Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
File: LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft (raw, json)
Hash identifier: JLdrxLXkiKjl5tvOEr1HIfwiVKwBPwlURH4tuo55Gis=
Subject key identifier: 79:F0:2E:BD:D7:D2:CB:57:A5:2C:5D:37:4B:63:96:EB:22:5B:E7:A6
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 019F1A1FC5C5B1E10D54EA5A82825EE78E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 20:01:57 +0000
Manifest this update: Tue 30 Jun 2026 20:01:57 +0000
Manifest next update: Wed 01 Jul 2026 20:01:57 +0000
Files and hashes: 1: L4LkPtTKu6uh824DJ6xjRvNmWTU.roa (hash: 0NgdalWgdZZseus2rUGUIbaj+mAP6w8e2361KL42z6g=)
2: LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl (hash: 2nllF4mcW/by3hvP9dlB6QTxuVEn1aBFj21ypH+pVa4=)
3: fRlgrC6V-4hpDOR3xf-j7dbCZZ8.roa (hash: aMV6NBt217+iKos/Lhiyotp7vHjyI7McAj/90qITACM=)
4: qsejt5iw_nC2cpa2gTFa-6x-D30.roa (hash: OQehKpZjdvH5fT9tftK+VPDJxCO7SZpTNsO/1LiDTxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1f:c5:c5:b1:e1:0d:54:ea:5a:82:82:5e:e7:8e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: Jun 30 20:01:57 2026 GMT
Not After : Jul 1 20:01:57 2026 GMT
Subject: CN=79f02ebdd7d2cb57a52c5d374b6396eb225be7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:df:cd:ac:3b:4c:08:35:34:c9:60:f1:11:15:
3f:20:61:74:fd:7c:c5:76:7e:2a:0c:9d:0a:91:99:
11:b9:5f:a7:94:37:af:b1:46:7b:be:fa:63:37:da:
e4:1b:03:2c:27:85:26:fa:ba:43:df:7e:d8:16:0d:
5f:b5:3c:50:78:c4:15:94:37:c0:2a:0d:4c:2f:ab:
85:52:b8:fa:1a:1d:c9:c7:05:68:fa:d2:ca:e3:a8:
70:76:f4:19:3a:6a:75:46:f0:27:54:bb:f2:ff:f1:
52:67:54:12:3e:19:df:1d:40:d3:57:fb:1e:89:2f:
61:89:78:27:09:9a:84:7d:c3:5b:b6:19:2c:71:70:
48:4e:75:24:d0:84:6e:76:ff:d5:dc:7b:09:a3:74:
07:29:ad:8d:f1:18:a0:0a:04:5d:b9:ec:6a:77:79:
52:ba:cb:9f:c7:50:04:11:4d:d3:05:eb:e9:ae:98:
5f:c0:07:81:e9:6f:f1:78:84:d6:a4:82:34:ad:ec:
a3:c2:0e:df:4c:97:ac:fd:24:2c:c7:43:69:d3:b7:
52:17:ba:31:b1:3a:11:3a:97:59:df:27:e9:e4:e1:
dd:0e:cc:12:cf:1f:88:b7:9c:b8:9e:1c:87:15:db:
12:cd:c9:18:2d:22:a6:8e:08:45:91:9a:2f:52:24:
d9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F0:2E:BD:D7:D2:CB:57:A5:2C:5D:37:4B:63:96:EB:22:5B:E7:A6
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:7f:6c:36:2e:68:6d:15:a5:f5:cf:47:e1:a7:0a:ed:2f:24:
d3:2a:97:02:b6:74:77:d8:1f:f3:16:a5:1f:2c:a9:40:ce:fb:
88:85:28:4a:3f:23:bc:af:56:ed:7c:83:d8:e1:cb:34:e6:6f:
ed:02:69:6b:32:d0:5d:3f:d7:67:f3:ce:07:03:65:76:d0:64:
a8:02:83:68:8d:6b:b0:7a:5e:26:ba:05:5b:f5:50:ac:37:9d:
92:25:2d:5a:a9:80:b3:bc:13:28:a7:90:f6:86:13:18:98:9c:
0b:40:98:c7:64:97:75:c6:31:01:5d:7c:2d:f5:81:a0:02:da:
45:20:eb:f6:60:75:43:ec:10:c9:4c:31:12:9f:92:e5:a8:36:
fe:08:4d:b5:f2:9d:47:76:55:fe:50:0c:96:63:fd:ee:63:f9:
d6:ee:6c:c2:5d:b5:c1:b1:20:70:29:b7:ac:6e:e3:50:37:b3:
e1:72:2c:de:04:4b:f0:ba:57:61:8e:2c:54:b0:01:47:98:76:
a5:f2:06:02:9a:c2:c0:80:d1:a0:ae:a4:c4:d6:56:9c:34:84:
95:c9:5e:33:7c:a4:55:64:50:66:33:9a:41:9d:da:fd:9f:61:
63:a6:72:ee:70:eb:94:63:7c:73:0f:92:b2:2f:44:f3:1a:13:
07:cb:43:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:41:22 2026 by rpki-client