Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
File: LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft (raw, json)
Hash identifier: 4QznFRUuHtsRwg6PsqWs8ODag8s+01P35jM5yhj6fBU=
Subject key identifier: 47:27:21:0C:22:5D:0E:8D:C2:11:1D:41:D5:C3:90:08:3D:71:43:E5
Authority key identifier: 2E:18:10:D5:C9:11:B4:A8:10:73:FA:E6:38:97:1B:57:7D:D7:A6:42
Certificate issuer: /CN=2e1810d5c911b4a81073fae638971b577dd7a642
Certificate serial: 019D3865ABD06D877EA4AC9D66E435362648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
Manifest number: 135B
Signing time: Sun 29 Mar 2026 07:01:20 +0000
Manifest this update: Sun 29 Mar 2026 07:01:20 +0000
Manifest next update: Mon 30 Mar 2026 07:01:20 +0000
Files and hashes: 1: LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl (hash: iXcy9GmZ6X9/tauCJyUjWhsFX6J2bBFbph+T+9KNKCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ab:d0:6d:87:7e:a4:ac:9d:66:e4:35:36:26:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1810d5c911b4a81073fae638971b577dd7a642
Validity
Not Before: Mar 29 07:01:20 2026 GMT
Not After : Mar 30 07:01:20 2026 GMT
Subject: CN=4727210c225d0e8dc2111d41d5c390083d7143e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:e0:6b:9f:a5:95:c4:2c:d0:38:e4:db:cb:
7b:5f:c1:73:e0:a5:46:3f:b4:12:cb:a6:78:3c:0f:
44:b9:97:27:8d:19:2f:08:e6:9c:95:27:44:65:62:
5e:c4:24:d5:7d:b9:c9:7f:83:36:37:71:5f:f4:70:
7b:9f:87:27:42:ce:52:f2:e8:ce:e2:76:08:22:89:
0b:e0:f4:18:d0:2d:72:2b:4d:be:8a:50:d5:f5:eb:
53:55:1a:37:19:26:01:8f:9f:a1:12:68:e6:5d:e3:
0f:4a:56:d8:9b:18:c8:f9:5a:ba:b4:98:08:0e:f5:
53:2a:1b:68:27:5a:14:d7:01:e5:c6:dd:43:a5:3e:
7b:c4:ee:13:b7:05:d4:49:de:61:1e:34:36:78:29:
90:3b:b6:69:9e:c7:c7:26:8d:12:96:a2:bc:b3:91:
b1:94:51:fc:51:8f:cf:78:6a:05:fe:6e:62:99:25:
bd:a1:c0:11:eb:28:c4:ac:36:f9:14:3b:49:26:45:
69:a5:c9:a0:5a:19:b9:c4:05:04:0a:fd:40:c7:d6:
a2:c5:85:a9:0c:15:69:f8:b4:20:81:ed:1c:09:eb:
d1:5c:5f:dc:35:36:d4:9d:8b:3f:9d:04:38:57:20:
43:5a:c5:00:71:a4:41:65:67:8b:28:6b:9f:84:12:
78:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:27:21:0C:22:5D:0E:8D:C2:11:1D:41:D5:C3:90:08:3D:71:43:E5
X509v3 Authority Key Identifier:
keyid:2E:18:10:D5:C9:11:B4:A8:10:73:FA:E6:38:97:1B:57:7D:D7:A6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:26:92:14:84:d9:64:24:74:f5:d2:3c:4b:24:11:22:d7:a7:
07:da:47:f8:65:10:39:34:c6:40:5a:ca:27:2a:27:19:54:5c:
c2:f1:8a:a1:d7:56:b2:f6:d0:77:e5:f8:f2:57:f9:ff:6b:bf:
6d:ea:3f:91:fb:ba:c0:d0:93:55:67:12:82:75:18:60:0d:26:
ed:8e:42:47:23:a5:32:b2:a7:c6:68:25:d8:49:79:46:a9:dd:
1b:1e:64:c0:a0:c0:f4:e4:73:a8:84:4d:b1:93:b5:f8:55:d5:
5d:58:53:a8:bf:d2:6e:37:4f:f8:41:7b:0a:aa:ba:fc:77:86:
c5:b7:00:ef:1a:51:30:ba:d9:05:a9:8b:17:4e:6a:78:13:ef:
e6:e0:3c:94:ae:7b:70:bd:2b:58:4f:04:98:14:c3:cf:a4:f2:
a5:2f:c3:70:20:b8:ed:9d:71:06:08:a5:6b:16:e2:89:52:8b:
b3:59:93:3c:ad:f8:54:12:f7:a6:4d:04:af:63:7a:1f:26:0b:
8e:b6:d9:94:78:38:92:2b:60:cd:77:03:a6:60:5b:2d:8e:91:
20:d0:e7:2f:0f:ac:c2:45:c6:81:d4:ad:8b:ed:cb:10:3b:ad:
1e:76:fb:5b:19:48:21:b8:8b:65:1b:65:2f:4b:0c:07:d7:c8:
72:e0:6d:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZavQbYd+pKydZuQ1NiZIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMTgxMGQ1YzkxMWI0YTgxMDczZmFlNjM4OTcxYjU3N2Rk
N2E2NDIwHhcNMjYwMzI5MDcwMTIwWhcNMjYwMzMwMDcwMTIwWjAzMTEwLwYDVQQD
Eyg0NzI3MjEwYzIyNWQwZThkYzIxMTFkNDFkNWMzOTAwODNkNzE0M2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd3ga5+llcQs0Djk28t7X8Fz4KVG
P7QSy6Z4PA9EuZcnjRkvCOaclSdEZWJexCTVfbnJf4M2N3Ff9HB7n4cnQs5S8ujO
4nYIIokL4PQY0C1yK02+ilDV9etTVRo3GSYBj5+hEmjmXeMPSlbYmxjI+Vq6tJgI
DvVTKhtoJ1oU1wHlxt1DpT57xO4TtwXUSd5hHjQ2eCmQO7ZpnsfHJo0SlqK8s5Gx
lFH8UY/PeGoF/m5imSW9ocAR6yjErDb5FDtJJkVppcmgWhm5xAUECv1Ax9aixYWp
DBVp+LQgge0cCevRXF/cNTbUnYs/nQQ4VyBDWsUAcaRBZWeLKGufhBJ4kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcnIQwiXQ6NwhEdQdXDkAg9cUPlMB8GA1UdIwQY
MBaAFC4YENXJEbSoEHP65jiXG1d916ZCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGhnUTFja1J0S2dRY19ybU9KY2JWMzNYcGtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy82OGNlNTEtYmQzZS00Y2QxLWJjYzIt
ZGQyYTU4NGE2MmJiLzEvTGhnUTFja1J0S2dRY19ybU9KY2JWMzNYcGtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy82OGNlNTEtYmQzZS00Y2QxLWJjYzItZGQyYTU4NGE2MmJi
LzEvTGhnUTFja1J0S2dRY19ybU9KY2JWMzNYcGtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnyaSFITZ
ZCR09dI8SyQRItenB9pH+GUQOTTGQFrKJyonGVRcwvGKoddWsvbQd+X48lf5/2u/
beo/kfu6wNCTVWcSgnUYYA0m7Y5CRyOlMrKnxmgl2El5RqndGx5kwKDA9ORzqIRN
sZO1+FXVXVhTqL/SbjdP+EF7Cqq6/HeGxbcA7xpRMLrZBamLF05qeBPv5uA8lK57
cL0rWE8EmBTDz6TypS/DcCC47Z1xBgilaxbiiVKLs1mTPK34VBL3pk0Er2N6HyYL
jrbZlHg4kitgzXcDpmBbLY6RINDnLw+swkXGgdSti+3LEDutHnb7WxlIIbiLZRtl
L0sMB9fIcuBthg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:21 2026 by rpki-client