Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
File: LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft (raw, json)
Hash identifier: FTjpz9Bpd9p43lzUw2eL5xpejAYcPdGlwJjfSDO8hYE=
Subject key identifier: AB:D4:CB:D2:D7:59:66:49:E2:96:7F:F9:AA:C4:FA:97:84:A5:E0:BC
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 019E1F11A1F18D258E500661B73F26D2E57B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
Manifest number: 1905
Signing time: Wed 13 May 2026 02:01:49 +0000
Manifest this update: Wed 13 May 2026 02:01:49 +0000
Manifest next update: Thu 14 May 2026 02:01:49 +0000
Files and hashes: 1: L4LkPtTKu6uh824DJ6xjRvNmWTU.roa (hash: 0NgdalWgdZZseus2rUGUIbaj+mAP6w8e2361KL42z6g=)
2: LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl (hash: /yMlJ1JcPYGn3JupZkWj7A9kRV6kyDuprduWWwbfm2o=)
3: fRlgrC6V-4hpDOR3xf-j7dbCZZ8.roa (hash: aMV6NBt217+iKos/Lhiyotp7vHjyI7McAj/90qITACM=)
4: qsejt5iw_nC2cpa2gTFa-6x-D30.roa (hash: OQehKpZjdvH5fT9tftK+VPDJxCO7SZpTNsO/1LiDTxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:a1:f1:8d:25:8e:50:06:61:b7:3f:26:d2:e5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: May 13 02:01:49 2026 GMT
Not After : May 14 02:01:49 2026 GMT
Subject: CN=abd4cbd2d7596649e2967ff9aac4fa9784a5e0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ea:d7:4e:e3:8c:7b:3d:25:d2:22:2b:70:4e:
01:be:4e:93:cf:70:82:67:c7:af:b9:fe:a8:0d:9d:
10:e9:39:94:67:80:d3:0c:06:52:40:9e:ab:41:db:
96:2e:2f:39:8a:78:5c:fb:9f:a3:4d:7a:e9:1c:5d:
32:58:3a:05:7c:f0:e4:06:18:52:72:42:70:ef:14:
04:85:e6:37:e8:03:eb:09:be:2a:17:45:c9:12:c5:
ea:ae:10:e0:8d:84:91:1d:9e:2a:25:b0:c4:f5:95:
1d:17:4a:dc:b0:f4:6e:84:5f:ca:74:9d:5b:a8:9b:
5f:04:96:91:08:af:8e:39:32:82:a1:9d:c2:05:ea:
9d:72:db:21:f7:7d:7f:e3:66:27:5f:ea:ca:95:c7:
0f:70:74:de:8a:e3:a5:13:a8:06:04:1e:5c:ba:80:
eb:f9:2c:1a:5f:0e:40:a2:07:f3:6b:da:97:e9:6d:
47:5c:57:82:3e:22:2f:40:ef:4a:3e:30:5e:3b:01:
36:cb:76:cd:47:fd:fe:4c:0d:95:35:ff:db:5c:49:
cb:06:cc:34:1b:e7:7b:50:6c:2b:45:36:2c:d0:c2:
38:57:6b:30:f5:eb:09:f7:d4:e8:16:4e:30:06:80:
27:7c:2e:9d:4d:c8:65:10:3d:9e:21:79:8c:5b:4a:
dd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D4:CB:D2:D7:59:66:49:E2:96:7F:F9:AA:C4:FA:97:84:A5:E0:BC
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9c:ed:cc:62:eb:ad:74:49:9c:64:c5:e8:e1:c9:8c:ce:7f:
64:40:56:b0:9c:ca:16:38:9b:ce:9c:5f:8b:bc:f7:cd:6f:23:
09:44:6f:de:1e:ae:51:93:94:20:17:0e:36:6c:1b:79:a5:60:
c2:fa:35:66:cd:4a:be:a7:10:64:99:f0:77:8c:62:27:10:b2:
81:3f:98:e7:56:2d:f4:c3:8a:3f:d6:fe:69:61:62:57:bd:0b:
6d:1c:b8:32:94:3a:18:23:a5:44:a8:4e:86:aa:49:79:5b:01:
78:fc:eb:9d:5c:a5:6e:9e:dd:53:34:ba:86:e7:54:52:28:e3:
9d:fd:2c:23:a4:39:32:9d:32:cd:41:21:e6:b9:f9:10:2d:a5:
0f:e2:93:9e:09:c3:17:84:98:77:5c:85:e4:4d:18:f1:cc:47:
50:45:7b:1b:b5:90:9e:ee:14:7c:b6:82:e8:b8:ca:c3:ec:5a:
c3:11:fb:59:19:91:f6:d8:21:25:4e:92:f1:52:05:7b:bf:91:
41:d9:1c:8b:df:69:2a:04:ec:89:2a:fb:79:5d:49:85:0a:a8:
1b:16:23:21:83:42:20:6f:0b:77:bd:27:4f:97:a6:b9:b8:88:
8e:db:2a:aa:6f:c5:49:0e:cc:6d:f4:59:a2:4b:dd:c8:3a:35:
cb:b3:fe:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEaHxjSWOUAZhtz8m0uV7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMTYyMDg5MGY3MDBmMDEyYjBiYTYwMTcyMzE0ZTNjODU5
MTk1MTMwHhcNMjYwNTEzMDIwMTQ5WhcNMjYwNTE0MDIwMTQ5WjAzMTEwLwYDVQQD
EyhhYmQ0Y2JkMmQ3NTk2NjQ5ZTI5NjdmZjlhYWM0ZmE5Nzg0YTVlMGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAperXTuOMez0l0iIrcE4Bvk6Tz3CC
Z8evuf6oDZ0Q6TmUZ4DTDAZSQJ6rQduWLi85inhc+5+jTXrpHF0yWDoFfPDkBhhS
ckJw7xQEheY36APrCb4qF0XJEsXqrhDgjYSRHZ4qJbDE9ZUdF0rcsPRuhF/KdJ1b
qJtfBJaRCK+OOTKCoZ3CBeqdctsh931/42YnX+rKlccPcHTeiuOlE6gGBB5cuoDr
+SwaXw5Aogfza9qX6W1HXFeCPiIvQO9KPjBeOwE2y3bNR/3+TA2VNf/bXEnLBsw0
G+d7UGwrRTYs0MI4V2sw9esJ99ToFk4wBoAnfC6dTchlED2eIXmMW0rdMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvUy9LXWWZJ4pZ/+arE+peEpeC8MB8GA1UdIwQY
MBaAFC4WIIkPcA8BKwumAXIxTjyFkZUTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGhZZ2lROXdEd0VyQzZZQmNqRk9QSVdSbFJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy84MjExNTItOWYxMy00YzA5LTlkY2Qt
NDViYmIyM2ExNWQ4LzEvTGhZZ2lROXdEd0VyQzZZQmNqRk9QSVdSbFJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy84MjExNTItOWYxMy00YzA5LTlkY2QtNDViYmIyM2ExNWQ4
LzEvTGhZZ2lROXdEd0VyQzZZQmNqRk9QSVdSbFJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5ztzGLr
rXRJnGTF6OHJjM5/ZEBWsJzKFjibzpxfi7z3zW8jCURv3h6uUZOUIBcONmwbeaVg
wvo1Zs1KvqcQZJnwd4xiJxCygT+Y51Yt9MOKP9b+aWFiV70LbRy4MpQ6GCOlRKhO
hqpJeVsBePzrnVylbp7dUzS6hudUUijjnf0sI6Q5Mp0yzUEh5rn5EC2lD+KTngnD
F4SYd1yF5E0Y8cxHUEV7G7WQnu4UfLaC6LjKw+xawxH7WRmR9tghJU6S8VIFe7+R
Qdkci99pKgTsiSr7eV1JhQqoGxYjIYNCIG8Ld70nT5emubiIjtsqqm/FSQ7MbfRZ
okvdyDo1y7P+OQ==
-----END CERTIFICATE-----
Generated at Wed May 13 05:29:08 2026 by rpki-client