Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft
File: lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft (raw, json)
Hash identifier: irdpnqMhaOuqDUXfuDaP+oK7Czos6fZ7yX+K+7TUGac=
Subject key identifier: D0:6A:C3:A0:60:0F:25:9C:B4:73:93:B1:CF:2D:D5:3C:B1:76:F8:ED
Authority key identifier: 96:17:27:13:0C:25:99:90:B0:05:EA:94:33:B5:7E:07:92:F1:AF:15
Certificate issuer: /CN=961727130c259990b005ea9433b57e0792f1af15
Certificate serial: 01A1845154E05617198F2BA93DE21CC6945A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhcnEwwlmZCwBeqUM7V-B5LxrxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft
Manifest number: 025E
Signing time: Wed 28 Oct 2026 21:01:24 +0000
Manifest this update: Wed 28 Oct 2026 21:01:24 +0000
Manifest next update: Thu 29 Oct 2026 21:01:24 +0000
Files and hashes: 1: IBxQMw202wI9H-2El0dEcabarmQ.roa (hash: nV5yVbote6ZsQPTplfUETazD8sVRzYP39kvT+GSB85A=)
2: lhcnEwwlmZCwBeqUM7V-B5LxrxU.crl (hash: 7Hzss9vin2FcelBMwTtx6ts+UvJv4FX6eJ+jH63M2oQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhcnEwwlmZCwBeqUM7V-B5LxrxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:51:54:e0:56:17:19:8f:2b:a9:3d:e2:1c:c6:94:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961727130c259990b005ea9433b57e0792f1af15
Validity
Not Before: Oct 28 21:01:24 2026 GMT
Not After : Oct 29 21:01:24 2026 GMT
Subject: CN=d06ac3a0600f259cb47393b1cf2dd53cb176f8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:49:a8:2c:67:4b:d9:81:d0:34:60:8d:c5:54:
3b:20:e0:62:bc:2e:b1:0f:b3:e6:93:29:d2:01:2b:
da:bf:a7:0b:2f:b8:b3:c8:d8:22:a8:fc:6a:d9:b6:
f1:e6:b6:d2:63:0a:73:37:e5:6a:d5:e1:85:c3:87:
96:32:b4:1e:d6:ca:cf:f2:63:7e:83:83:1f:dc:14:
99:42:1a:01:c3:32:78:37:ce:f2:86:41:58:d3:41:
3d:43:71:7c:ed:b0:a1:6c:b8:80:55:bd:13:99:19:
c3:f6:b5:84:40:0e:65:5e:4a:e9:9f:d8:5c:d7:8a:
e8:f3:6f:c5:9a:c1:4c:41:a2:ca:40:27:b7:af:c4:
d4:0d:97:2f:79:d9:1d:c2:2f:fc:41:0e:86:20:d5:
a3:0f:88:01:90:51:6a:36:ab:d3:11:20:40:82:df:
97:68:e8:2d:f0:e0:e2:97:23:5b:d6:7e:52:a1:63:
5e:54:ce:e5:c4:dd:27:f0:19:ed:be:c0:bc:c5:cb:
c2:b6:5e:f7:5e:ae:48:88:a0:0d:22:41:fb:fe:c3:
5a:af:49:e6:51:f6:20:d9:d3:40:58:82:2e:c3:f7:
9d:0b:ed:f3:6b:74:99:4e:c7:bb:20:48:6b:4a:70:
13:ae:fd:6b:d5:e1:72:b1:21:43:d1:d7:cc:b8:df:
88:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6A:C3:A0:60:0F:25:9C:B4:73:93:B1:CF:2D:D5:3C:B1:76:F8:ED
X509v3 Authority Key Identifier:
keyid:96:17:27:13:0C:25:99:90:B0:05:EA:94:33:B5:7E:07:92:F1:AF:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhcnEwwlmZCwBeqUM7V-B5LxrxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d7:06:98:2e:31:b9:09:c6:91:63:9a:c3:78:0d:bc:84:6f:
6c:ce:de:48:19:cb:b2:49:22:6d:0e:ee:ca:c4:e2:0a:35:90:
97:86:d9:1d:d4:29:94:c6:64:65:bb:c2:76:aa:f6:59:6b:27:
da:18:ff:f3:97:16:7e:ea:b2:1c:6b:be:85:02:08:64:80:51:
98:99:e7:4f:ed:6d:d8:9f:4f:ff:b8:ce:15:6e:96:40:ef:89:
35:09:1e:13:6f:c7:ce:2c:92:82:da:e2:91:da:d4:77:28:9e:
f3:67:6f:43:3d:71:96:09:b6:98:0f:7e:8a:5a:9f:7e:e7:8e:
8b:39:0e:e6:77:75:fd:07:5b:d9:a6:74:ce:29:dd:49:8c:8a:
09:30:28:6f:64:5d:11:36:e2:29:ab:6f:10:ef:cb:39:c8:d6:
33:fd:8c:c5:b5:21:eb:f4:38:45:68:be:9e:6d:08:28:82:d3:
29:cc:8d:a8:f6:a9:0e:52:c6:0c:f1:8c:ff:18:d5:2a:50:a5:
c6:50:d4:c1:45:ae:47:c4:6d:84:29:c8:04:71:c0:da:e3:74:
5b:3f:00:35:f6:da:3c:ee:bd:21:2a:3d:0d:6e:af:00:b6:9b:
cd:9c:00:f0:6d:25:6b:22:80:01:f5:e6:a4:60:cb:08:e0:4c:
98:30:9f:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGEUVTgVhcZjyupPeIcxpRaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MTcyNzEzMGMyNTk5OTBiMDA1ZWE5NDMzYjU3ZTA3OTJm
MWFmMTUwHhcNMjYxMDI4MjEwMTI0WhcNMjYxMDI5MjEwMTI0WjAzMTEwLwYDVQQD
EyhkMDZhYzNhMDYwMGYyNTljYjQ3MzkzYjFjZjJkZDUzY2IxNzZmOGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukmoLGdL2YHQNGCNxVQ7IOBivC6x
D7PmkynSASvav6cLL7izyNgiqPxq2bbx5rbSYwpzN+Vq1eGFw4eWMrQe1srP8mN+
g4Mf3BSZQhoBwzJ4N87yhkFY00E9Q3F87bChbLiAVb0TmRnD9rWEQA5lXkrpn9hc
14ro82/FmsFMQaLKQCe3r8TUDZcvedkdwi/8QQ6GINWjD4gBkFFqNqvTESBAgt+X
aOgt8ODilyNb1n5SoWNeVM7lxN0n8BntvsC8xcvCtl73Xq5IiKANIkH7/sNar0nm
UfYg2dNAWIIuw/edC+3za3SZTse7IEhrSnATrv1r1eFysSFD0dfMuN+IUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBqw6BgDyWctHOTsc8t1TyxdvjtMB8GA1UdIwQY
MBaAFJYXJxMMJZmQsAXqlDO1fgeS8a8VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGhjbkV3d2xtWkN3QmVxVU03Vi1CNUx4cnhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81OGRmMDAtOWRkYi00ZmQ1LWI2NWMt
NmNmZGMyODc3NTE4LzEvbGhjbkV3d2xtWkN3QmVxVU03Vi1CNUx4cnhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC81OGRmMDAtOWRkYi00ZmQ1LWI2NWMtNmNmZGMyODc3NTE4
LzEvbGhjbkV3d2xtWkN3QmVxVU03Vi1CNUx4cnhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNcGmC4x
uQnGkWOaw3gNvIRvbM7eSBnLskkibQ7uysTiCjWQl4bZHdQplMZkZbvCdqr2WWsn
2hj/85cWfuqyHGu+hQIIZIBRmJnnT+1t2J9P/7jOFW6WQO+JNQkeE2/HziySgtri
kdrUdyie82dvQz1xlgm2mA9+ilqffueOizkO5nd1/Qdb2aZ0zindSYyKCTAob2Rd
ETbiKatvEO/LOcjWM/2MxbUh6/Q4RWi+nm0IKILTKcyNqPapDlLGDPGM/xjVKlCl
xlDUwUWuR8RthCnIBHHA2uN0Wz8ANfbaPO69ISo9DW6vALabzZwA8G0layKAAfXm
pGDLCOBMmDCfYw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 22:50:50 2026 by rpki-client