Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
File: lLHL_0vZcPon_e_Uv2iwLWjSud0.mft (raw, json)
Hash identifier: Y2/XEOzBX7N6q7tDZMZ6JVzKQfwivzvs/IwnDnF45QE=
Subject key identifier: B1:B3:26:0E:E8:A5:C3:93:A3:41:60:5A:8C:E9:AB:E6:CD:0E:00:7B
Authority key identifier: 94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
Certificate issuer: /CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Certificate serial: 019D37F76EE039BD0EA593BCE587CD5FCB30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
Manifest number: 184B
Signing time: Sun 29 Mar 2026 05:00:55 +0000
Manifest this update: Sun 29 Mar 2026 05:00:55 +0000
Manifest next update: Mon 30 Mar 2026 05:00:55 +0000
Files and hashes: 1: Nmcc09Xt79K0jETaPBL1LxCEW6o.roa (hash: 5YHh9vd/uVykgxuhDt7Fxzyb5DssF7KZ7qdP7IjIZZU=)
2: lLHL_0vZcPon_e_Uv2iwLWjSud0.crl (hash: jZ1JVsAUxrfqR73FRv5AWfQ9hd1moIEQ7igvrWWj7ts=)
3: mMaNrGQwPlqEufcbOdI_Rb_6RwQ.roa (hash: 1np7IvcHjiOYMR/ORA7UoY/R2p5vVot2cY5J1yx4uw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:6e:e0:39:bd:0e:a5:93:bc:e5:87:cd:5f:cb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Validity
Not Before: Mar 29 05:00:55 2026 GMT
Not After : Mar 30 05:00:55 2026 GMT
Subject: CN=b1b3260ee8a5c393a341605a8ce9abe6cd0e007b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:05:0b:53:9f:12:bf:9e:44:f7:c1:5c:dd:6a:
55:e3:d1:58:37:58:ac:f5:87:50:ff:ac:a4:2f:6e:
68:fc:7f:0d:25:63:7d:99:bf:cf:61:31:41:e9:68:
2c:f3:18:3e:67:ab:31:69:61:97:27:14:60:19:ea:
87:8a:6f:f5:4f:16:00:96:dd:61:45:30:80:7c:e2:
42:29:37:e2:01:a8:e1:5a:33:78:cf:61:96:74:23:
9b:a7:13:8c:c1:43:8f:51:7c:78:c8:3d:33:13:84:
0b:48:ba:6d:8c:6c:52:92:3b:29:2e:ea:99:c5:28:
5f:47:c1:9f:e1:52:ca:fe:ec:e2:25:ef:b2:fa:c6:
aa:e2:5c:22:5c:b1:31:26:25:9e:4a:ec:5f:e4:45:
71:97:1c:1b:7b:09:a1:b1:d7:53:36:f6:fb:45:47:
0e:b0:fd:29:1a:68:cd:b8:9e:cc:4e:41:38:74:d4:
88:f5:b2:43:e3:82:5d:e7:00:bc:26:60:17:63:56:
cc:94:77:ec:50:27:78:1f:3a:98:19:a5:4d:2c:13:
55:72:c3:42:c2:b6:9b:42:5f:00:79:ae:aa:0f:99:
c0:4c:f2:75:48:ce:c3:00:99:fc:22:7d:6d:ea:0a:
91:e7:42:24:e0:46:d1:b5:dc:5e:3a:43:d1:fd:e2:
5f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B3:26:0E:E8:A5:C3:93:A3:41:60:5A:8C:E9:AB:E6:CD:0E:00:7B
X509v3 Authority Key Identifier:
keyid:94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4a:bc:60:be:bb:1d:e3:d6:06:21:b3:4c:bb:1a:b3:3c:6f:
8b:00:64:01:68:4f:fd:3f:ba:04:8f:48:39:5d:d2:bb:36:9a:
a3:8c:20:fb:05:cf:5f:db:36:3c:61:26:8a:6b:98:62:1e:ce:
81:a5:4e:27:6f:77:32:2b:6b:b7:82:33:e2:f7:16:86:a1:22:
de:2f:69:fd:13:c3:35:63:db:88:60:23:63:cf:06:c8:36:eb:
ac:0f:68:b2:58:e4:e2:1c:7b:86:4e:74:13:22:ae:ef:14:96:
80:45:60:49:73:6d:13:a4:43:87:f2:9d:94:7e:cc:73:e7:ff:
a8:c5:a6:6b:11:10:cd:64:1c:0c:fa:8e:72:09:a9:d7:a2:f5:
fe:6d:24:a8:2c:cd:6f:6c:55:8a:17:9a:68:4b:a3:56:7c:2d:
50:4c:fc:d9:85:67:63:a4:79:91:83:78:9f:ce:20:16:4d:fc:
16:a0:9c:65:3e:4e:17:e2:4b:4c:7f:04:62:0f:8a:06:d6:8d:
29:df:fc:d2:d5:5e:05:13:04:6c:e6:84:a6:79:59:2f:7b:ce:
7d:fd:c9:3c:78:b2:13:69:2d:2c:0d:30:60:f1:cb:27:bf:ec:
63:fe:9b:9f:52:d8:01:53:af:2f:86:65:08:1f:8e:a0:8a:2a:
82:3e:09:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:35 2026 by rpki-client