Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
File: LHXzXSVsxKW4gxm7fku7oynkk0E.mft (raw, json)
Hash identifier: i6Gem8eKf3Y7Q0PF8FfIU96+3ZH6dv4nboOjeeAeHyc=
Subject key identifier: 01:24:71:E6:6A:CD:2B:19:C9:6B:10:29:32:69:84:27:52:C3:2A:19
Authority key identifier: 2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
Certificate issuer: /CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Certificate serial: 019E31F349553F5EA083C7A536B0C2475726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
Manifest number: 1127
Signing time: Sat 16 May 2026 18:01:28 +0000
Manifest this update: Sat 16 May 2026 18:01:28 +0000
Manifest next update: Sun 17 May 2026 18:01:28 +0000
Files and hashes: 1: 1a0Y-XPntLJBTaP7Z1JCmBOeYnc.roa (hash: PDXJOAnSiEAeJBJEKNLP3n4C9TS71R3MwFilb6PORGw=)
2: LHXzXSVsxKW4gxm7fku7oynkk0E.crl (hash: 488dPiXoJ8pq0toCMGKok9uG3pW9ItTgJMMmiL+3yxc=)
3: ijFoRhXfDlfrNpWNyFmogIXNNoA.roa (hash: adP2IDTZNzyeUMfynFkS2hIcBFbJGISzpZDlTGKl9HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f3:49:55:3f:5e:a0:83:c7:a5:36:b0:c2:47:57:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Validity
Not Before: May 16 18:01:28 2026 GMT
Not After : May 17 18:01:28 2026 GMT
Subject: CN=012471e66acd2b19c96b10293269842752c32a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:33:9d:ed:7a:a9:9b:b8:4b:b7:28:1c:57:
74:42:d7:2d:46:e5:cd:ef:79:ea:66:cb:09:fe:5b:
54:58:be:9f:54:e7:4f:af:c7:d1:88:50:57:eb:fa:
b4:68:99:c2:6a:b8:63:45:2d:fb:7c:f3:da:61:45:
d6:d2:41:f0:6d:33:67:cf:56:78:8c:f7:93:67:47:
3f:16:8e:08:a3:bd:ac:a4:48:44:0f:f1:7a:27:87:
e7:43:d9:d0:6f:b7:68:80:7a:7d:90:a1:24:c0:76:
eb:b7:cd:41:a7:c1:a9:12:1a:1d:f4:fb:25:12:50:
23:2a:a2:5c:68:70:62:8e:c3:ee:5a:1f:37:69:db:
a3:72:96:40:20:23:15:e9:13:3c:23:aa:ee:bc:67:
d9:7f:f6:b6:76:70:0b:74:3e:90:04:c9:ab:a1:6f:
3d:b7:ff:48:21:69:29:e4:24:03:a2:5e:f7:77:cc:
49:81:a8:a3:61:d3:67:8e:40:16:09:6f:1e:1b:f1:
1a:98:c2:32:cf:b0:84:57:a5:ef:f4:93:40:b8:11:
1d:c0:ee:4a:a2:03:0d:e4:e7:88:95:0f:82:be:67:
b2:aa:5a:27:ae:74:b6:a8:0d:d5:e8:0b:96:aa:ea:
93:28:63:bc:8c:de:ab:17:05:67:7b:b2:23:cb:55:
a2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:24:71:E6:6A:CD:2B:19:C9:6B:10:29:32:69:84:27:52:C3:2A:19
X509v3 Authority Key Identifier:
keyid:2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:72:f2:0c:bc:60:d4:c0:78:22:57:bb:e9:f4:2a:b1:6e:20:
96:90:a7:89:d2:1f:32:e5:6d:f8:50:c6:e5:38:12:10:40:28:
bd:04:93:81:1e:16:d0:56:9b:ea:6d:38:32:62:fa:f5:71:6f:
6d:ca:67:75:23:0b:95:4f:44:92:15:71:32:59:cc:84:80:67:
62:5a:82:4a:b5:58:c3:26:97:83:79:a4:98:06:a6:33:b1:c6:
3c:87:bd:c9:a5:2a:22:c8:4e:b5:b6:1f:33:60:39:7b:2c:ce:
0b:b3:c9:35:f9:38:0c:a4:86:c6:47:b6:21:9a:11:9c:d1:c4:
71:70:e8:24:66:0f:a0:98:34:dc:1e:18:c6:ed:46:3f:1d:01:
fd:33:48:4c:79:c1:55:78:99:98:c2:f8:71:f7:79:63:20:e8:
da:26:04:da:12:79:f6:45:48:b6:a0:8e:cb:bb:d3:25:4c:31:
15:2f:fa:a9:3f:cb:9a:b3:84:2e:b5:0d:02:7d:3b:b4:d9:b9:
33:35:4e:d8:23:c5:62:bd:6e:cf:fe:0f:32:72:69:ec:c8:e9:
6c:71:39:36:b5:01:89:b0:c2:26:f3:9f:10:2f:ed:dd:c0:80:
fb:ad:d8:97:d3:bb:90:b8:a5:66:08:1e:a7:94:83:a7:d2:66:
a5:cd:69:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:02:37 2026 by rpki-client