Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
File: LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft (raw, json)
Hash identifier: q80j0vz1bYAa4HcPlv+9bArZFoFrzh4k6jUbhWHAzWE=
Subject key identifier: D7:80:09:92:4C:CC:49:01:C4:36:5D:1C:B7:78:78:84:2B:AD:42:29
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 019D27E04EFF3BF422D6A57F4AAB39CAAD08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 02:01:44 +0000
Manifest this update: Thu 26 Mar 2026 02:01:44 +0000
Manifest next update: Fri 27 Mar 2026 02:01:44 +0000
Files and hashes: 1: L4LkPtTKu6uh824DJ6xjRvNmWTU.roa (hash: 0NgdalWgdZZseus2rUGUIbaj+mAP6w8e2361KL42z6g=)
2: LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl (hash: VmGJVwLh+jt5oOLgNW2DoA7FIgeGD7mgG/40JSC+MsQ=)
3: fRlgrC6V-4hpDOR3xf-j7dbCZZ8.roa (hash: aMV6NBt217+iKos/Lhiyotp7vHjyI7McAj/90qITACM=)
4: qsejt5iw_nC2cpa2gTFa-6x-D30.roa (hash: OQehKpZjdvH5fT9tftK+VPDJxCO7SZpTNsO/1LiDTxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:4e:ff:3b:f4:22:d6:a5:7f:4a:ab:39:ca:ad:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: Mar 26 02:01:44 2026 GMT
Not After : Mar 27 02:01:44 2026 GMT
Subject: CN=d78009924ccc4901c4365d1cb77878842bad4229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f8:d9:77:1a:48:e9:ed:0a:5d:ad:07:cf:06:
c0:a7:39:6c:30:bd:9e:de:cc:21:9f:82:ba:2f:e8:
c1:f9:b2:fc:64:bf:cc:9e:92:7a:9d:e5:ad:df:85:
18:b7:71:fe:63:63:b7:e6:c3:11:a4:42:ca:11:5d:
85:8e:eb:5d:42:05:9c:31:81:2f:c1:fd:1f:f0:68:
bb:53:39:cd:34:99:7a:c1:6c:07:7d:e9:e3:8d:1a:
c1:e2:f5:d7:fa:f1:e4:67:e2:cd:fb:ff:90:ee:26:
60:25:84:18:cc:ae:f8:e8:0b:f1:79:88:75:90:e6:
e7:51:39:9f:58:fe:6f:44:88:aa:1e:d5:9a:6e:22:
46:16:d9:a8:75:e3:ea:64:40:44:5d:11:1f:b6:e7:
ef:d1:7b:73:10:6f:89:eb:62:75:66:a7:fa:cc:2f:
30:73:a8:8c:2d:b9:6d:05:cc:49:1b:d0:19:d7:f9:
b8:ac:85:ba:74:bb:2c:83:94:86:0e:33:09:2d:09:
77:fe:9c:0a:b7:e4:34:76:28:05:1d:f0:e7:f2:27:
bc:c1:2d:85:d2:c2:a3:c5:65:73:25:71:33:28:5d:
e3:c2:28:88:4e:13:fc:b1:23:e0:0a:cf:11:62:8a:
c3:6c:80:67:b2:37:92:fe:8d:8e:a4:d6:d8:6b:31:
26:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:80:09:92:4C:CC:49:01:C4:36:5D:1C:B7:78:78:84:2B:AD:42:29
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:34:33:64:3b:43:2c:be:fb:f4:84:11:7c:d8:15:fe:e1:f3:
9f:e7:53:d8:60:f6:94:9c:2a:0c:a1:fe:e0:ee:b4:4d:cc:af:
a5:1b:a7:89:cf:28:52:2a:fe:41:83:94:de:3d:65:92:37:f9:
95:1c:f9:d2:9a:0d:3f:0a:28:e4:38:a5:42:90:8d:5e:f8:e1:
25:c0:31:75:d5:7f:61:d5:99:e3:7c:0d:1f:6f:ae:22:d0:4c:
b0:27:ba:dd:20:3e:e2:a3:f7:c5:46:c7:d3:88:a3:05:29:90:
bf:30:63:81:6a:26:f0:58:b5:51:1d:26:5b:5b:38:e3:ce:58:
cf:a2:cc:36:08:b3:75:cb:0e:5c:33:1a:c7:5d:71:0e:6e:7f:
6f:fb:77:03:d4:4b:bd:03:2d:e6:0c:bf:e1:ef:2a:4e:50:de:
64:70:84:bb:f2:90:91:df:6c:c7:9f:50:c0:e0:9c:69:b9:6a:
b0:89:55:9a:c1:cc:cb:2a:39:c4:d5:ac:c4:a4:52:ea:67:8b:
01:87:d6:b0:16:ee:ed:77:50:e3:b4:79:0d:65:29:c1:bb:b3:
ae:e9:8b:01:97:20:66:b2:f3:d9:eb:4a:1f:05:d9:a7:5f:08:
62:30:8e:81:5e:26:41:7e:19:de:58:03:3a:84:cb:28:e1:61:
26:81:aa:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:11 2026 by rpki-client