Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
File: lhebOdHB0o9QY8qSHWAH42Phxgs.mft (raw, json)
Hash identifier: RFNW1mu32gQpB87qquU9Oh2VwnrY1E1pQ1k9eqB+7RU=
Subject key identifier: 33:63:95:99:55:D8:59:5D:DA:54:88:64:AF:A5:3A:03:CE:1F:72:36
Authority key identifier: 96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B
Certificate issuer: /CN=96179b39d1c1d28f5063ca921d6007e363e1c60b
Certificate serial: 019D38D3B17F0A3D7F2B3281B0AF581FBE56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:01:30 +0000
Manifest this update: Sun 29 Mar 2026 09:01:30 +0000
Manifest next update: Mon 30 Mar 2026 09:01:30 +0000
Files and hashes: 1: WNgi38YIBh7gSGGMAz3pOwSfPa8.roa (hash: Fi6JSkMtS00G2FM2ty185le8FKrXwlLgR3IpBCt2xCc=)
2: lhebOdHB0o9QY8qSHWAH42Phxgs.crl (hash: ISLOg9TeZqfnJkIuzCaYgISOo82BscP8pAS4Nqw64xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b1:7f:0a:3d:7f:2b:32:81:b0:af:58:1f:be:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96179b39d1c1d28f5063ca921d6007e363e1c60b
Validity
Not Before: Mar 29 09:01:30 2026 GMT
Not After : Mar 30 09:01:30 2026 GMT
Subject: CN=3363959955d8595dda548864afa53a03ce1f7236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:68:3e:0d:a7:ee:bf:be:dc:62:46:eb:57:14:
23:be:a0:4f:4c:31:ee:58:38:a4:b1:91:6f:08:0a:
f1:d8:25:6f:3a:56:e2:64:d1:56:d2:c5:cc:32:87:
31:59:f2:a5:54:c2:be:27:53:2e:69:1e:56:2d:6b:
1c:8a:0b:88:e7:43:ae:c1:2e:1a:21:0d:da:d6:52:
05:7f:be:b1:c4:33:3d:7c:83:23:1a:fb:13:78:75:
12:56:23:3b:b4:89:c3:1e:59:b1:0d:56:e9:35:7f:
bf:03:88:2a:27:9d:27:84:0c:ef:46:93:92:78:c2:
94:a1:c5:17:d4:67:dc:66:f8:c0:d0:29:7c:f7:18:
dc:a5:19:c3:48:8a:99:70:76:44:fe:f7:33:b7:bd:
c6:3b:5f:96:bb:92:41:1e:10:0a:ac:1e:f8:84:dd:
0e:be:06:fb:14:61:e9:ca:0b:c6:9e:a6:7d:5b:99:
35:85:92:13:7a:aa:97:b7:da:38:99:2a:c9:01:c4:
2c:9f:90:ca:38:d8:8e:73:dd:6a:18:eb:9f:b6:18:
83:e8:88:57:0e:f1:71:16:eb:9d:af:9f:67:ca:d8:
32:bc:cc:50:a9:cd:0f:c8:22:fb:f6:3a:40:7f:ff:
e9:c4:6f:51:75:6d:7b:de:a1:28:ac:dd:81:c0:fa:
af:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:63:95:99:55:D8:59:5D:DA:54:88:64:AF:A5:3A:03:CE:1F:72:36
X509v3 Authority Key Identifier:
keyid:96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2c:e6:19:f5:b8:aa:1e:7d:e7:71:a4:f9:42:b3:40:34:d9:
7f:0a:5b:27:0b:93:72:7b:be:6a:63:01:c8:6e:d4:37:1c:52:
90:c1:f8:b7:67:07:f8:90:50:8a:45:21:8c:1b:75:66:02:b0:
57:1f:2d:79:93:bb:cb:2a:24:ad:a5:70:7d:f1:41:4f:c5:66:
94:ec:c8:75:f9:d1:a9:db:7d:d7:99:44:a6:8c:43:01:0a:58:
11:a7:a1:43:a7:89:d3:1b:2e:39:50:21:b0:20:55:c6:6b:45:
01:86:1b:0c:8e:6a:ec:4a:ad:79:b3:99:4d:38:6b:a1:57:63:
07:45:1c:d8:9d:64:a8:ac:55:35:51:f8:23:32:58:48:02:6d:
df:1d:ac:af:83:55:38:03:ec:46:a1:49:e8:c5:d7:08:51:b5:
49:28:f8:3f:73:15:d3:da:c9:7b:6e:a2:73:6e:20:a6:dd:a8:
a9:c3:c7:c9:4b:4c:58:4d:54:89:70:1b:4d:d9:17:ef:4c:14:
90:bc:f9:55:5f:3f:db:d4:25:5a:fb:c3:ef:e4:e3:b9:88:d4:
34:8d:4a:bf:3e:b5:5a:77:b2:07:53:b6:b6:6e:05:3f:54:ca:
b3:a8:6d:c7:55:92:9f:b8:22:29:70:41:3e:b9:43:0b:de:23:
14:02:d2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:28 2026 by rpki-client