Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
File: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft (raw, json)
Hash identifier: w1LZXsgrB5wGrNhoA47DTc5RaJw3LBqQzcJnQ9aWeR0=
Subject key identifier: A1:E0:42:77:57:85:1C:96:12:AB:BA:BF:04:EA:80:1A:50:A6:B0:39
Authority key identifier: 96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
Certificate issuer: /CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Certificate serial: 01A08B67E000604AFC149D7C5BF1C6163A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
Manifest number: 117F
Signing time: Thu 10 Sep 2026 13:00:35 +0000
Manifest this update: Thu 10 Sep 2026 13:00:35 +0000
Manifest next update: Fri 11 Sep 2026 13:00:35 +0000
Files and hashes: 1: Qb_RZp-mahSy8KfrU77wNxpfg_E.roa (hash: u1xd1aPYepFZHPAZOvL3xwts9hFrIKK/yaiHVAix9zo=)
2: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl (hash: EeVRycqT7/bp5aBaOPzN2eEl9WauJ+nYmzPwyOhgjDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:67:e0:00:60:4a:fc:14:9d:7c:5b:f1:c6:16:3a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Validity
Not Before: Sep 10 13:00:35 2026 GMT
Not After : Sep 11 13:00:35 2026 GMT
Subject: CN=a1e0427757851c9612abbabf04ea801a50a6b039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:07:bf:46:52:81:4a:fc:38:40:ec:91:ab:49:
a9:e0:73:6f:21:b2:73:5a:a2:5d:85:2b:76:3c:bd:
23:85:97:2b:ef:72:39:4a:70:87:54:58:46:6c:b9:
ff:6b:ab:52:75:20:84:9c:df:27:99:c9:51:7a:24:
a9:83:38:fe:70:06:04:4e:4e:5e:7e:fa:a7:33:aa:
65:65:92:19:eb:7f:e5:e2:05:01:fd:50:d4:c4:dd:
71:ec:ef:f2:e1:84:56:9a:d5:94:a9:8b:8b:ee:d8:
90:43:a9:6c:0b:b6:d1:7c:b3:f8:b0:5b:73:10:82:
84:79:53:f3:99:70:8d:7a:4f:4a:34:b0:f8:02:f6:
d2:70:1e:1d:41:77:16:a1:87:38:5b:25:9b:e8:6c:
d1:b1:b3:2a:b1:e4:d5:78:97:b1:b0:ff:1b:b0:90:
0f:fc:60:99:8e:ab:07:34:90:ca:ae:9b:16:6c:08:
01:c1:9f:15:c9:5a:df:4e:8c:d2:59:da:60:c4:6a:
22:d0:05:f8:3e:51:55:ac:41:8f:8f:54:49:de:7c:
a4:3c:68:69:97:54:00:eb:f3:2f:b3:0b:fd:6e:83:
c5:3e:cf:47:5a:98:6d:5c:5a:2f:5f:cb:3b:0e:99:
03:de:6f:95:93:8b:45:87:88:06:2b:1e:49:e9:ba:
dc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E0:42:77:57:85:1C:96:12:AB:BA:BF:04:EA:80:1A:50:A6:B0:39
X509v3 Authority Key Identifier:
keyid:96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:8f:6d:b3:b5:d5:d0:80:8e:bc:34:1a:4d:33:6b:8d:50:1e:
e3:1b:1c:58:b9:66:61:35:f8:47:8e:2d:44:e7:6a:a0:cb:b5:
1f:d0:8e:3c:14:af:01:39:6c:2d:48:09:40:f8:54:56:6b:3f:
5e:53:b1:d5:de:64:02:bb:7b:44:1c:81:f7:84:91:f0:a8:a3:
53:17:01:71:77:3c:5b:df:37:c5:98:f7:43:fa:0b:bb:16:9d:
65:e2:8e:ca:2f:06:8b:d4:1a:14:60:7d:63:b3:ca:89:35:42:
24:9c:f3:0f:63:48:e3:92:18:14:58:06:2e:f6:2e:b3:b2:1d:
3d:e6:fe:f8:bd:b5:bd:b5:23:26:4a:49:97:7f:85:c3:09:58:
fe:60:22:f6:5c:62:f7:0f:a6:0d:2d:5e:f7:11:0d:23:ff:18:
f7:84:7b:4b:91:a2:23:c9:05:01:2b:25:b7:7c:1f:d8:d9:a4:
53:65:ab:70:b7:69:f0:ff:54:1f:5a:2f:06:f3:4a:fe:af:8f:
16:60:92:66:04:c9:b6:23:d2:a0:e9:d6:d3:0f:dd:56:b1:56:
a7:10:54:6c:c7:0f:ce:74:3d:23:54:4c:10:d0:2f:2d:bc:88:
ab:cc:e3:6e:9c:84:37:bd:bf:b1:96:5c:0b:66:7f:80:52:f7:
c6:54:34:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:21:09 2026 by rpki-client