Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft
File: lHEhWA7QLt309eWofTfgF7Mt9xs.mft (raw, json)
Hash identifier: dWest7eLgP9xg3G5c6OcguEv2091H0G1+oxnBwdxvSk=
Subject key identifier: 98:EE:11:D4:0A:B7:8D:59:89:21:06:81:66:BC:9D:83:E1:6A:06:C5
Authority key identifier: 94:71:21:58:0E:D0:2E:DD:F4:F5:E5:A8:7D:37:E0:17:B3:2D:F7:1B
Certificate issuer: /CN=947121580ed02eddf4f5e5a87d37e017b32df71b
Certificate serial: 019D992B192B70749E5A658D3FAADBFD0527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 02:00:31 +0000
Manifest this update: Fri 17 Apr 2026 02:00:31 +0000
Manifest next update: Sat 18 Apr 2026 02:00:31 +0000
Files and hashes: 1: lHEhWA7QLt309eWofTfgF7Mt9xs.crl (hash: Kl8m6laQ+ZJy1/LOBO4Q2FAZ1vR+bH4uQRsFb9Jrvqw=)
2: xINjkJL8qvMAVDbIJ4LyV80MllA.roa (hash: kboYGMyjJk+EgYXIB3KXdvFsdQ20CMBg3E1UOGt17HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:19:2b:70:74:9e:5a:65:8d:3f:aa:db:fd:05:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947121580ed02eddf4f5e5a87d37e017b32df71b
Validity
Not Before: Apr 17 02:00:31 2026 GMT
Not After : Apr 18 02:00:31 2026 GMT
Subject: CN=98ee11d40ab78d598921068166bc9d83e16a06c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e3:ac:33:e1:31:21:f2:ea:af:ad:51:cc:3e:
c0:64:c8:44:1b:d1:67:09:48:18:b6:93:c4:85:23:
3c:70:22:72:0f:b0:c0:67:fb:26:1f:25:61:94:34:
35:5b:6a:1b:2c:5f:9d:7e:ad:14:ae:a0:44:46:8a:
fe:52:25:4c:00:b0:0a:91:64:3f:99:e9:04:98:c9:
db:26:dd:2d:63:ca:34:dc:7f:4a:26:d3:76:4c:51:
53:84:68:5a:c1:41:4a:83:93:1f:d2:38:06:d8:34:
12:f3:11:2e:1e:66:18:32:73:6d:24:cb:ce:d6:7b:
87:45:42:6c:d1:4e:2b:27:90:49:8b:fb:da:30:69:
fa:bb:c5:40:fd:b5:ff:ff:d2:b3:88:38:ef:08:33:
4d:52:1d:a1:0e:8a:05:ef:a2:78:37:38:11:ed:09:
72:0d:4e:a4:86:bd:f9:f3:c6:0f:d8:a3:c5:ea:fa:
4e:f0:a2:30:2c:a3:fb:31:c2:30:a9:8d:fc:70:20:
56:91:2f:17:83:aa:bc:92:80:4f:1e:c0:04:83:72:
42:fa:fb:a0:12:2e:ff:cc:24:34:a9:de:7c:1e:d9:
51:07:84:8f:8e:2a:b7:0b:4f:c5:97:80:0a:43:1d:
fb:a6:a2:43:64:63:76:19:e7:42:9a:d9:45:4e:0b:
90:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EE:11:D4:0A:B7:8D:59:89:21:06:81:66:BC:9D:83:E1:6A:06:C5
X509v3 Authority Key Identifier:
keyid:94:71:21:58:0E:D0:2E:DD:F4:F5:E5:A8:7D:37:E0:17:B3:2D:F7:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHEhWA7QLt309eWofTfgF7Mt9xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/79c5bb-619d-4beb-8649-a2f425600db3/1/lHEhWA7QLt309eWofTfgF7Mt9xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3a:fd:37:6e:21:c7:1d:5a:68:18:c1:40:ac:64:91:f1:c2:
14:8c:b8:8f:30:40:c9:29:83:5e:ed:97:86:9e:f7:8a:8d:50:
f6:e7:6e:38:11:85:8d:00:f3:f5:90:e5:01:ca:18:6c:98:67:
40:e3:6d:ca:f0:f2:a7:cb:59:e4:dc:8b:25:f6:1a:f4:7c:78:
11:35:f1:17:82:f8:a0:f7:6b:38:85:a1:e8:90:8d:f3:93:95:
af:0e:f3:c5:bc:65:6e:2b:97:86:67:f8:88:04:5d:b8:7a:b5:
da:b0:54:3d:f7:ed:45:be:1d:bb:be:2f:7f:a0:30:81:33:06:
f9:0c:f8:7e:b3:4b:72:53:5a:68:db:ad:1e:d7:14:a2:1d:f8:
ad:34:ab:2c:14:96:10:3a:44:33:12:52:e5:b4:d6:76:aa:2d:
76:68:db:fc:ca:72:73:00:06:56:e6:69:d2:93:cf:8e:03:fa:
5b:f8:f5:44:cf:d2:3a:05:a7:6a:90:a7:66:af:1b:44:09:9e:
b9:de:42:cd:82:e3:8d:4b:ec:76:bd:97:0d:aa:c4:73:ba:32:
dd:34:80:69:c4:1c:85:f8:7f:b0:91:be:7c:7d:8a:2e:4a:0b:
e1:5f:9c:37:b5:3f:0a:e9:2a:ff:89:70:30:b5:82:e1:2a:6f:
1d:b1:9e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:03:15 2026 by rpki-client