Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
File: LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json)
Hash identifier: TU8EF0cDKQ7X7FPPlx2obOTzpunf0DDWSymETD9jSj8=
Subject key identifier: 83:77:B7:D5:FD:D7:E9:1F:5B:B8:C0:10:CC:B2:F7:15:6F:26:BC:E3
Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa
Certificate serial: 019FA30562D7854741B0B7EE02CE2611308A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
Manifest number: 0FAB
Signing time: Mon 27 Jul 2026 10:01:06 +0000
Manifest this update: Mon 27 Jul 2026 10:01:06 +0000
Manifest next update: Tue 28 Jul 2026 10:01:06 +0000
Files and hashes: 1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: sn1ezEK8EOUkQY4IHJ6i67POORru4X4XiJWy3DVsHyw=)
2: fR1OIjQ-gaEggW5Bu6WoCSw3-_8.roa (hash: +Q1EnV2TJw70P8F3SyId8vDlQiAvs3dvJ0FDJPliX6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:62:d7:85:47:41:b0:b7:ee:02:ce:26:11:30:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa
Validity
Not Before: Jul 27 10:01:06 2026 GMT
Not After : Jul 28 10:01:06 2026 GMT
Subject: CN=8377b7d5fdd7e91f5bb8c010ccb2f7156f26bce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:37:11:fc:16:62:1c:22:e1:fc:3f:5e:e1:fd:
fc:8a:69:02:c1:64:ee:ef:44:03:ef:02:72:21:a5:
7d:da:68:18:13:8b:43:49:3b:63:dc:ed:75:90:5b:
84:18:20:b4:f1:33:5f:af:58:65:8d:34:bd:b9:21:
3a:bb:fc:c5:15:e7:b8:21:e9:fa:52:58:0a:76:de:
18:31:85:77:f5:81:85:5b:4b:cb:6f:93:21:0c:18:
27:92:8c:86:8c:cf:7e:a7:98:58:d6:5b:36:1a:50:
0a:fa:dd:99:5e:ec:18:36:6a:7e:3d:92:7f:1b:e9:
e4:49:f1:66:59:0b:51:f2:3c:b8:59:20:17:ef:8a:
07:7c:f5:70:60:f8:57:26:8a:b6:87:cf:a0:cb:68:
98:8e:73:d0:48:b5:be:98:0e:ce:a5:fd:5c:c6:35:
4b:0a:48:d2:3d:f2:df:d5:d2:b5:bf:dc:95:44:ce:
36:c1:33:4b:c2:e2:0e:71:dd:c4:ba:0f:b3:51:a9:
e3:b3:51:ad:24:74:95:1b:3d:11:b7:10:b8:01:99:
3d:a5:f1:9c:fe:22:8c:a1:f9:05:43:78:73:d0:71:
5a:8f:3c:bf:e0:58:bc:7d:94:38:c5:a1:f3:e4:11:
5f:74:81:90:1b:9a:17:ed:bb:c0:ad:b7:b6:0d:25:
84:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:77:B7:D5:FD:D7:E9:1F:5B:B8:C0:10:CC:B2:F7:15:6F:26:BC:E3
X509v3 Authority Key Identifier:
keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:21:d4:30:17:7d:78:ab:4f:6a:b8:f4:34:bf:7d:fb:e6:6c:
bf:f7:53:1a:f6:2a:98:f7:e1:1b:d4:8f:40:de:cf:91:99:18:
8a:ad:bf:ea:b0:99:0e:67:71:2e:b2:eb:57:a9:64:d7:0a:c2:
27:d7:a5:31:9a:95:f7:1e:73:15:b3:84:36:75:bb:fc:bb:a5:
92:86:f0:95:42:97:50:b8:71:1e:35:ca:6c:72:20:7d:28:1b:
d8:6b:ee:80:f7:41:64:bb:18:bf:39:36:2a:22:db:4e:de:26:
a5:59:9d:c0:6b:ba:19:72:c1:96:3f:00:51:3e:02:86:0b:6c:
03:ce:29:73:41:5e:de:38:a8:76:6d:9b:8f:17:29:56:5d:b9:
aa:a5:a0:3e:0b:ff:fa:2e:a2:e7:38:f0:d4:25:89:42:65:08:
e4:4d:93:d9:c6:da:1f:b9:46:71:be:05:a4:f9:ff:55:9f:49:
b5:2a:4c:ed:cb:47:7b:c3:75:eb:f1:4f:c0:67:23:82:bf:b0:
76:a6:b6:7e:9a:9e:78:27:36:15:c3:26:1e:d2:c2:c4:9a:ac:
63:0d:58:ff:7e:bc:a8:d1:09:11:03:10:57:22:7e:e7:9b:80:
52:b8:0d:53:78:d0:61:46:11:2b:f5:35:19:1f:3f:b2:64:88:
24:4b:ed:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jBWLXhUdBsLfuAs4mETCKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNzU0YWU0NzNkOWMxNTRiODA0YjcwZWQzMTg4MWUwMjVk
OTI2YWEwHhcNMjYwNzI3MTAwMTA2WhcNMjYwNzI4MTAwMTA2WjAzMTEwLwYDVQQD
Eyg4Mzc3YjdkNWZkZDdlOTFmNWJiOGMwMTBjY2IyZjcxNTZmMjZiY2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zcR/BZiHCLh/D9e4f38imkCwWTu
70QD7wJyIaV92mgYE4tDSTtj3O11kFuEGCC08TNfr1hljTS9uSE6u/zFFee4Ien6
UlgKdt4YMYV39YGFW0vLb5MhDBgnkoyGjM9+p5hY1ls2GlAK+t2ZXuwYNmp+PZJ/
G+nkSfFmWQtR8jy4WSAX74oHfPVwYPhXJoq2h8+gy2iYjnPQSLW+mA7Opf1cxjVL
CkjSPfLf1dK1v9yVRM42wTNLwuIOcd3Eug+zUanjs1GtJHSVGz0RtxC4AZk9pfGc
/iKMofkFQ3hz0HFajzy/4Fi8fZQ4xaHz5BFfdIGQG5oX7bvArbe2DSWE/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIN3t9X91+kfW7jAEMyy9xVvJrzjMB8GA1UdIwQY
MBaAFCx1SuRz2cFUuAS3DtMYgeAl2SaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80YTA5NDktZGY1OC00MDA1LTk3Njgt
ZmM1MzkzYzU3ODg3LzEvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC80YTA5NDktZGY1OC00MDA1LTk3NjgtZmM1MzkzYzU3ODg3
LzEvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAViHUMBd9
eKtParj0NL99++Zsv/dTGvYqmPfhG9SPQN7PkZkYiq2/6rCZDmdxLrLrV6lk1wrC
J9elMZqV9x5zFbOENnW7/LulkobwlUKXULhxHjXKbHIgfSgb2GvugPdBZLsYvzk2
KiLbTt4mpVmdwGu6GXLBlj8AUT4ChgtsA84pc0Fe3jiodm2bjxcpVl25qqWgPgv/
+i6i5zjw1CWJQmUI5E2T2cbaH7lGcb4FpPn/VZ9JtSpM7ctHe8N16/FPwGcjgr+w
dqa2fpqeeCc2FcMmHtLCxJqsYw1Y/368qNEJEQMQVyJ+55uAUrgNU3jQYUYRK/U1
GR8/smSIJEvtzQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 15:41:37 2026 by rpki-client