Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
File: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft (raw, json)
Hash identifier: X9Rz/g/+f650ZhF+yMAeQmhzwH1lA8xUpWlaR7S8whE=
Subject key identifier: C8:66:42:F3:49:9C:AC:AA:1C:0A:3F:AF:F7:1A:1F:69:20:DC:1B:B0
Authority key identifier: 2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
Certificate issuer: /CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Certificate serial: 019D37C0010AD73B3ED0389F5E47CEE1FF27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:00:23 +0000
Manifest this update: Sun 29 Mar 2026 04:00:23 +0000
Manifest next update: Mon 30 Mar 2026 04:00:23 +0000
Files and hashes: 1: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl (hash: d4El8yRaaEgEhaYf2HKWEYVbBgY9jJ/eQRVkO5vYoMo=)
2: oPn9BEZzljIPQPQ_eYJw4GgcX3c.roa (hash: MFu3RUWuCmBoIzCATrSbU+RcXXRsfsL7FD0RBKZyeXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:01:0a:d7:3b:3e:d0:38:9f:5e:47:ce:e1:ff:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Validity
Not Before: Mar 29 04:00:23 2026 GMT
Not After : Mar 30 04:00:23 2026 GMT
Subject: CN=c86642f3499cacaa1c0a3faff71a1f6920dc1bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d2:27:bf:a1:47:c1:03:c5:da:9e:49:f6:64:
b5:b8:dd:e3:09:54:9e:b4:d6:cc:91:30:5a:ab:8a:
3f:1d:a8:b2:c7:8d:36:d3:e9:26:85:1a:5e:80:8a:
81:67:30:72:36:58:60:ae:98:de:b1:fd:fc:84:14:
64:f3:dc:e8:ea:69:ae:6c:8c:24:78:69:de:ef:c1:
4e:64:6d:2a:c2:a1:4e:0f:b2:76:e0:92:c6:01:63:
98:ab:c5:56:f6:e2:9d:43:18:41:9f:ee:f0:e3:39:
b3:11:4a:50:51:80:bb:11:9a:cd:f9:24:20:af:3b:
b1:7d:c8:91:fe:a4:02:f6:0a:37:47:69:7a:0b:91:
3d:91:37:c7:ad:54:cd:37:75:1c:1d:a4:24:83:05:
6a:8a:8d:6d:65:16:bc:1b:29:0c:8c:c7:34:b4:c2:
98:bb:72:27:35:af:34:95:36:e2:24:d2:8c:d7:32:
8b:87:2f:7c:9a:84:ca:f5:ec:b9:ba:97:59:44:06:
7c:9d:6a:2e:5a:be:93:f7:7b:b0:17:7d:1c:7d:77:
90:fa:a6:bf:34:99:fa:f5:7d:91:f4:dd:1f:7d:25:
e2:c4:34:af:de:ba:72:c8:ee:77:a9:ca:75:f1:00:
d9:39:d7:30:fb:c9:67:58:e6:34:06:39:9d:d1:2f:
f5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:66:42:F3:49:9C:AC:AA:1C:0A:3F:AF:F7:1A:1F:69:20:DC:1B:B0
X509v3 Authority Key Identifier:
keyid:2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b7:22:9a:9f:32:aa:34:5f:10:da:cb:7b:e3:fd:0c:9d:8b:
9a:b5:26:f3:f8:53:aa:c2:9b:3d:2e:93:b7:27:fe:70:31:db:
13:c3:62:94:47:e5:4e:05:fe:1a:06:9d:5e:58:fc:a2:25:cd:
55:52:23:97:6f:47:37:f9:a4:cf:48:49:62:26:48:e3:06:b0:
c3:70:46:83:3f:15:81:db:89:48:ac:b5:00:9c:a8:e3:e3:e3:
6d:eb:c2:bb:55:de:c8:64:de:02:31:05:d7:44:7e:a1:e5:00:
5c:dc:3f:fe:43:c0:cb:f3:c3:63:79:c4:36:c4:3c:13:95:cf:
32:ce:e3:f4:dc:ab:81:f4:ad:eb:68:52:a3:40:b6:55:e9:33:
9d:5f:41:fb:ae:72:44:51:54:58:67:91:1a:bd:ca:bc:5b:c6:
5f:1a:92:34:9f:e3:66:2f:b9:d0:c9:7d:14:1c:66:b4:c5:09:
5a:fd:cc:ca:0d:b2:15:56:40:c9:bd:bd:e4:5d:09:bb:21:9b:
92:fd:d3:87:f8:08:bf:89:53:f3:9d:64:66:00:38:57:13:13:
b8:9f:02:d2:37:b3:d2:8d:60:40:ee:ac:73:ac:98:e2:95:05:
43:b0:a2:b2:cd:ed:d4:e4:02:85:fe:26:db:b8:2e:d6:bc:12:
0b:6c:33:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:00:43 2026 by rpki-client