Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
File: LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft (raw, json)
Hash identifier: Hakfxkbcb5J5ToDafSCxeBZVHLLBAEQMFa598fXHygs=
Subject key identifier: 44:74:E3:E1:F1:EC:EF:DB:0F:81:46:34:9F:EA:DC:A2:E8:ED:FD:A2
Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
Certificate issuer: /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Certificate serial: 019D38661FA3649AD4DC77364FCEF34EA942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 07:01:49 +0000
Manifest this update: Sun 29 Mar 2026 07:01:49 +0000
Manifest next update: Mon 30 Mar 2026 07:01:49 +0000
Files and hashes: 1: LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl (hash: NngpX4so18e9tggm2929PjZteWgDwPle/pRedKibo5s=)
2: PhCS65LruV3U6b8Ca6Z7Oo-MbY0.roa (hash: RoukLN17HEVFuKCJd4uqal1toMgfNC1RsX/IX0RX0fY=)
3: ZR8BONNdXKWp1MwsG4mK6VjTQHs.roa (hash: /U4sk1hEfw6QielSTTSNVHXW385f6r5x3U3PzQsHic0=)
4: _lZzPK9uWMwoSBp8I6Oz0H5otFM.roa (hash: HhqN6YMYlZ3P1sgosME+uE6us2GmXOviN/kysVznFCI=)
5: qVl9UPtcOfv2GnXxXOewgnePOCY.roa (hash: Ls9yx6jQRN+6skTSMeFCiw+2fZmjJYWCP94aDC2pEzQ=)
6: rdJ8xXk5mnbp3JUsMack9bv5xiI.roa (hash: D2xipsYNPUahyWKXqjJrN51ikNliYwMKQLyig70LUbA=)
7: ww1PQxdbKvTQH6rQL3Nf89Au6Os.roa (hash: qw3dBH90auYZSvCUgIiKsoKHtmICDEf0vkVYNxSJ9/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:1f:a3:64:9a:d4:dc:77:36:4f:ce:f3:4e:a9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Validity
Not Before: Mar 29 07:01:49 2026 GMT
Not After : Mar 30 07:01:49 2026 GMT
Subject: CN=4474e3e1f1ecefdb0f8146349feadca2e8edfda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:68:55:60:1b:c3:f8:a9:f0:f2:66:e4:47:
81:a5:d9:9f:ca:a9:1a:dc:b7:7a:e2:37:57:6e:28:
49:31:41:16:a9:7e:2a:4a:ee:33:8e:65:ed:a8:e2:
ac:15:bb:96:a5:d0:14:18:8b:5e:54:f6:76:5f:26:
8a:53:a7:13:4f:56:f2:23:cc:5c:37:ed:8a:58:01:
1a:49:2f:81:61:bd:c6:c1:83:05:a8:1f:eb:ad:c8:
51:4a:14:3b:8f:9e:2d:f7:85:4f:2e:8f:85:69:3f:
6a:0c:54:44:50:bf:02:79:91:5c:f7:98:a4:8d:dc:
6f:60:d0:a0:8a:26:21:cd:09:c1:e1:5e:08:c2:0a:
09:26:32:31:9f:cd:52:17:10:13:44:0e:cc:96:ae:
b4:90:8e:6d:a1:a7:00:c1:0c:0f:65:c1:3c:7b:6c:
8f:0a:3f:5c:de:b5:c9:8a:d8:49:48:04:1d:6b:51:
32:fb:c9:d7:15:32:ef:81:3f:a8:f4:56:a3:15:45:
31:10:95:7c:df:b8:2c:06:a8:cf:14:0b:ef:8b:a0:
2a:63:59:e4:fa:46:94:db:38:cc:be:ed:19:98:7e:
8e:e3:15:ea:6d:24:4a:a4:b0:71:6e:f3:74:9a:57:
a6:7d:99:4f:0c:f5:74:03:ef:9e:49:e7:22:40:9d:
be:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:74:E3:E1:F1:EC:EF:DB:0F:81:46:34:9F:EA:DC:A2:E8:ED:FD:A2
X509v3 Authority Key Identifier:
keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:91:e8:5d:56:dd:bc:3a:dd:1f:68:80:54:02:71:77:cc:af:
3b:e3:e8:52:6b:01:87:84:d3:69:1d:fc:5f:48:65:c7:69:73:
85:13:20:59:1e:55:d7:83:3b:6a:3c:7f:bc:5d:f9:8f:27:dc:
1a:d6:a7:3f:38:ab:8f:45:29:65:d6:d1:8d:3f:d1:de:ef:12:
d2:70:e8:e3:20:42:76:8a:2a:76:fd:f6:15:25:91:66:7d:a6:
62:6e:26:a3:a9:d6:71:bd:5d:4e:38:52:f2:5e:fc:20:52:aa:
07:fd:a6:64:6c:14:44:4c:32:1e:65:00:dc:31:26:08:9f:40:
d2:d9:64:e4:49:1e:72:69:68:5d:70:7f:94:f9:8b:a7:ad:19:
3f:ef:83:c8:2f:dd:76:37:c9:68:26:2f:35:d9:62:89:85:32:
77:b5:7f:e6:db:8e:24:82:ca:de:4b:8f:47:d5:2b:47:74:4f:
15:ef:ec:80:79:4f:a3:b2:d8:80:84:0b:2a:4e:19:d7:a4:39:
16:38:22:37:af:b7:fe:ea:63:26:24:2b:6b:7b:e2:9e:9e:86:
ed:c8:19:2e:c1:a0:c7:b6:10:1f:cc:57:8e:f3:de:0d:8e:45:
91:96:51:81:1b:8f:a4:20:ea:a8:e6:95:dd:aa:8e:b2:09:37:
b0:36:a7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:41 2026 by rpki-client