Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
File: lHjtPq1if84WxRgCUMRmIXMY1lw.mft (raw, json)
Hash identifier: 8xPl/56M1UnNawIh/0l668ElO0ZY4ZTuabWuiu0kRrY=
Subject key identifier: EB:22:19:FC:0B:A2:3E:32:CD:5D:A5:A0:98:0D:8C:93:33:79:45:98
Authority key identifier: 94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
Certificate issuer: /CN=9478ed3ead627fce16c5180250c466217318d65c
Certificate serial: 019CACEBA80526393E29B8C03342E86C185E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 05:00:50 +0000
Manifest this update: Mon 02 Mar 2026 05:00:50 +0000
Manifest next update: Tue 03 Mar 2026 05:00:50 +0000
Files and hashes: 1: 3El05iYRSjjsnnMmSgg5UzcIJzI.roa (hash: lu4N0zTDe8PsZfTOKcSd8MPmVfa3fQOGOtCh01kU1Ak=)
2: lHjtPq1if84WxRgCUMRmIXMY1lw.crl (hash: SRKdcpchCXRs4nKwh19IRmmxoyy1/0nelJH/WvU8BNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:a8:05:26:39:3e:29:b8:c0:33:42:e8:6c:18:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9478ed3ead627fce16c5180250c466217318d65c
Validity
Not Before: Mar 2 05:00:50 2026 GMT
Not After : Mar 3 05:00:50 2026 GMT
Subject: CN=eb2219fc0ba23e32cd5da5a0980d8c9333794598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:c4:00:a0:2a:05:1e:61:e0:4f:4e:87:35:
ab:3e:b3:92:61:c5:02:46:0c:db:ec:af:ce:5a:c9:
51:99:9d:3b:ed:e7:56:44:97:a3:9b:e8:46:50:e2:
27:f4:d3:66:ae:d3:45:3a:43:49:2b:8b:ce:dc:73:
34:db:63:6d:85:19:21:aa:aa:17:b9:15:22:c0:1f:
a5:e2:59:5a:f7:b9:d1:d6:8d:45:c5:64:36:42:e0:
29:73:5e:94:d4:27:d2:e0:43:1f:c6:56:e9:5d:f1:
8f:99:a7:34:e4:fc:5e:bd:71:b5:fe:be:c4:e5:76:
29:5c:b0:8c:68:62:4a:1e:15:24:b3:ae:0e:3a:0d:
20:7c:c6:8c:62:62:8f:af:6c:69:41:b7:50:52:26:
76:99:1d:71:7f:27:cc:d2:40:05:e5:12:c9:d4:43:
30:a8:d2:0f:d0:f8:03:15:6c:52:5d:54:33:d1:3a:
d3:d4:89:87:8c:38:f7:6f:a1:50:02:5b:92:f0:a3:
e0:ee:53:f8:9d:9b:97:bf:6f:d1:dd:a5:aa:a0:74:
5d:9b:a2:99:5b:b4:cb:b3:b5:5b:47:d6:3a:4b:88:
f0:50:38:13:06:e9:cb:cf:bf:34:4e:e5:8c:a6:db:
0a:cb:38:7a:2e:e6:f0:8f:65:3e:e5:f2:35:3a:f2:
67:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:22:19:FC:0B:A2:3E:32:CD:5D:A5:A0:98:0D:8C:93:33:79:45:98
X509v3 Authority Key Identifier:
keyid:94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:06:b2:c8:d3:f7:75:ba:79:a4:cd:ba:51:91:d8:e6:c5:af:
26:f2:29:95:ed:d9:a4:f5:73:c3:b8:56:4e:62:d3:fb:ac:1c:
ce:3f:63:c9:b8:72:df:47:da:e1:c3:b2:70:ab:2d:b3:22:e7:
6b:ba:81:9a:e7:8b:c5:66:48:0d:38:b9:f0:0a:ca:60:ec:18:
d0:4b:75:dc:7c:b1:2a:f4:1f:d2:d4:d6:04:9e:ee:54:a8:ad:
86:6c:4c:90:45:8d:ae:6f:06:67:7c:9d:3f:81:90:ad:87:67:
ff:8b:02:f5:35:65:6e:64:c6:48:6d:d2:93:18:d3:09:5f:3b:
19:5a:5d:fd:b9:41:3a:29:4e:90:b8:2b:34:58:e6:c3:8e:6c:
0a:8d:06:df:47:6b:5f:d2:80:3b:2c:ea:70:6e:b6:70:8a:6d:
73:91:ea:4f:3e:4c:27:7e:79:91:e2:4f:98:aa:87:dc:0e:e5:
fe:6a:27:7b:ec:c6:01:02:7f:ba:ef:c6:72:13:6d:84:d5:bd:
a0:ec:e4:60:a1:db:cb:c3:0f:76:19:5a:a1:43:d5:0d:18:83:
70:a3:bd:0b:c0:86:b5:73:9d:f7:84:16:d7:69:9d:20:80:e0:
21:ab:6a:ad:e9:fc:3c:da:aa:f6:59:cc:31:14:f4:d2:c8:45:
d9:61:a7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:32 2026 by rpki-client