Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
File: LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft (raw, json)
Hash identifier: BpplQj1yUlmXj9zolun7nr/LOwjDo7Dspq+mQqG/RF8=
Subject key identifier: 86:91:33:CC:CD:D9:E2:86:76:F4:64:EE:E4:3F:40:80:48:40:6E:2D
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 01A1653403B005761E1B0048524E2FCBABE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
Manifest number: 1AB7
Signing time: Thu 22 Oct 2026 20:01:09 +0000
Manifest this update: Thu 22 Oct 2026 20:01:09 +0000
Manifest next update: Fri 23 Oct 2026 20:01:09 +0000
Files and hashes: 1: L4LkPtTKu6uh824DJ6xjRvNmWTU.roa (hash: 0NgdalWgdZZseus2rUGUIbaj+mAP6w8e2361KL42z6g=)
2: LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl (hash: CwUj+6SuaRNZWRZjHjDxC//AyfJM4C+MPU9jnVnrcHY=)
3: fRlgrC6V-4hpDOR3xf-j7dbCZZ8.roa (hash: aMV6NBt217+iKos/Lhiyotp7vHjyI7McAj/90qITACM=)
4: qsejt5iw_nC2cpa2gTFa-6x-D30.roa (hash: OQehKpZjdvH5fT9tftK+VPDJxCO7SZpTNsO/1LiDTxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:34:03:b0:05:76:1e:1b:00:48:52:4e:2f:cb:ab:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: Oct 22 20:01:09 2026 GMT
Not After : Oct 23 20:01:09 2026 GMT
Subject: CN=869133cccdd9e28676f464eee43f408048406e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:e4:fb:05:45:b1:80:21:9a:f8:14:1a:7e:
f8:f4:a8:83:ee:a4:7f:55:27:da:17:0f:f8:ff:11:
54:23:98:13:d6:a4:bc:43:ff:ef:6c:17:3a:7e:06:
48:3a:b0:fa:5a:b8:b6:e5:3d:99:41:46:a5:1e:2b:
1d:3e:3c:79:e1:5d:e4:6c:05:ef:b0:1f:6d:11:3d:
18:63:d0:c1:06:79:42:35:dc:8a:24:e5:8b:07:cc:
64:a6:33:93:b1:e8:c5:e6:ca:7e:59:87:ab:7b:3c:
be:d9:9a:74:f3:b5:5d:36:b9:96:df:69:3f:54:04:
32:29:92:b5:4d:21:ce:00:f4:50:5b:1e:30:b4:8f:
dc:9b:e0:9f:33:c3:d0:0e:93:2e:93:04:8b:dc:62:
ed:88:58:02:8f:46:d5:31:28:8e:ed:9a:72:6b:47:
33:0d:db:67:31:a0:54:9c:18:c8:89:ad:bc:7a:eb:
28:45:19:10:8b:81:ee:89:5b:7a:a2:05:b5:fd:64:
50:d4:49:6d:1e:4c:b4:f2:79:8b:a8:da:cc:bc:98:
df:f5:46:9b:25:6e:fe:60:03:33:dc:ce:81:9c:c1:
4f:f3:60:18:bd:ea:e1:fb:b1:01:0d:de:03:cf:56:
2c:60:63:1b:d9:50:77:20:c6:3e:4d:30:e7:d7:9a:
9f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:91:33:CC:CD:D9:E2:86:76:F4:64:EE:E4:3F:40:80:48:40:6E:2D
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:96:12:2a:83:05:be:f8:67:9c:ef:a0:77:21:77:5b:9f:5c:
69:c6:f5:49:ae:5e:f4:0d:33:32:ae:ca:ba:10:87:f2:93:8e:
1e:0c:cd:80:41:cb:ca:de:dc:3a:aa:c8:08:6a:bf:12:96:5b:
bc:21:72:b2:df:8d:89:a1:49:18:96:69:4b:38:f2:43:8c:97:
24:58:19:50:5f:eb:60:36:53:45:84:43:93:36:ad:cb:40:fc:
60:19:25:7f:4b:81:c8:b5:04:a5:20:df:f3:6c:7b:47:b5:44:
5d:28:f2:21:48:80:e0:22:f8:5f:63:3a:e3:3a:41:0e:a0:8e:
75:ca:93:3e:0f:e3:60:c5:21:e5:2b:8c:c1:ba:2a:7a:a4:c5:
79:e6:44:00:77:15:9d:9e:69:c5:06:20:a8:94:9d:c0:aa:11:
e8:a6:02:98:98:2a:53:93:92:85:13:d6:13:2c:eb:d5:05:a4:
43:17:25:68:14:9e:3c:f7:db:c3:e9:5f:22:8b:f9:64:2c:c4:
a4:53:28:15:26:7b:8f:c8:b0:3e:52:5b:05:ee:1a:82:2d:18:
39:47:06:4d:08:b6:67:77:e8:96:ad:00:d3:cd:6c:32:b9:3d:
49:ff:69:88:50:27:4d:2d:81:8d:29:fa:b8:2b:6d:8b:06:6c:
0c:6d:92:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 23:03:43 2026 by rpki-client