Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft
File: lHEhWA7QLt309eWofTfgF7Mt9xs.mft (raw, json)
Hash identifier: BUcicd38jkx/YeNbsATw57NOqNxF1Sdo4KFZN3TyFdI=
Subject key identifier: 19:7E:E0:61:F7:24:89:DC:8D:51:1B:F7:7D:48:C3:77:35:CA:C5:63
Authority key identifier: 94:71:21:58:0E:D0:2E:DD:F4:F5:E5:A8:7D:37:E0:17:B3:2D:F7:1B
Certificate issuer: /CN=947121580ed02eddf4f5e5a87d37e017b32df71b
Certificate serial: 019CA9B3FF9A9FA2F6184C70E6B7298416A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 14:01:11 +0000
Manifest this update: Sun 01 Mar 2026 14:01:11 +0000
Manifest next update: Mon 02 Mar 2026 14:01:11 +0000
Files and hashes: 1: lHEhWA7QLt309eWofTfgF7Mt9xs.crl (hash: bCy30j/sajln9I5KS/OKGuAD9yT44oAIxp1kNPrNdL8=)
2: xINjkJL8qvMAVDbIJ4LyV80MllA.roa (hash: kboYGMyjJk+EgYXIB3KXdvFsdQ20CMBg3E1UOGt17HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:ff:9a:9f:a2:f6:18:4c:70:e6:b7:29:84:16:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947121580ed02eddf4f5e5a87d37e017b32df71b
Validity
Not Before: Mar 1 14:01:11 2026 GMT
Not After : Mar 2 14:01:11 2026 GMT
Subject: CN=197ee061f72489dc8d511bf77d48c37735cac563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ab:8c:88:27:b5:58:2e:df:ef:32:e0:65:e5:
b7:53:30:10:77:60:6f:2a:5b:f9:dd:e5:17:b9:1b:
15:c0:01:33:61:5d:96:33:cd:3d:e6:1f:92:29:55:
36:18:e0:a1:cf:bb:d1:38:31:a7:7a:84:c4:fd:f9:
29:77:21:1d:f9:54:18:9c:eb:d7:7d:e9:65:08:e6:
8f:05:aa:73:41:37:ab:1b:77:cb:4f:31:aa:b7:4f:
dc:c8:c8:b3:03:40:a3:ed:9d:53:72:b1:b4:d8:bf:
67:dd:81:96:75:47:74:02:54:6a:4a:12:8f:50:74:
ba:5d:ad:51:24:52:dc:1c:a7:11:d6:c1:43:23:2f:
00:bc:e2:b6:69:a1:81:c1:3c:21:d4:1a:bb:89:89:
54:af:cf:69:c1:c7:be:48:33:44:de:9a:22:6c:83:
b6:b8:f4:99:70:fc:75:b4:bd:d5:59:f4:7b:6c:d8:
a5:9c:5f:e2:8a:a9:c4:9f:f8:38:0c:d9:78:89:b9:
a9:e9:db:44:04:55:5a:a6:86:d3:6f:9a:e2:7d:b1:
12:be:fd:e1:a4:69:2c:cc:af:d9:7b:a8:d7:e8:8f:
50:29:7b:c7:cd:d8:ed:ec:df:81:29:3c:d1:74:76:
a3:69:50:d1:2f:b0:3f:80:3a:43:21:cc:71:dc:3e:
82:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7E:E0:61:F7:24:89:DC:8D:51:1B:F7:7D:48:C3:77:35:CA:C5:63
X509v3 Authority Key Identifier:
keyid:94:71:21:58:0E:D0:2E:DD:F4:F5:E5:A8:7D:37:E0:17:B3:2D:F7:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:76:54:87:53:8b:b0:dc:ec:c2:84:0d:26:1f:71:a6:34:ab:
6e:dd:78:a1:57:ac:d5:62:ec:3c:cc:ca:29:02:de:cb:43:78:
a7:da:71:cc:70:5d:d4:13:d8:5a:c1:50:c4:20:b3:3c:ec:14:
ab:05:c6:65:a5:b9:cb:e8:fb:94:10:f9:72:a1:80:7a:e0:f7:
3c:df:52:db:33:56:8d:fc:cf:ee:a9:bc:61:52:2b:a3:65:b7:
c7:4a:64:b2:c8:03:63:e2:0e:3f:89:b9:5e:ce:6f:2e:0e:1f:
69:cd:43:bb:de:a1:b0:46:0c:1f:21:4f:80:78:50:78:f2:28:
c0:34:06:5f:d9:85:c7:cb:4f:0c:8b:87:b4:8e:7d:7d:e9:91:
7d:bf:93:27:52:76:49:57:93:cb:6c:77:31:60:00:0f:81:4c:
b9:af:b7:1b:fc:0c:de:f6:3f:9d:6d:24:6c:d0:4e:89:7f:dd:
d4:67:37:f9:8a:02:fc:4c:4d:c1:18:a1:b2:cf:20:72:7e:a1:
42:ad:1c:a0:89:43:34:89:69:77:1c:5c:2f:af:db:a9:b8:e5:
89:bd:13:62:80:4a:b4:67:38:74:cc:30:b3:78:75:ce:a4:f7:
ff:12:ab:10:f2:d7:5a:47:fb:dd:e0:0b:02:6c:dc:0d:2b:f3:
76:7d:e7:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps/+an6L2GExw5rcphBaoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NzEyMTU4MGVkMDJlZGRmNGY1ZTVhODdkMzdlMDE3YjMy
ZGY3MWIwHhcNMjYwMzAxMTQwMTExWhcNMjYwMzAyMTQwMTExWjAzMTEwLwYDVQQD
EygxOTdlZTA2MWY3MjQ4OWRjOGQ1MTFiZjc3ZDQ4YzM3NzM1Y2FjNTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5auMiCe1WC7f7zLgZeW3UzAQd2Bv
Klv53eUXuRsVwAEzYV2WM8095h+SKVU2GOChz7vRODGneoTE/fkpdyEd+VQYnOvX
fellCOaPBapzQTerG3fLTzGqt0/cyMizA0Cj7Z1TcrG02L9n3YGWdUd0AlRqShKP
UHS6Xa1RJFLcHKcR1sFDIy8AvOK2aaGBwTwh1Bq7iYlUr89pwce+SDNE3poibIO2
uPSZcPx1tL3VWfR7bNilnF/iiqnEn/g4DNl4ibmp6dtEBFVapobTb5rifbESvv3h
pGkszK/Ze6jX6I9QKXvHzdjt7N+BKTzRdHajaVDRL7A/gDpDIcxx3D6CTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBl+4GH3JIncjVEb931Iw3c1ysVjMB8GA1UdIwQY
MBaAFJRxIVgO0C7d9PXlqH034BezLfcbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEhFaFdBN1FMdDMwOWVXb2ZUZmdGN010OXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83OWM1YmItNjE5ZC00YmViLTg2NDkt
YTJmNDI1NjAwZGIzLzEvbEhFaFdBN1FMdDMwOWVXb2ZUZmdGN010OXhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS83OWM1YmItNjE5ZC00YmViLTg2NDktYTJmNDI1NjAwZGIz
LzEvbEhFaFdBN1FMdDMwOWVXb2ZUZmdGN010OXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl3ZUh1OL
sNzswoQNJh9xpjSrbt14oVes1WLsPMzKKQLey0N4p9pxzHBd1BPYWsFQxCCzPOwU
qwXGZaW5y+j7lBD5cqGAeuD3PN9S2zNWjfzP7qm8YVIro2W3x0pkssgDY+IOP4m5
Xs5vLg4fac1Du96hsEYMHyFPgHhQePIowDQGX9mFx8tPDIuHtI59femRfb+TJ1J2
SVeTy2x3MWAAD4FMua+3G/wM3vY/nW0kbNBOiX/d1Gc3+YoC/ExNwRihss8gcn6h
Qq0coIlDNIlpdxxcL6/bqbjlib0TYoBKtGc4dMwws3h1zqT3/xKrEPLXWkf73eAL
AmzcDSvzdn3nkw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:07 2026 by rpki-client