Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
File: Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft (raw, json)
Hash identifier: +QDKIskKILv3dgM8jJVORcH7Xe7djBeIc2x3XWfukpE=
Subject key identifier: C9:0A:05:D1:DD:DA:75:DC:D1:89:9C:7C:07:0D:9B:0A:63:39:10:4E
Authority key identifier: 2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
Certificate issuer: /CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Certificate serial: 019D382E5475E1DCE36F52F44FFE24D1B926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
Manifest number: 129B
Signing time: Sun 29 Mar 2026 06:00:53 +0000
Manifest this update: Sun 29 Mar 2026 06:00:53 +0000
Manifest next update: Mon 30 Mar 2026 06:00:53 +0000
Files and hashes: 1: Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl (hash: iSqyytncLqd0WZQBbaQ4aenKnIFudjTXADOfSqV8y5E=)
2: cxkSmIpEvqEgX4ngmD4597AK9SA.roa (hash: DfRU/sR9mUrJtx0wMuwQ4hVIgyHyvsCZqXVQHIZbmPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:54:75:e1:dc:e3:6f:52:f4:4f:fe:24:d1:b9:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Validity
Not Before: Mar 29 06:00:53 2026 GMT
Not After : Mar 30 06:00:53 2026 GMT
Subject: CN=c90a05d1ddda75dcd1899c7c070d9b0a6339104e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:52:97:71:01:dd:7e:59:f9:a5:db:0f:83:66:
b5:36:20:b4:73:b7:55:57:d4:16:5b:ca:33:06:dc:
1d:b0:57:33:0a:9f:25:6a:c0:fe:82:28:93:8a:40:
73:8e:fc:93:3f:cc:0f:e9:8a:12:40:1c:9b:98:22:
8a:b2:63:7e:e2:58:22:1f:ef:5f:63:20:2e:13:4e:
df:92:c4:41:03:ba:eb:97:61:fb:84:92:3c:6b:cc:
14:2c:07:5a:d1:67:18:4e:f7:ab:87:40:9a:78:2e:
14:c4:67:78:5a:9e:b8:a6:0b:3b:d4:52:6a:20:a5:
c7:a6:b0:52:f5:ca:4c:e0:bc:3d:81:f2:42:74:f7:
f4:30:e8:cd:55:67:14:c5:bd:4b:aa:bb:38:73:7a:
9e:53:77:9a:62:30:29:0c:b6:ef:8e:75:94:1f:99:
a4:0a:76:98:46:33:52:99:60:cf:af:ed:53:9f:4c:
bb:d0:11:88:0e:7f:92:e9:b1:11:4d:1e:9f:95:3b:
8f:29:f4:9b:f5:d5:78:f6:66:6d:5e:d3:62:10:ad:
bc:3b:27:23:b0:54:0b:0c:d6:0d:78:6f:09:85:e9:
b3:68:b8:4a:13:3d:3f:2d:42:07:d3:4c:b6:3b:5c:
dd:9f:23:b3:e3:a7:39:98:7d:70:95:2b:8b:1b:73:
5c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0A:05:D1:DD:DA:75:DC:D1:89:9C:7C:07:0D:9B:0A:63:39:10:4E
X509v3 Authority Key Identifier:
keyid:2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:99:c8:7e:43:30:0b:f0:a5:a9:ee:c2:b8:80:1f:b5:df:a7:
de:54:87:e3:b5:56:5a:16:dc:58:6d:ad:3a:da:7c:62:3e:53:
a4:66:34:56:51:78:70:1b:b1:48:0d:2d:10:53:b9:bb:12:17:
8b:53:79:e1:ad:56:8d:fa:bb:e3:75:59:28:17:21:c4:4d:71:
00:22:eb:ef:f4:b0:f2:77:82:be:31:50:75:f2:2f:4c:8e:14:
a0:88:26:df:ac:e6:44:14:c6:b4:81:79:5b:7f:cb:ce:bd:24:
c6:53:81:5f:a2:c8:cb:14:c8:ce:ff:48:b8:5b:52:69:27:2b:
6e:af:a4:64:49:bb:35:a4:5a:db:eb:b9:48:a3:be:23:31:50:
ea:11:68:fb:19:cc:b5:91:e7:8a:0b:39:77:cf:0c:3b:16:2d:
df:5f:25:d9:08:ca:ac:a2:2e:27:c3:10:48:ca:68:f9:35:e6:
f5:f0:f4:5f:f1:38:d0:ad:5c:dd:ac:c4:79:b9:de:b9:13:9e:
0c:0f:a3:41:66:7f:5c:f0:8c:4d:32:43:57:6a:58:37:a6:fd:
a2:a3:cf:5f:05:95:2f:2d:28:ef:7b:ad:e4:35:08:cd:34:92:
e3:ef:69:a7:ad:01:c0:30:fe:4b:11:77:c9:7d:37:47:09:bf:
ad:45:af:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:31:48 2026 by rpki-client