Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
File: LHPvCB4tVzHERXQ5c6lqv96xQss.mft (raw, json)
Hash identifier: pnWwmbyWPiPQOToaMG68GskyPB7sNCnmoXhAL98jcL4=
Subject key identifier: 32:58:A5:C9:BE:C4:53:07:3C:40:4E:3E:7F:EE:2A:7D:B9:CD:46:DC
Authority key identifier: 2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
Certificate issuer: /CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Certificate serial: 019D3A1CD698FBF561336EE48F4C2E6E70B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
Manifest number: 098A
Signing time: Sun 29 Mar 2026 15:01:01 +0000
Manifest this update: Sun 29 Mar 2026 15:01:01 +0000
Manifest next update: Mon 30 Mar 2026 15:01:01 +0000
Files and hashes: 1: CvtOzQgg0yU5uNiDJv9sRE54F7w.roa (hash: /RWVX+MB4g62z+EInyoLc3Ee/IcQswcuywMSa8ZRlSI=)
2: LHPvCB4tVzHERXQ5c6lqv96xQss.crl (hash: oQOkt25Owb8gJztaRGonInYH2n5muU0wrTzryk0tF70=)
3: elqT59ZWrAInz7TAGHCfesbdKLo.roa (hash: MtloAfg5PV+ZmF39WN4IskuqHMHTWwP8zag9ZXLDmqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:d6:98:fb:f5:61:33:6e:e4:8f:4c:2e:6e:70:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Validity
Not Before: Mar 29 15:01:01 2026 GMT
Not After : Mar 30 15:01:01 2026 GMT
Subject: CN=3258a5c9bec453073c404e3e7fee2a7db9cd46dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:58:99:90:c1:c9:22:34:56:cd:14:61:6b:1e:
c1:3a:18:38:bc:31:25:61:f1:e1:61:75:af:03:c1:
25:a2:a5:e6:fe:1c:e4:e5:cf:b8:d4:f9:e5:39:c9:
12:f7:c7:54:6e:ad:cf:6b:50:aa:97:f2:36:e7:e5:
fe:a0:6a:1e:e3:74:db:8f:7a:76:f1:82:e4:31:ac:
76:0e:5d:e1:9e:f6:ca:b0:11:9c:95:b1:1e:e3:38:
bb:55:1a:7b:2b:a0:3a:09:6a:01:ff:54:7f:36:d5:
e4:1b:8c:bb:31:20:11:b1:95:c8:35:42:64:26:33:
ce:d2:16:28:3a:ff:fa:80:ae:48:09:ec:b9:3b:5a:
66:aa:d7:eb:97:48:ff:c4:87:02:37:7f:fd:f1:ad:
a4:6d:8f:83:dd:85:cc:9d:f0:df:1d:5a:aa:7a:2d:
1b:4d:4c:2a:ae:4a:c3:3a:ab:96:25:1f:fa:a6:5d:
bb:11:ab:67:b5:22:72:33:08:65:fb:e9:d3:19:5f:
dc:3a:80:49:d7:6b:1f:51:6f:87:fd:cd:0a:58:f8:
db:7b:04:cc:36:32:98:1f:6b:eb:39:50:b5:32:59:
10:b9:89:88:af:67:a7:d6:01:cc:77:37:86:99:cd:
ad:99:43:6d:1c:9b:3b:c0:e6:93:52:51:7b:7a:42:
79:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:58:A5:C9:BE:C4:53:07:3C:40:4E:3E:7F:EE:2A:7D:B9:CD:46:DC
X509v3 Authority Key Identifier:
keyid:2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d3:af:63:d5:78:7e:c4:7d:c0:f0:90:61:fc:d6:bc:10:5f:
7e:30:04:ed:ba:56:16:f1:b1:fd:34:10:fa:78:dc:0b:71:89:
44:27:55:bb:8a:86:97:a7:7a:2a:26:05:b8:5e:76:df:91:80:
4e:91:2c:a8:2d:f7:41:09:77:49:c5:4b:cb:07:53:db:58:18:
ff:69:1c:e3:0f:73:6e:62:53:bd:20:d7:2a:e3:58:8f:6b:7d:
4c:0a:6f:95:0a:cc:05:d4:36:9c:76:78:a4:6d:ee:a3:b9:26:
c8:29:b0:f6:b9:19:be:6b:bb:7d:92:a6:83:24:cd:75:a4:df:
c0:46:6b:9a:48:f3:d1:9c:21:0a:c0:21:08:a7:9c:c6:b7:45:
b5:d1:b6:a9:cf:36:dc:7a:5c:85:0a:f6:3e:2d:5a:6b:58:1f:
ec:83:93:02:6a:a3:32:02:ab:6d:8e:10:26:87:4a:86:75:e3:
bb:ce:ed:69:92:c7:3e:89:5d:25:13:31:b2:71:b4:30:94:18:
51:15:38:d7:91:e3:8e:19:99:52:a7:a2:57:29:67:21:e2:0d:
31:27:06:38:f8:af:4d:74:3e:85:e1:ac:b7:7b:66:63:65:a1:
92:88:fe:63:3b:0f:84:5d:8c:32:2e:7c:2b:ff:fd:eb:e0:4b:
e8:b8:c0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:31 2026 by rpki-client