Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
File: LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json)
Hash identifier: MLb1JzXcmt2ElN0n0p8z2MfyWhEGojzbeTX4sKYhHX8=
Subject key identifier: 6F:77:6C:30:CC:F7:C2:9F:3A:E8:6E:7F:3D:82:C9:B9:CA:C7:82:4C
Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa
Certificate serial: 01A08E9FEB6538CA11E9584A26A6390774B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
Manifest number: 1025
Signing time: Fri 11 Sep 2026 04:00:40 +0000
Manifest this update: Fri 11 Sep 2026 04:00:40 +0000
Manifest next update: Sat 12 Sep 2026 04:00:40 +0000
Files and hashes: 1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: 7fDFrUs0gxDnlN8Kp1XNYmDvJBvJk0drlYHPIUaxzfo=)
2: fR1OIjQ-gaEggW5Bu6WoCSw3-_8.roa (hash: +Q1EnV2TJw70P8F3SyId8vDlQiAvs3dvJ0FDJPliX6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:9f:eb:65:38:ca:11:e9:58:4a:26:a6:39:07:74:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa
Validity
Not Before: Sep 11 04:00:40 2026 GMT
Not After : Sep 12 04:00:40 2026 GMT
Subject: CN=6f776c30ccf7c29f3ae86e7f3d82c9b9cac7824c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c6:5d:18:fd:7c:3b:a2:d7:03:1a:c7:47:19:
61:5d:1c:d6:47:1c:37:14:d6:1e:a7:29:b7:91:c9:
90:d0:78:00:d2:75:35:82:95:6c:87:fc:58:f6:93:
56:29:5f:27:1d:58:b9:c6:2c:85:87:21:a9:1a:82:
7d:73:9c:68:e0:fd:b5:8f:e3:58:74:75:0e:fc:5a:
ff:e9:fa:9f:8a:21:14:7e:b0:c0:ab:97:de:de:ac:
25:2c:52:22:57:fc:c3:85:4d:dc:34:ec:4e:64:b1:
ed:5b:22:91:79:36:38:b4:f1:44:9f:29:d7:9b:af:
76:51:e4:86:0f:5c:7a:20:d0:d3:68:d4:7d:cf:6f:
64:fd:23:16:d8:1e:1f:62:c2:8a:2b:21:d4:03:83:
84:46:60:e5:91:96:34:1c:4f:00:80:d5:51:2c:d7:
c2:cd:64:8d:00:78:93:f3:52:77:e3:ac:3e:6d:cf:
b5:1c:61:62:9d:96:87:01:35:ba:ba:24:86:e9:bf:
c0:31:59:ec:af:3e:f2:cd:5c:ed:c7:a4:53:c9:be:
0e:a5:b3:72:2d:ef:f9:aa:e6:6f:32:4e:01:fc:92:
47:7e:28:eb:30:91:e0:9d:82:4a:83:07:db:bb:ab:
4d:90:75:72:7f:77:19:66:22:02:5c:61:97:d6:25:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:77:6C:30:CC:F7:C2:9F:3A:E8:6E:7F:3D:82:C9:B9:CA:C7:82:4C
X509v3 Authority Key Identifier:
keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0f:5d:3c:f2:ab:5f:85:62:e3:7a:cb:97:c1:5c:fa:f7:32:
c0:c3:c8:52:2b:57:2d:1e:9a:3e:cb:c3:c7:e0:b1:b3:69:e6:
a5:58:37:e1:1f:a0:55:e7:da:cc:a9:24:18:01:de:e4:84:33:
c2:d8:ef:94:66:bb:60:d5:c0:4d:a4:d5:e5:35:0d:bd:f7:36:
80:08:f0:77:c7:e9:4e:a7:40:da:85:db:ae:95:3d:07:ab:01:
df:b6:38:41:0f:bf:5d:b9:08:67:5e:67:16:15:27:af:63:29:
da:33:db:9a:81:98:8f:2a:53:a5:a9:18:6f:b5:3d:73:1b:0d:
fb:15:3c:c5:51:1b:0e:9f:4e:8b:44:da:55:5a:4d:ab:10:dd:
f9:31:4d:5d:c7:a0:6b:ef:ff:f2:da:62:9a:09:f8:b6:c7:48:
9d:ec:76:fe:7e:7e:83:5c:bc:6c:90:08:45:5d:ca:c9:8a:fa:
7a:5d:3e:60:c5:c7:9b:be:af:08:99:ec:88:37:d3:b3:68:d1:
2c:9c:f7:de:64:02:4f:d9:f1:01:e0:e1:46:c0:0d:22:30:57:
c6:8d:5e:74:98:4c:49:d2:ce:a2:45:0d:97:fb:87:c9:ea:6b:
ce:6e:50:65:4c:c0:73:80:f5:34:5e:fb:f3:d4:8f:b8:3b:73:
c2:3a:7e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:14:26 2026 by rpki-client