Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
File: LHPvCB4tVzHERXQ5c6lqv96xQss.mft (raw, json)
Hash identifier: tvcfxKu6tbAG7T1bsAuga9hV98FIGSzPkPyRhsy76n4=
Subject key identifier: 3F:6F:91:B7:1F:17:98:04:99:4A:81:5E:CD:9F:1A:1F:40:5A:6B:38
Authority key identifier: 2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
Certificate issuer: /CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Certificate serial: 01A184F606FCE5536BE1C2F8FD5DD4CE686B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
Manifest number: 0BC3
Signing time: Thu 29 Oct 2026 00:01:18 +0000
Manifest this update: Thu 29 Oct 2026 00:01:18 +0000
Manifest next update: Fri 30 Oct 2026 00:01:18 +0000
Files and hashes: 1: CvtOzQgg0yU5uNiDJv9sRE54F7w.roa (hash: /RWVX+MB4g62z+EInyoLc3Ee/IcQswcuywMSa8ZRlSI=)
2: LHPvCB4tVzHERXQ5c6lqv96xQss.crl (hash: chpbAPcDh9o5eRiFn9mtxES3iYC2wuKK6DrNNGGAyrI=)
3: elqT59ZWrAInz7TAGHCfesbdKLo.roa (hash: MtloAfg5PV+ZmF39WN4IskuqHMHTWwP8zag9ZXLDmqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 22:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:f6:06:fc:e5:53:6b:e1:c2:f8:fd:5d:d4:ce:68:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Validity
Not Before: Oct 29 00:01:18 2026 GMT
Not After : Oct 30 00:01:18 2026 GMT
Subject: CN=3f6f91b71f179804994a815ecd9f1a1f405a6b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:ef:39:90:ef:96:c1:95:68:de:99:91:7a:
92:c2:0e:b3:05:cf:07:da:e6:03:83:b9:7c:9e:39:
a3:16:83:4b:cd:92:e0:3d:b9:be:18:8e:10:2b:8e:
c3:2e:81:fa:ba:ea:af:43:78:ba:12:ae:18:4f:74:
32:fe:a6:fa:2a:e2:22:3c:50:b6:be:55:4f:d5:3c:
91:18:19:33:4d:01:d8:32:cc:00:7e:79:7b:07:84:
0f:6b:91:07:08:d6:df:bc:76:6f:dd:c6:b8:f5:7b:
93:9a:4e:b6:ca:a5:c9:63:26:bf:94:7c:3e:03:f1:
b3:d4:44:1c:8b:2a:b5:1e:9e:d0:98:83:04:05:59:
15:ab:07:93:44:cd:d7:7c:03:03:90:de:6e:b0:3d:
96:b5:56:b1:5b:e7:5c:53:89:68:20:9a:01:84:48:
1a:55:a3:97:cf:26:ad:e0:a3:c7:ea:2a:2b:cc:4e:
75:e3:65:33:61:bc:e9:7c:78:a0:8c:79:ef:13:19:
e0:61:23:09:a8:66:db:b4:e7:c0:d5:a6:c5:e2:44:
81:c3:2c:f9:e4:8c:bf:92:5a:ca:96:3e:ca:78:af:
e0:86:3d:2f:12:19:3d:76:7e:05:1f:7d:c8:87:02:
17:13:6d:30:05:4a:bb:c2:6d:cb:8e:1e:41:88:7c:
38:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6F:91:B7:1F:17:98:04:99:4A:81:5E:CD:9F:1A:1F:40:5A:6B:38
X509v3 Authority Key Identifier:
keyid:2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2b:95:2e:4a:30:83:9b:f9:78:71:2c:bc:9b:25:f9:d9:42:
08:e6:ac:2f:9d:e3:de:fe:55:ac:f3:19:49:3b:1d:58:d1:3f:
92:0f:92:55:41:af:bf:d3:27:4a:7e:9d:e0:19:d2:65:24:88:
45:8b:01:12:05:02:88:7c:4b:73:32:4d:59:8a:dc:0c:43:17:
75:41:ff:54:2d:fc:f8:35:dd:f8:f1:8d:c3:e4:07:71:ab:4c:
b2:e9:ee:f5:b8:c9:3f:2c:69:e3:60:36:85:8b:b9:62:55:52:
6b:9d:b8:24:be:86:b8:54:99:c6:92:cc:84:e8:4c:97:39:44:
6c:91:31:32:7d:ba:03:d0:fe:a0:58:69:f6:99:0d:74:36:f3:
7d:53:bc:2c:44:b9:57:6a:6e:16:01:5e:85:38:9d:88:ce:9c:
68:db:fe:73:87:94:d5:9a:61:55:ac:2b:39:a3:9a:6b:b7:89:
75:37:1e:47:86:31:cc:95:c4:2a:d0:eb:84:85:a3:9b:97:b8:
4b:39:e1:b6:4c:2f:1a:8a:5f:68:53:ff:ec:5b:18:be:65:7b:
fd:bc:77:67:e0:40:b3:47:3f:19:e6:48:73:81:4f:f3:73:45:
15:06:c8:29:a2:5f:f8:13:b4:c0:73:06:a6:13:92:92:f2:2f:
49:11:70:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 02:17:44 2026 by rpki-client