Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
File: LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json)
Hash identifier: Q4PeFNlZ0Y0qo9DqZdMP/6YkZK6d4LhqAIpVX8UZ8+8=
Subject key identifier: BC:38:CD:23:EC:29:39:53:A3:B9:2D:37:94:39:22:14:C5:CD:D2:A0
Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa
Certificate serial: 019D371B38EF26C956E54C4796AE91C0E1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
Manifest number: 0E6A
Signing time: Sun 29 Mar 2026 01:00:23 +0000
Manifest this update: Sun 29 Mar 2026 01:00:23 +0000
Manifest next update: Mon 30 Mar 2026 01:00:23 +0000
Files and hashes: 1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: 8UvubeA1VtZS+DQx20HuWaa18czapQA2yRjyjiT6WJQ=)
2: fR1OIjQ-gaEggW5Bu6WoCSw3-_8.roa (hash: +Q1EnV2TJw70P8F3SyId8vDlQiAvs3dvJ0FDJPliX6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:38:ef:26:c9:56:e5:4c:47:96:ae:91:c0:e1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa
Validity
Not Before: Mar 29 01:00:23 2026 GMT
Not After : Mar 30 01:00:23 2026 GMT
Subject: CN=bc38cd23ec293953a3b92d3794392214c5cdd2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:52:17:b8:bd:4c:95:0d:d9:45:3d:87:8c:88:
91:b0:49:89:f7:1f:9a:7c:32:4c:67:03:c5:f9:00:
d7:3f:9a:36:63:77:45:0f:f6:95:b7:54:1e:e9:57:
9e:d8:43:7a:d3:7c:81:78:1f:1d:20:ea:de:19:e1:
11:f0:70:a6:80:30:08:3f:94:5f:f6:69:1e:68:78:
bc:36:03:3c:1c:83:f1:75:70:9a:b0:dd:27:7b:b0:
bd:ae:d9:3d:3b:33:08:54:0e:7d:2b:91:0d:84:31:
54:1c:a2:d7:f8:c7:8a:28:78:05:2c:64:52:ab:cb:
05:ac:da:96:3d:b3:0e:19:57:d1:37:30:f1:f0:f2:
c7:37:06:90:67:e2:d3:81:20:f6:98:3f:94:eb:46:
6a:e5:b4:07:a8:a3:86:34:54:f8:b9:54:d6:07:08:
94:a7:95:cf:8f:e0:71:a7:b2:e2:a4:f6:18:64:ba:
37:5f:38:e8:cb:92:06:51:92:2d:f5:6e:7a:1c:f2:
23:0a:12:ec:ec:89:39:0a:32:5a:6c:2e:dd:1a:c3:
bb:20:e8:79:04:16:07:9c:0a:a3:a4:5c:c9:ae:b1:
63:d3:5c:2c:45:fa:8a:9e:dc:9d:29:fa:26:f4:c3:
89:8c:5d:71:4b:36:99:97:66:ef:fe:9f:95:5a:33:
1e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:38:CD:23:EC:29:39:53:A3:B9:2D:37:94:39:22:14:C5:CD:D2:A0
X509v3 Authority Key Identifier:
keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c7:1e:9a:ff:11:71:62:0f:2a:72:b9:c0:e0:e7:e8:21:49:
52:2c:46:d0:8e:3a:45:c0:07:cb:bf:95:5c:5f:ef:a6:50:a6:
de:e8:21:f3:63:9f:c9:c7:fb:d7:b1:96:41:c0:d5:46:2a:e2:
cd:b9:68:d4:27:3b:e8:49:88:0c:ee:8a:71:69:6b:1d:59:f3:
4c:34:c0:78:76:db:82:b2:04:6d:c7:d2:f4:25:7e:98:55:f7:
e7:7c:87:16:1f:c3:c9:f4:f6:1c:f1:33:88:3b:03:65:58:22:
c9:43:99:d7:66:86:f6:d2:c6:a0:6d:c2:7b:8e:e8:59:42:fd:
91:b9:43:c0:69:e8:9f:f1:1e:2b:fb:45:23:70:2b:ff:fb:b2:
26:1a:0e:01:88:80:f5:6b:9c:0b:38:99:8d:fc:51:6d:92:38:
b2:e7:70:9f:4a:05:af:39:19:45:80:3e:c8:a3:57:d3:7d:47:
75:34:b0:e7:17:5c:88:61:23:4e:f6:2c:b9:98:04:f6:a8:fd:
26:d6:cc:86:83:bd:f5:0b:db:20:cb:4e:72:9a:75:67:47:20:
42:fd:30:d4:df:30:9e:e8:f3:ad:c8:b3:a2:37:9f:18:a1:51:
f8:5b:eb:75:ae:44:b1:74:84:2a:e2:ab:38:47:33:87:b5:18:
8e:1f:c4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:50 2026 by rpki-client