Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fe4f03-033d-493a-8176-006e52ff77df/1/LhyU6i-JbBvfcG8eHDxZpMavwiw.mft
File: LhyU6i-JbBvfcG8eHDxZpMavwiw.mft (raw, json)
Hash identifier: VHYTxiHMYDXoX7Af3pdXXpADbf0SLYGsq7SYLEN5tq8=
Subject key identifier: 73:6C:AF:15:6A:43:79:5D:D6:1D:E7:2C:01:96:22:C8:63:17:6F:7B
Authority key identifier: 2E:1C:94:EA:2F:89:6C:1B:DF:70:6F:1E:1C:3C:59:A4:C6:AF:C2:2C
Certificate issuer: /CN=2e1c94ea2f896c1bdf706f1e1c3c59a4c6afc22c
Certificate serial: 019D397795E9D2883B65B65957900B1C3F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhyU6i-JbBvfcG8eHDxZpMavwiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fe4f03-033d-493a-8176-006e52ff77df/1/LhyU6i-JbBvfcG8eHDxZpMavwiw.mft
Manifest number: 9D
Signing time: Sun 29 Mar 2026 12:00:31 +0000
Manifest this update: Sun 29 Mar 2026 12:00:31 +0000
Manifest next update: Mon 30 Mar 2026 12:00:31 +0000
Files and hashes: 1: LhyU6i-JbBvfcG8eHDxZpMavwiw.crl (hash: E99aEcC8C3DOru6U4X0P2KCaPnIAusX87H4Yapjizaw=)
2: nC0BklgM5Gqb773_4KE7YEJa48o.roa (hash: iFvusL2e+CmA5BNVVcVR79wn1MKJILkJWhtD9a5znMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fe4f03-033d-493a-8176-006e52ff77df/1/LhyU6i-JbBvfcG8eHDxZpMavwiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/fe4f03-033d-493a-8176-006e52ff77df/1/LhyU6i-JbBvfcG8eHDxZpMavwiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhyU6i-JbBvfcG8eHDxZpMavwiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:95:e9:d2:88:3b:65:b6:59:57:90:0b:1c:3f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1c94ea2f896c1bdf706f1e1c3c59a4c6afc22c
Validity
Not Before: Mar 29 12:00:31 2026 GMT
Not After : Mar 30 12:00:31 2026 GMT
Subject: CN=736caf156a43795dd61de72c019622c863176f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:34:b3:b8:4a:ca:d5:53:ab:df:70:80:3a:47:
6c:52:75:dd:a3:27:00:d8:c3:a6:a4:3c:e0:f4:4b:
8d:69:e4:fb:36:f0:92:0e:f0:2c:2b:4e:63:a8:d0:
85:0c:e5:75:c4:2f:a9:14:32:17:9a:ed:d3:36:ae:
e0:d7:94:d8:ff:10:9e:57:17:96:66:b8:28:cf:6f:
f2:52:7d:da:98:f9:17:b3:fb:84:c1:c7:c1:a9:9e:
1d:06:6c:ba:57:56:5d:b3:33:b9:b9:f0:27:53:80:
9d:95:50:2c:4f:cb:e4:3b:7a:02:ea:90:94:9f:4e:
18:8b:3c:c1:5c:7c:10:49:5b:33:40:17:96:01:42:
a3:4a:ed:20:fe:66:e6:f2:9e:df:30:2e:69:27:a0:
2b:82:c6:b4:96:ee:c2:73:2b:00:88:b1:66:ba:9b:
0f:f5:a5:03:23:59:e6:4a:ba:12:9a:76:d0:91:1f:
06:e9:7c:37:cb:bc:ee:23:6a:51:27:ab:1e:d3:97:
2a:b1:20:6e:9e:f2:5d:16:92:bf:d1:3c:06:5e:0d:
dc:7c:a6:cc:32:c2:f6:c5:94:9c:7e:1e:37:7e:8b:
f7:3e:a3:b3:c3:3c:d6:d5:6d:b2:fc:c0:9b:a4:46:
b7:27:a1:14:cc:36:18:8a:d7:e7:ad:ac:fa:2e:9c:
68:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6C:AF:15:6A:43:79:5D:D6:1D:E7:2C:01:96:22:C8:63:17:6F:7B
X509v3 Authority Key Identifier:
keyid:2E:1C:94:EA:2F:89:6C:1B:DF:70:6F:1E:1C:3C:59:A4:C6:AF:C2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhyU6i-JbBvfcG8eHDxZpMavwiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fe4f03-033d-493a-8176-006e52ff77df/1/LhyU6i-JbBvfcG8eHDxZpMavwiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fe4f03-033d-493a-8176-006e52ff77df/1/LhyU6i-JbBvfcG8eHDxZpMavwiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8e:cd:e3:e4:22:9b:81:88:a4:98:8f:ed:f2:a6:2e:1b:08:
e1:29:e7:7e:45:d7:61:60:8b:b5:92:d9:14:ff:77:53:6a:aa:
f3:57:1f:d8:d1:94:9b:25:54:04:ac:3c:42:2e:90:94:a1:8c:
52:04:45:75:4f:86:2d:e0:57:6d:4c:b1:08:1d:f3:5b:0b:4f:
e7:05:b6:1e:ef:ae:39:b4:29:ac:1f:c9:69:e1:15:2c:78:5a:
48:e9:ab:3d:ac:7b:b6:c8:c6:57:25:98:55:1c:00:62:3d:8d:
dd:ec:6f:1b:64:00:f5:27:83:35:ff:30:b4:7b:4d:e9:5f:0b:
43:f9:20:ea:a1:7f:f2:eb:02:24:a7:f6:20:5d:c5:39:97:ac:
65:b3:03:7d:45:15:50:84:2b:67:b9:6e:0d:1f:dd:72:cc:7b:
81:90:62:f7:e4:3c:b4:ff:cf:df:8d:21:56:2a:9c:89:5a:80:
e3:5b:d0:21:34:ec:6c:a2:d5:0a:17:bf:db:69:25:f6:10:52:
00:e5:9d:26:60:9a:ee:f6:77:a5:34:9f:4d:13:58:e2:35:f7:
66:3b:d7:c1:5c:eb:b4:0a:b7:4d:0f:9f:fc:8e:f8:e6:0f:a1:
55:76:0e:8c:1e:4a:c9:96:dc:32:10:bf:b2:80:82:4b:e1:7d:
2a:59:88:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:20 2026 by rpki-client