Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
File: LHPvCB4tVzHERXQ5c6lqv96xQss.mft (raw, json)
Hash identifier: GPy9Qpp3UgU+ykWxhBrCkD4b0Rolr7hETc9aKN2jfqo=
Subject key identifier: 88:5E:51:A4:7C:C4:47:35:43:CC:C0:87:17:DD:C4:D0:6B:23:D8:32
Authority key identifier: 2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
Certificate issuer: /CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Certificate serial: 01A089E82523D1FF76A68F4CE4DF279455BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
Manifest number: 0B41
Signing time: Thu 10 Sep 2026 06:01:27 +0000
Manifest this update: Thu 10 Sep 2026 06:01:27 +0000
Manifest next update: Fri 11 Sep 2026 06:01:27 +0000
Files and hashes: 1: CvtOzQgg0yU5uNiDJv9sRE54F7w.roa (hash: /RWVX+MB4g62z+EInyoLc3Ee/IcQswcuywMSa8ZRlSI=)
2: LHPvCB4tVzHERXQ5c6lqv96xQss.crl (hash: OUfbSmAP2j1/Am5SYtEbAEHzW1ym2oyKDR6NJZsSw7w=)
3: elqT59ZWrAInz7TAGHCfesbdKLo.roa (hash: MtloAfg5PV+ZmF39WN4IskuqHMHTWwP8zag9ZXLDmqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e8:25:23:d1:ff:76:a6:8f:4c:e4:df:27:94:55:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Validity
Not Before: Sep 10 06:01:27 2026 GMT
Not After : Sep 11 06:01:27 2026 GMT
Subject: CN=885e51a47cc4473543ccc08717ddc4d06b23d832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d9:55:8a:04:32:21:e0:53:a7:57:5a:c9:12:
e4:2e:8f:41:1c:92:1b:a4:d1:73:57:32:e5:8c:0d:
6d:e5:5a:b3:19:7c:6c:51:06:14:19:6b:9f:e9:59:
07:7f:6e:db:96:78:a4:3d:00:fd:54:80:0f:e8:69:
49:4d:b2:1f:c0:83:1f:02:96:2c:cc:17:eb:99:57:
0d:4a:03:e2:d7:65:9d:03:97:d4:b7:45:89:dc:47:
f8:dc:da:6c:a0:d2:e4:49:fd:7c:a5:e7:4a:07:f1:
9f:53:30:77:3e:72:58:7a:d0:b8:df:b0:ff:54:83:
71:ca:92:ba:91:0f:0f:0a:75:b4:03:d8:20:33:4b:
a8:33:03:01:30:94:df:2f:1b:19:f8:54:45:75:02:
99:29:93:62:66:74:bc:4d:1a:b7:39:2f:4a:97:7a:
e7:99:1c:63:85:c0:92:2c:29:4c:27:ee:ef:ae:41:
f6:5d:37:11:0c:51:32:6d:24:9a:c0:1a:cf:82:ff:
85:41:0b:d7:68:33:56:e8:56:05:15:de:ff:98:c2:
97:78:bb:de:22:60:61:39:fd:41:96:2d:28:81:e4:
cb:cb:39:a1:9d:ea:92:ed:52:c1:ca:14:76:99:df:
dd:82:b6:6c:80:56:bd:a5:cd:33:8e:6f:76:a8:df:
4a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5E:51:A4:7C:C4:47:35:43:CC:C0:87:17:DD:C4:D0:6B:23:D8:32
X509v3 Authority Key Identifier:
keyid:2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:97:df:37:97:50:8e:18:eb:50:48:e0:70:2e:13:ea:6a:ce:
e8:27:75:a3:0d:d9:46:bf:22:28:fa:0c:d8:30:a4:ea:de:71:
c3:e5:b2:69:35:a4:d9:fa:99:28:6f:d1:75:bc:b5:1d:77:8d:
dc:fa:b6:ec:5c:9e:1e:1e:58:a7:18:47:ff:3c:be:ec:68:e0:
9d:51:8d:e3:d3:e5:c4:51:35:da:a6:39:53:6c:18:83:a3:d7:
08:15:e9:07:6e:d9:1c:50:93:ab:a8:d0:07:63:2f:42:86:0c:
b3:74:66:83:6b:24:f7:56:b9:19:bd:2c:0d:ee:a6:31:96:b2:
1b:88:18:e3:33:65:e8:fe:12:86:87:49:9b:b5:d2:a7:16:f0:
0f:72:69:0e:8a:dc:04:ef:f2:68:56:92:19:77:73:da:fb:6a:
f6:74:ed:a8:d1:94:af:1a:50:9b:df:cb:97:32:37:ac:34:df:
6a:d7:fd:ee:4b:0b:b9:6f:51:dd:b8:cc:cc:aa:50:28:5a:d3:
cb:0b:16:27:cc:f3:4c:d2:52:40:a5:86:b2:3b:0a:4f:53:33:
68:80:4b:7f:50:a1:87:83:d4:7e:85:2c:26:dd:65:09:da:5f:
62:29:93:68:d4:64:f9:cc:b0:8a:e0:2d:11:d1:0d:27:b7:e8:
a1:ed:51:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:52:04 2026 by rpki-client