Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
File: LPHkHOfCQk-d-I65hGTJsIJr6cE.mft (raw, json)
Hash identifier: HYgpSFvHLSxHehPGmf981FkN9BLc84kU6aZTSbfUh+I=
Subject key identifier: 0E:73:20:6B:E9:18:15:52:6E:3C:E6:39:8B:3A:07:D4:5C:E7:0A:DD
Authority key identifier: 2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1
Certificate issuer: /CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1
Certificate serial: 019D38D352AE0D1BE4432C6A117307C1A046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
Manifest number: 1221
Signing time: Sun 29 Mar 2026 09:01:06 +0000
Manifest this update: Sun 29 Mar 2026 09:01:06 +0000
Manifest next update: Mon 30 Mar 2026 09:01:06 +0000
Files and hashes: 1: LPHkHOfCQk-d-I65hGTJsIJr6cE.crl (hash: RyBp3wKd+sP1ZOTWzH8/OIwoL2JIn65vie8CzSEv9Tc=)
2: fw1SDYSXE9cgRLT_kxEv40Y1xOA.roa (hash: 4PBJSUI9OV3LsVylzkdL7XQDDeBXfBAJ+sgkJ0lBBeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:52:ae:0d:1b:e4:43:2c:6a:11:73:07:c1:a0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1
Validity
Not Before: Mar 29 09:01:06 2026 GMT
Not After : Mar 30 09:01:06 2026 GMT
Subject: CN=0e73206be91815526e3ce6398b3a07d45ce70add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:90:f0:02:6f:6d:9f:93:fc:31:81:cf:18:dc:
67:51:e1:5a:70:43:18:0d:2c:0f:5c:74:38:96:c3:
a5:ca:52:93:06:5b:64:41:4c:f0:c9:f7:9e:67:b3:
81:e4:e9:da:a7:8e:b9:58:8b:0d:45:51:df:bf:fb:
39:4d:63:72:14:fa:e5:77:f3:fc:f6:0d:05:69:86:
23:54:2a:49:83:fd:3d:98:4b:66:1e:59:01:fc:95:
f5:24:13:d7:bc:bb:6f:c3:98:71:26:e1:ec:80:55:
6a:c3:1d:19:40:f5:78:a5:9b:44:26:b1:d4:99:45:
35:d1:1f:34:a9:59:ce:41:4f:06:9d:c9:fd:b7:94:
ce:26:6b:38:5f:a1:57:31:2c:db:88:a5:83:67:cd:
3a:95:e3:08:60:3a:b6:86:02:22:f1:4f:b0:8c:24:
3e:44:24:d7:3f:a1:48:50:69:f3:f5:c2:6f:7f:47:
22:0f:3a:09:24:4d:87:7f:f4:84:b6:57:84:da:e1:
0e:c6:0a:82:e2:6f:ce:4c:99:8d:b0:49:05:d8:10:
6b:ba:1d:c1:ca:f3:08:c6:3f:b1:fd:a8:98:e9:6d:
4c:79:9c:24:36:ec:10:e6:cb:7a:26:5f:f4:1a:7a:
2b:11:42:8b:60:c8:40:f7:6c:ff:d3:e2:3d:1c:d9:
52:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:73:20:6B:E9:18:15:52:6E:3C:E6:39:8B:3A:07:D4:5C:E7:0A:DD
X509v3 Authority Key Identifier:
keyid:2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c9:11:c0:7b:e3:36:b3:eb:cc:58:a5:fa:68:49:58:55:71:
35:08:aa:80:71:f9:20:14:0e:9a:4e:22:4a:cb:82:fb:b8:21:
7e:40:9a:cf:c8:b4:94:41:da:56:79:5e:ca:52:4d:10:df:a7:
cc:02:37:f8:7c:56:f5:ec:28:f3:28:d0:1f:41:8c:b5:49:65:
56:d0:a4:22:fc:3e:40:ff:f5:59:5a:50:6a:87:eb:58:75:b3:
43:61:a1:24:09:47:93:b3:27:86:60:75:9d:7c:cd:da:ab:56:
ad:d9:62:e0:ca:cc:09:4b:19:c6:8a:09:a6:10:47:41:e4:8f:
1e:00:df:2f:a4:58:da:d3:91:be:f8:c2:34:88:02:ab:e4:22:
b1:82:db:2b:77:7c:33:e8:ca:8b:8b:af:a5:b8:38:b0:4e:46:
fd:a9:ca:f3:57:4b:6c:84:87:49:2a:c7:c5:00:77:6f:e8:9b:
0b:ef:fd:b5:c4:fa:01:84:0e:0c:47:c1:b9:b1:5e:29:95:1d:
58:5e:d9:1d:eb:62:21:a0:47:4e:de:c7:2d:6a:c2:2b:0e:7d:
c5:79:ec:10:c3:7c:d8:8e:fd:57:80:68:6f:c7:81:84:ea:9b:
bd:eb:1c:41:e3:66:48:8c:68:46:13:a9:89:8d:ad:e2:9c:84:
0c:27:b4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:07 2026 by rpki-client