Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
File: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft (raw, json)
Hash identifier: C7UtDEKLmoT1BUED7/NK2b2A6aO0DUxvj/s9l+GS0sg=
Subject key identifier: A0:18:06:B5:1C:02:76:76:12:FB:C2:CC:FD:8E:96:8F:54:EE:41:16
Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
Certificate issuer: /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Certificate serial: 019D9A3DF2C0323A7E60A2ABACF71E810F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
Manifest number: 1854
Signing time: Fri 17 Apr 2026 07:00:44 +0000
Manifest this update: Fri 17 Apr 2026 07:00:44 +0000
Manifest next update: Sat 18 Apr 2026 07:00:44 +0000
Files and hashes: 1: 8Lq3lIQ57V2x5XRAthwXhjdfPZ0.roa (hash: 11Z2xFuTQAhf/AKwmMmwrf1P3F5XfEX9AMFlRSFk2p4=)
2: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl (hash: w/vIVruKlcvX1qliD55lMWN3vZiI9KfSNfH0EZTLKPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:f2:c0:32:3a:7e:60:a2:ab:ac:f7:1e:81:0f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Validity
Not Before: Apr 17 07:00:44 2026 GMT
Not After : Apr 18 07:00:44 2026 GMT
Subject: CN=a01806b51c02767612fbc2ccfd8e968f54ee4116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:87:2f:0f:4b:9c:47:86:24:b7:2c:e7:0b:67:
07:d3:a8:91:83:f7:3b:79:bf:a2:8b:aa:98:ba:6e:
66:dc:8d:43:1f:2e:90:84:d8:28:41:da:97:c3:a4:
f7:16:22:6c:ec:0c:05:43:ad:bd:66:26:71:df:60:
10:3b:4b:05:a6:3d:cc:dd:a4:00:ab:fa:cf:46:81:
71:b4:14:3f:9c:98:d2:17:3e:64:4a:fd:86:7e:60:
24:9e:8c:fd:fd:a4:65:e1:0c:bf:bc:c3:14:0c:02:
05:cf:1f:92:ed:fc:89:14:df:1e:85:64:de:eb:85:
5c:76:35:c7:8f:20:3d:35:e0:7c:ce:8e:9f:ce:f7:
e3:28:0d:63:b2:06:34:f0:46:7e:23:24:70:33:24:
8d:2b:16:5d:7c:2f:b5:d9:15:09:5b:94:98:57:76:
1f:53:92:6a:4d:f1:7c:5f:a6:33:81:b9:57:18:07:
65:08:db:2c:81:20:0c:fe:e7:d0:00:61:6c:ad:37:
59:1a:62:82:e4:b2:e7:5c:98:e1:b4:51:f4:c5:a9:
08:d1:77:a5:94:16:de:00:ce:43:db:6a:f5:af:48:
05:2d:22:1f:b4:eb:34:7a:16:77:41:e9:b0:c4:c7:
21:13:b5:17:43:6c:a0:33:71:89:ba:ba:50:f3:d1:
d2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:18:06:B5:1C:02:76:76:12:FB:C2:CC:FD:8E:96:8F:54:EE:41:16
X509v3 Authority Key Identifier:
keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e8:b4:bd:85:d0:d6:cc:03:f4:a0:7b:27:aa:1a:c4:7d:af:
c6:61:f1:b3:ee:7b:e9:42:f8:e0:57:08:91:46:43:4d:bd:0f:
59:1f:8c:37:4a:a5:62:2e:8f:07:fc:a9:57:ba:a3:3c:5d:66:
cc:3c:99:e7:1d:6d:7c:39:d1:53:00:f9:fa:c0:61:6d:69:21:
61:ae:ef:a1:17:8d:43:22:16:29:0f:59:2d:e5:54:be:39:de:
c7:e2:ad:08:7c:23:6d:1b:66:a1:aa:93:02:cf:85:78:58:4c:
8b:fd:f9:4a:03:d1:a7:28:b4:39:f7:5e:02:bf:0b:c0:26:cc:
c6:c7:5a:40:1f:03:54:79:c6:09:11:4d:63:a4:81:93:7f:b7:
a4:a5:ee:90:a3:d6:18:a1:a6:36:97:cf:a5:fc:72:d1:ef:1f:
39:17:c6:3b:96:56:d9:80:1e:a8:96:8c:4c:6a:cf:54:6f:dd:
65:8c:d1:93:71:49:2e:a7:fd:b3:56:e2:9d:92:d6:f1:57:67:
92:5a:73:aa:4b:35:0d:4f:ab:37:0c:22:5e:b8:65:6c:d9:06:
93:ae:69:fc:6a:5c:0e:51:c7:4a:ac:83:cd:9f:9a:77:8d:1c:
bd:0a:7c:f4:b2:bd:0f:3c:23:b7:e1:11:9d:25:81:75:c8:70:
71:ed:36:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:09:44 2026 by rpki-client