b3:c6:81:d3:ce:cb:73:
a8:aa:c0:f8:78:f3:f5:d4:3a:44:0f:f8:f0:e2:b1:
47:e4:e9:37:f1:f8:92:cb:8d:67:97:6f:04:19:45:
09:52:da:e9:da:63:cf:99:bc:8c:89:ab:92:f1:d9:
3a:bb:84:46:82:5a:db:6a:b0:81:a8:10:27:e6:32:
5b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:86:E9:62:42:13:32:43:77:3D:D5:9E:0A:57:EE:F3:2F:35:7B:8B
X509v3 Authority Key Identifier:
keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d4:ec:43:12:cc:ea:33:26:73:9e:d9:29:79:55:a1:27:d9:
f8:24:e7:fc:d1:30:11:80:31:4a:f4:c6:eb:94:38:24:ee:dd:
4a:0e:86:c0:b3:93:59:5e:1f:7d:e5:6e:12:0f:45:69:49:e3:
0a:60:51:27:7b:e9:80:f6:e1:e5:60:d2:b2:51:f9:6d:d1:f3:
b7:c5:34:5d:c7:5c:34:8f:7d:6e:1a:3a:de:99:41:c3:52:c7:
5d:a6:4a:3d:db:6d:d7:71:1b:90:78:81:41:c5:69:dd:2d:f2:
18:3c:2d:e8:aa:c5:2c:95:da:83:4b:49:be:6c:da:20:b8:1f:
58:e2:00:0c:91:f5:56:9b:b7:18:b8:e3:c0:91:70:35:f3:1d:
6c:61:7d:ec:a1:30:62:c2:f7:dc:de:8e:5e:60:65:f3:ac:75:
2e:b7:c1:e3:4c:9e:21:c7:2b:cb:56:07:f1:cd:07:24:1a:cd:
81:c5:b5:91:f3:d4:66:0d:b0:17:2b:51:a6:fe:12:ed:f9:77:
1d:c9:5c:97:16:c1:b4:4d:4e:a6:6c:c7:a5:29:b4:20:0e:9e:
00:56:96:9c:5f:0c:5a:d5:de:44:a3:df:1b:58:5d:db:ad:25:
11:d8:2e:23:62:b6:a8:5a:af:1e:6a:14:bc:62:a3:7b:69:55:
47:3d:15:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:01:56 2026 by rpki-client