Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
File: LHPvCB4tVzHERXQ5c6lqv96xQss.mft (raw, json)
Hash identifier: 2z0ZtVdcRmkO6Kylz+ERVGQbMLqAUmbOSSCpZjwuYMg=
Subject key identifier: CE:28:FA:29:B8:5B:99:BC:4A:7A:B0:89:36:9F:BA:B3:CA:2D:F8:28
Authority key identifier: 2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
Certificate issuer: /CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Certificate serial: 019FA2298E1B6B675966EC12BA02EF794E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
Manifest number: 0AC9
Signing time: Mon 27 Jul 2026 06:01:00 +0000
Manifest this update: Mon 27 Jul 2026 06:01:00 +0000
Manifest next update: Tue 28 Jul 2026 06:01:00 +0000
Files and hashes: 1: CvtOzQgg0yU5uNiDJv9sRE54F7w.roa (hash: /RWVX+MB4g62z+EInyoLc3Ee/IcQswcuywMSa8ZRlSI=)
2: LHPvCB4tVzHERXQ5c6lqv96xQss.crl (hash: JZKWpnSAJVMIZIPzK5UDaNe4/mrRPbxOsIQ3J8GyrnU=)
3: elqT59ZWrAInz7TAGHCfesbdKLo.roa (hash: MtloAfg5PV+ZmF39WN4IskuqHMHTWwP8zag9ZXLDmqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:8e:1b:6b:67:59:66:ec:12:ba:02:ef:79:4e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Validity
Not Before: Jul 27 06:01:00 2026 GMT
Not After : Jul 28 06:01:00 2026 GMT
Subject: CN=ce28fa29b85b99bc4a7ab089369fbab3ca2df828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:09:ef:38:f2:29:85:26:8e:5b:91:23:c8:15:
81:d2:ba:e4:d6:0f:81:a3:ac:f7:ba:d0:c6:b4:cd:
5d:a1:99:5d:a5:ef:cd:43:40:b2:98:4b:a9:b2:f1:
62:42:9e:1d:81:c5:b8:4a:d5:70:75:0a:44:0e:8f:
0b:0c:06:9d:23:ba:22:2d:2d:39:3f:74:43:fb:19:
a0:68:f8:b2:7a:09:8e:28:a6:e2:83:cf:3e:91:f0:
ce:30:b1:44:aa:34:ad:e0:a5:23:01:af:7b:1a:af:
66:29:e1:ac:82:93:c3:87:34:60:f5:03:cd:1b:84:
d4:00:0b:c6:09:b1:d2:e8:a4:36:e4:37:0c:ef:ab:
f8:49:37:12:99:32:f6:1d:98:c9:c7:a9:75:1c:32:
79:d8:fa:ce:67:43:d4:77:ac:fe:1c:f7:72:7c:bd:
fd:59:c8:c6:10:53:33:db:54:18:02:1b:14:50:a1:
e8:6e:fe:40:0c:f8:8b:8b:1a:09:30:31:d2:49:00:
7c:31:6b:5d:38:09:54:7e:1b:da:06:ab:dc:bc:d7:
d4:88:e7:d0:c1:c3:2c:d1:67:b7:d4:89:1d:f7:4f:
52:0a:11:aa:9c:69:fd:15:cc:02:71:09:b3:a6:c0:
44:5f:ec:ad:78:dc:73:b0:22:0a:77:81:1c:2b:36:
78:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:28:FA:29:B8:5B:99:BC:4A:7A:B0:89:36:9F:BA:B3:CA:2D:F8:28
X509v3 Authority Key Identifier:
keyid:2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:61:56:7e:68:a8:1c:ea:ec:e1:71:85:86:5f:fe:7e:a5:ca:
3d:41:99:6b:11:34:52:b2:83:e5:c4:bc:16:48:dd:82:a9:35:
8a:1b:dc:4c:f8:ac:f3:b6:d6:e7:3f:f9:dd:23:c3:ac:98:e0:
f5:65:2c:7a:ee:13:23:04:8e:91:68:3d:89:76:1e:d8:9e:4f:
df:e8:62:92:fa:90:23:c7:7f:db:1e:0e:65:12:2f:69:5d:ea:
3a:ed:b1:76:fe:df:53:7c:26:84:26:5d:5c:da:45:3f:57:07:
cd:97:44:df:73:bc:8b:e1:90:40:ae:6f:9f:b0:77:93:80:1b:
13:cb:42:93:7d:a8:0e:d4:17:cb:44:88:a5:6c:d1:6e:20:e0:
ca:61:c9:d7:bd:75:88:1b:b7:13:50:64:dd:72:ed:47:02:e9:
ec:d4:18:03:d4:7d:0b:0d:3f:9b:46:05:e3:56:50:11:08:4e:
f3:47:5b:a5:29:0a:2f:73:6c:8c:46:ac:89:d8:df:e0:15:d5:
8e:79:db:a6:fe:9d:1b:39:35:35:fb:68:22:f4:4b:86:6d:ab:
c0:25:b7:a5:31:d0:96:74:75:50:21:ba:25:03:f0:3e:a9:a5:
07:a0:7a:e3:b6:43:0d:22:11:e3:45:35:21:10:d1:3e:be:5c:
63:47:aa:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:15:44 2026 by rpki-client