Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
File: lhud90XDLfJ98z68_VNvGeE0dP4.mft (raw, json)
Hash identifier: 8b3b/HdI/B/EB+Z2K54qsIdXdwZSN5ExgSxvaAIDTnM=
Subject key identifier: 32:10:B4:62:52:A9:08:44:BD:22:D5:19:36:31:E7:3E:93:C2:F3:55
Authority key identifier: 96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
Certificate issuer: /CN=961b9df745c32df27df33ebcfd536f19e13474fe
Certificate serial: 019DECDBBD1F29B498BBBFE4E53BA8E2F2D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
Manifest number: 1207
Signing time: Sun 03 May 2026 08:01:56 +0000
Manifest this update: Sun 03 May 2026 08:01:56 +0000
Manifest next update: Mon 04 May 2026 08:01:56 +0000
Files and hashes: 1: Rf4ua2gShCgNnsbPUQ6ubuJBV1k.roa (hash: tSFC9dWk5W60HWYLlM+PiN1UjypysKUpyAViK3s11Fw=)
2: Uxtr-atmnNBITnladLThcv7huIU.roa (hash: n7M6NPbamAy18kfeXWpn06XaPUvf5LbKfUxiapVP6+w=)
3: cd4PR_7Zwc-Jv_h3ekBVWiw0K-0.roa (hash: HpbyUUXySxZasQuBBURj008LhTbNYYQxJ+uuJec1F1s=)
4: lhud90XDLfJ98z68_VNvGeE0dP4.crl (hash: uZnkEVE03wuVXDIiUrA0XGfcDLP5JQpon0JbdVj5S9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 08:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:db:bd:1f:29:b4:98:bb:bf:e4:e5:3b:a8:e2:f2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961b9df745c32df27df33ebcfd536f19e13474fe
Validity
Not Before: May 3 08:01:56 2026 GMT
Not After : May 4 08:01:56 2026 GMT
Subject: CN=3210b46252a90844bd22d5193631e73e93c2f355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:92:91:3e:0b:ff:57:69:04:55:21:d3:98:46:
17:fd:48:9e:fb:c6:9f:ca:7d:65:1f:9f:a3:45:0a:
71:62:2f:9d:be:50:a5:e9:1c:58:5c:ee:b4:3b:94:
a9:c7:aa:8b:a8:5a:57:42:00:fb:dd:4d:f6:68:a9:
99:de:b9:d1:14:65:e4:58:a3:07:8f:c6:06:8b:8d:
a0:08:dc:9b:79:91:e2:eb:7d:08:92:e7:55:7f:9e:
b9:bb:e7:30:39:83:26:9c:e3:48:e7:f4:52:b9:3a:
37:d2:5b:8d:ec:ff:1f:f4:db:c2:6b:ed:44:4b:b8:
01:a1:47:9a:58:33:dc:2b:08:56:d8:6d:84:71:2b:
af:2c:f8:aa:74:f0:ae:c7:2e:5b:5c:eb:87:0c:57:
ba:e0:b5:9b:e1:46:30:9a:36:6e:40:06:7e:2d:91:
e4:ef:a1:c8:72:db:cf:98:5e:ed:3d:16:b1:7a:cf:
3c:87:1b:f8:68:c8:4b:fa:c1:c2:d5:fe:7b:db:b6:
c0:13:d9:89:fb:42:b2:04:6d:6a:a7:bb:9a:f5:ec:
a1:68:8d:f6:01:de:e0:61:a4:ed:bc:d2:2c:a6:6d:
0d:b9:20:f7:b4:f0:99:93:f3:43:d5:e9:82:ad:83:
19:82:70:44:18:c9:f4:9b:59:33:62:dd:cf:7a:f8:
63:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:10:B4:62:52:A9:08:44:BD:22:D5:19:36:31:E7:3E:93:C2:F3:55
X509v3 Authority Key Identifier:
keyid:96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:24:3a:b8:25:03:f9:c1:c3:32:b5:72:58:7e:9e:1b:7e:73:
62:02:02:44:28:f3:35:29:0c:8b:20:57:1a:dd:dd:c8:c4:19:
5c:21:d6:31:3c:de:e4:86:95:95:49:98:bb:4b:49:87:f1:83:
cf:3c:e3:84:3b:cb:28:44:40:f9:70:dd:53:29:2c:e1:55:fb:
bd:b4:f7:35:65:53:12:45:b9:78:7b:4a:68:37:58:c1:64:cf:
05:91:41:df:a6:3a:0f:83:18:79:90:b1:03:68:9c:dc:ec:7c:
10:1a:91:4d:64:d0:b5:93:25:89:49:47:5f:5d:9a:b9:e3:58:
1c:15:8e:34:78:a5:bf:27:f8:f8:3f:c7:d5:f9:2a:9c:a3:20:
fc:9f:bd:71:96:60:6c:a5:c3:1a:91:ee:f1:aa:43:51:f1:b2:
84:b6:b4:a1:79:85:4a:db:b2:f2:1b:45:78:64:79:d5:81:cb:
97:18:84:d9:a6:e4:51:81:96:5a:b4:33:c8:d9:23:80:a2:34:
da:f3:f9:7b:14:ac:e4:3f:6d:c3:f0:5c:86:1e:ee:07:9d:62:
5e:44:74:4d:4a:12:64:13:59:cb:53:fa:60:1a:39:c7:1f:8e:
20:7a:c9:33:6a:74:bb:29:8b:a1:e4:6f:fc:15:20:02:30:19:
0a:5c:26:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:08:39 2026 by rpki-client