Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
File: LNH_SXJfYzHmO47XZEjXJd16hN4.mft (raw, json)
Hash identifier: 7+Kn44XS2JQT/OonJ5WLzK/MxtebWg2zMJ1vk9mmb50=
Subject key identifier: 42:C8:BA:1A:1F:C7:5F:94:17:13:0C:61:7B:E1:75:1F:E9:48:D5:C4
Authority key identifier: 2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE
Certificate issuer: /CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de
Certificate serial: 019D37F71E62E573AF019D16CB835708C6B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 05:00:35 +0000
Manifest this update: Sun 29 Mar 2026 05:00:35 +0000
Manifest next update: Mon 30 Mar 2026 05:00:35 +0000
Files and hashes: 1: LNH_SXJfYzHmO47XZEjXJd16hN4.crl (hash: h7b14Y+dEDrWMwjyOcSQ1it26RRM5ENZFk0iPCIWeU0=)
2: tNQkeJ9EGrMXKYwxBMZfuwZ1oAI.roa (hash: QOlqs8KXOpGS492JR6Z+1it46kTu85+FaSQ+ynVWEh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:1e:62:e5:73:af:01:9d:16:cb:83:57:08:c6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de
Validity
Not Before: Mar 29 05:00:35 2026 GMT
Not After : Mar 30 05:00:35 2026 GMT
Subject: CN=42c8ba1a1fc75f9417130c617be1751fe948d5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:96:69:3c:e0:55:be:8d:0d:46:3e:42:e7:
4a:e7:8d:66:02:44:f0:1d:d4:ed:d0:9c:ba:69:61:
68:c5:e0:3f:f7:7b:78:2c:9f:25:6d:64:ee:62:22:
17:be:bf:bb:01:4d:45:0f:78:04:64:9b:f0:03:0f:
fb:be:2a:0b:5c:f4:6a:16:18:3c:77:a3:2f:ac:9f:
65:0f:39:4a:9c:0e:70:eb:2a:dc:11:f2:34:25:be:
0a:70:90:de:a0:8c:0c:60:0d:1c:58:ef:df:d0:81:
aa:56:3c:1d:50:95:4e:55:c2:40:45:c5:be:62:b6:
75:e2:f4:f6:17:31:36:0c:47:d1:16:f0:f9:cd:d4:
fc:3e:00:64:3f:52:eb:ac:26:9c:6c:65:17:61:5d:
81:7f:9b:6a:53:f8:0c:ed:be:18:4c:11:50:d5:e5:
ae:05:fc:39:b5:e2:72:f0:e1:d0:f7:2a:23:d4:f4:
1c:2c:c4:02:32:95:ca:37:f1:a9:e3:b0:30:9d:9c:
7e:7b:c9:b7:98:50:e7:f1:d8:12:43:77:f5:16:09:
6f:cd:f6:64:0a:96:7b:a6:f0:8a:78:20:48:16:be:
04:77:6e:03:b5:90:1d:7d:44:28:fa:9a:08:14:b3:
6b:5f:16:b5:ca:9e:ee:1f:f1:4c:02:61:f9:78:2d:
6d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C8:BA:1A:1F:C7:5F:94:17:13:0C:61:7B:E1:75:1F:E9:48:D5:C4
X509v3 Authority Key Identifier:
keyid:2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:01:5a:5a:b7:e0:7a:3f:22:d0:94:03:b1:72:5b:c6:c3:1b:
18:cd:d6:63:bb:90:88:ae:9d:7e:c6:9f:44:df:f4:83:1a:97:
16:9c:1d:37:c7:09:60:f0:99:6e:8f:1d:7d:da:81:ea:8b:19:
85:6f:a0:b6:ed:f1:4e:75:62:84:98:34:fa:e0:87:49:f7:33:
af:be:ac:bd:84:b6:a0:1e:07:8c:95:19:25:11:82:16:46:a1:
66:91:02:bf:aa:c2:e3:c0:1a:cd:83:4f:84:b7:1f:aa:b7:98:
d5:9d:bd:17:c3:c5:79:1b:6d:c0:ae:78:74:f7:3f:50:53:fc:
5d:e6:93:b9:19:50:b8:10:5d:d8:54:dc:66:e5:fe:8a:be:54:
00:aa:84:e1:65:18:32:61:6c:52:a1:0d:8f:80:41:08:3c:27:
13:14:e3:93:c5:4b:8e:26:2a:38:15:ea:da:f9:ab:8b:21:ef:
bb:07:cb:3c:32:9b:f4:a9:d5:11:6c:55:3e:fd:32:34:13:6d:
02:5d:c8:ed:a1:cb:a8:2a:32:67:96:96:40:dd:54:42:e6:ee:
80:90:39:90:07:c3:01:76:e1:de:da:a5:1d:1f:0a:ba:c8:17:
1e:9d:4c:fa:56:7d:a1:d1:3f:ab:a4:52:de:0c:2c:3f:e9:cd:
b1:23:e7:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039x5i5XOvAZ0Wy4NXCMa1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZDFmZjQ5NzI1ZjYzMzFlNjNiOGVkNzY0NDhkNzI1ZGQ3
YTg0ZGUwHhcNMjYwMzI5MDUwMDM1WhcNMjYwMzMwMDUwMDM1WjAzMTEwLwYDVQQD
Eyg0MmM4YmExYTFmYzc1Zjk0MTcxMzBjNjE3YmUxNzUxZmU5NDhkNWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzyWaTzgVb6NDUY+QudK541mAkTw
HdTt0Jy6aWFoxeA/93t4LJ8lbWTuYiIXvr+7AU1FD3gEZJvwAw/7vioLXPRqFhg8
d6MvrJ9lDzlKnA5w6yrcEfI0Jb4KcJDeoIwMYA0cWO/f0IGqVjwdUJVOVcJARcW+
YrZ14vT2FzE2DEfRFvD5zdT8PgBkP1LrrCacbGUXYV2Bf5tqU/gM7b4YTBFQ1eWu
Bfw5teJy8OHQ9yoj1PQcLMQCMpXKN/Gp47AwnZx+e8m3mFDn8dgSQ3f1FglvzfZk
CpZ7pvCKeCBIFr4Ed24DtZAdfUQo+poIFLNrXxa1yp7uH/FMAmH5eC1tIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELIuhofx1+UFxMMYXvhdR/pSNXEMB8GA1UdIwQY
MBaAFCzR/0lyX2Mx5juO12RI1yXdeoTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE5IX1NYSmZZekhtTzQ3WFpFalhKZDE2aE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83MzgxODgtNzNhZS00OTE4LWJmZDct
Nzc4OGFlZTEyMTVmLzEvTE5IX1NYSmZZekhtTzQ3WFpFalhKZDE2aE40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi83MzgxODgtNzNhZS00OTE4LWJmZDctNzc4OGFlZTEyMTVm
LzEvTE5IX1NYSmZZekhtTzQ3WFpFalhKZDE2aE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwFaWrfg
ej8i0JQDsXJbxsMbGM3WY7uQiK6dfsafRN/0gxqXFpwdN8cJYPCZbo8dfdqB6osZ
hW+gtu3xTnVihJg0+uCHSfczr76svYS2oB4HjJUZJRGCFkahZpECv6rC48AazYNP
hLcfqreY1Z29F8PFeRttwK54dPc/UFP8XeaTuRlQuBBd2FTcZuX+ir5UAKqE4WUY
MmFsUqENj4BBCDwnExTjk8VLjiYqOBXq2vmriyHvuwfLPDKb9KnVEWxVPv0yNBNt
Al3I7aHLqCoyZ5aWQN1UQubugJA5kAfDAXbh3tqlHR8KusgXHp1M+lZ9odE/q6RS
3gwsP+nNsSPnLg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:05 2026 by rpki-client