Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
File: LhEuLGHSqA58Q4XGCFjJHXXzHns.mft (raw, json)
Hash identifier: pZp6dA/PcfXkB+Q/L5BcPB0fhMBv3ddBraxdMz3ug6A=
Subject key identifier: B9:E4:6D:06:73:A9:35:D2:C6:93:B8:D9:D4:55:38:9B:84:FC:2A:00
Authority key identifier: 2E:11:2E:2C:61:D2:A8:0E:7C:43:85:C6:08:58:C9:1D:75:F3:1E:7B
Certificate issuer: /CN=2e112e2c61d2a80e7c4385c60858c91d75f31e7b
Certificate serial: 019D3941912E3EC0EB5F798E0D12A55ECEBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
Manifest number: 05B7
Signing time: Sun 29 Mar 2026 11:01:31 +0000
Manifest this update: Sun 29 Mar 2026 11:01:31 +0000
Manifest next update: Mon 30 Mar 2026 11:01:31 +0000
Files and hashes: 1: 1VDI8LOlZotQXEwbdB6SzbnLPM4.roa (hash: l27UrnMvu8nzJebzCXh2pQXrYsMLQuNNu0v0Sq6JVOs=)
2: LhEuLGHSqA58Q4XGCFjJHXXzHns.crl (hash: dfAp6DV97JsKNKkHFskJ4tuWX5E/Vu5oQNl8daPMr74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:91:2e:3e:c0:eb:5f:79:8e:0d:12:a5:5e:ce:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e112e2c61d2a80e7c4385c60858c91d75f31e7b
Validity
Not Before: Mar 29 11:01:31 2026 GMT
Not After : Mar 30 11:01:31 2026 GMT
Subject: CN=b9e46d0673a935d2c693b8d9d455389b84fc2a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:92:d8:ea:5c:53:6e:3d:c4:7e:b9:d8:f5:08:
08:45:09:79:69:aa:a6:45:0a:5e:1c:57:a6:0a:17:
4e:3b:8d:fc:cd:d1:4b:bb:e9:9a:58:77:87:df:d0:
cf:5a:a8:52:55:2d:78:2c:b6:38:40:34:3c:bb:8c:
82:fe:c7:33:9e:1c:d6:33:64:55:78:72:a9:43:b3:
cb:b2:1d:cd:ff:53:3f:f2:0f:be:47:ad:39:35:e9:
40:77:e4:7a:cf:5e:b0:6f:c8:83:db:32:d2:4d:0f:
0e:b7:1d:57:67:9c:0b:b8:82:9b:79:6c:2e:0c:ee:
84:ea:63:70:25:62:dc:c9:3e:9a:c4:8a:38:cb:9e:
4a:92:87:02:c6:e0:c3:14:f8:3e:19:50:cc:0f:93:
57:61:84:09:e2:89:c0:1b:eb:85:3e:1c:ed:4a:87:
8a:1c:6c:83:63:92:48:4d:da:54:39:c6:6a:68:55:
1c:51:62:1f:ca:b8:42:31:31:47:23:eb:9e:64:57:
07:dd:25:84:c4:ea:fd:d4:18:07:89:f4:eb:73:ec:
f1:9a:f2:54:f8:4b:2c:33:4c:30:9b:aa:8b:8e:ba:
c5:40:b9:b7:ca:b0:01:1b:e4:bd:3b:5d:4a:5b:5b:
b6:4d:84:2b:8b:a5:11:bf:05:82:e0:ea:ca:15:78:
f0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E4:6D:06:73:A9:35:D2:C6:93:B8:D9:D4:55:38:9B:84:FC:2A:00
X509v3 Authority Key Identifier:
keyid:2E:11:2E:2C:61:D2:A8:0E:7C:43:85:C6:08:58:C9:1D:75:F3:1E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9c:06:53:a4:ea:5d:91:c3:4b:a3:07:7f:c4:51:db:67:28:
fe:73:5b:fb:2a:1e:50:c8:07:3f:c4:ed:56:7f:88:c4:2f:8f:
b4:54:53:6b:b6:2a:f1:e1:78:7d:10:3a:05:1c:3d:6a:a3:e8:
2b:1d:66:78:7e:31:52:16:c9:26:e2:82:7e:43:43:f8:fa:c4:
8a:96:33:b7:c4:38:cb:94:b9:e6:3b:71:df:6d:91:9b:0d:17:
d4:f6:6d:a7:65:8d:dd:0f:ec:a3:3f:86:48:76:24:85:ad:44:
76:15:ba:f2:e2:5a:ad:93:ae:7f:61:90:71:c4:27:48:3d:1b:
ff:6e:5a:8b:81:ac:98:5c:47:54:93:71:8e:fc:db:32:eb:16:
4d:a8:bc:b1:bc:e6:2c:53:a0:a8:69:ee:ad:91:76:55:13:ee:
1a:52:70:38:b8:bb:e4:e8:5f:98:5e:b9:aa:3e:ae:16:10:15:
0e:c6:be:b9:ff:a5:9c:b9:8e:34:e7:56:83:b7:0e:9b:89:8e:
a8:fd:e4:03:8b:04:f5:3a:57:69:bb:75:ac:fb:5a:59:d0:53:
31:1e:c8:22:fc:35:ad:6d:c0:09:5c:88:63:08:79:3e:7e:be:
83:d9:88:f5:ba:e3:1c:e5:c4:d1:0d:71:36:a7:fb:27:4d:31:
d2:07:6f:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QZEuPsDrX3mODRKlXs69MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMTEyZTJjNjFkMmE4MGU3YzQzODVjNjA4NThjOTFkNzVm
MzFlN2IwHhcNMjYwMzI5MTEwMTMxWhcNMjYwMzMwMTEwMTMxWjAzMTEwLwYDVQQD
EyhiOWU0NmQwNjczYTkzNWQyYzY5M2I4ZDlkNDU1Mzg5Yjg0ZmMyYTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25LY6lxTbj3EfrnY9QgIRQl5aaqm
RQpeHFemChdOO438zdFLu+maWHeH39DPWqhSVS14LLY4QDQ8u4yC/scznhzWM2RV
eHKpQ7PLsh3N/1M/8g++R605NelAd+R6z16wb8iD2zLSTQ8Otx1XZ5wLuIKbeWwu
DO6E6mNwJWLcyT6axIo4y55KkocCxuDDFPg+GVDMD5NXYYQJ4onAG+uFPhztSoeK
HGyDY5JITdpUOcZqaFUcUWIfyrhCMTFHI+ueZFcH3SWExOr91BgHifTrc+zxmvJU
+EssM0wwm6qLjrrFQLm3yrABG+S9O11KW1u2TYQri6URvwWC4OrKFXjwwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnkbQZzqTXSxpO42dRVOJuE/CoAMB8GA1UdIwQY
MBaAFC4RLixh0qgOfEOFxghYyR118x57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGhFdUxHSFNxQTU4UTRYR0NGakpIWFh6SG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mNzllOGUtNjYyNS00NWU5LWJiOWEt
OTZkMjI4NjFhOTIyLzEvTGhFdUxHSFNxQTU4UTRYR0NGakpIWFh6SG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mNzllOGUtNjYyNS00NWU5LWJiOWEtOTZkMjI4NjFhOTIy
LzEvTGhFdUxHSFNxQTU4UTRYR0NGakpIWFh6SG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpwGU6Tq
XZHDS6MHf8RR22co/nNb+yoeUMgHP8TtVn+IxC+PtFRTa7Yq8eF4fRA6BRw9aqPo
Kx1meH4xUhbJJuKCfkND+PrEipYzt8Q4y5S55jtx322Rmw0X1PZtp2WN3Q/soz+G
SHYkha1EdhW68uJarZOuf2GQccQnSD0b/25ai4GsmFxHVJNxjvzbMusWTai8sbzm
LFOgqGnurZF2VRPuGlJwOLi75OhfmF65qj6uFhAVDsa+uf+lnLmONOdWg7cOm4mO
qP3kA4sE9TpXabt1rPtaWdBTMR7IIvw1rW3ACVyIYwh5Pn6+g9mI9brjHOXE0Q1x
Nqf7J00x0gdvlg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:07 2026 by rpki-client