Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
File: LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft (raw, json)
Hash identifier: 67i3s6VQZgyihpm5nHtdQOHdCtxVzn3wJzEYcQIOz+A=
Subject key identifier: 5C:A0:A3:58:96:BF:27:85:EA:07:39:E7:21:55:14:D6:15:5F:B8:6B
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 01A0D45E0D21CB64E1FC6B69C82E3B5C733F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 17:02:08 +0000
Manifest this update: Thu 24 Sep 2026 17:02:08 +0000
Manifest next update: Fri 25 Sep 2026 17:02:08 +0000
Files and hashes: 1: L4LkPtTKu6uh824DJ6xjRvNmWTU.roa (hash: 0NgdalWgdZZseus2rUGUIbaj+mAP6w8e2361KL42z6g=)
2: LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl (hash: NDblVMaxuEukKw6/96IQ23f2x3f4XsSS4Tr4x9bc3Mo=)
3: fRlgrC6V-4hpDOR3xf-j7dbCZZ8.roa (hash: aMV6NBt217+iKos/Lhiyotp7vHjyI7McAj/90qITACM=)
4: qsejt5iw_nC2cpa2gTFa-6x-D30.roa (hash: OQehKpZjdvH5fT9tftK+VPDJxCO7SZpTNsO/1LiDTxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 17:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5e:0d:21:cb:64:e1:fc:6b:69:c8:2e:3b:5c:73:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: Sep 24 17:02:08 2026 GMT
Not After : Sep 25 17:02:08 2026 GMT
Subject: CN=5ca0a35896bf2785ea0739e7215514d6155fb86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:c0:2d:46:d5:c4:02:61:9f:79:bd:4c:af:
8b:3e:d5:a7:da:16:dc:eb:50:a1:95:c1:e2:36:7e:
83:5a:01:38:e9:12:65:07:c6:66:2a:5d:06:9e:b9:
36:06:bb:b7:06:d4:08:12:8d:e6:2d:b4:60:dd:dd:
dd:16:6d:06:b0:40:31:71:56:26:66:91:f1:28:5c:
16:49:b5:d6:9e:85:4c:15:0b:11:32:e8:a8:4b:f7:
46:12:06:5e:a2:7d:a1:b1:4d:32:ac:14:1c:2f:36:
07:1a:7b:62:d3:3b:66:81:e2:b6:cb:b0:da:6d:d9:
51:9d:38:e2:2c:49:6c:dc:36:ac:58:be:12:56:4c:
0c:3f:3e:12:50:3e:21:92:90:4b:5e:6c:79:a6:40:
ae:38:e1:f2:3c:6c:cf:5a:e9:de:62:10:de:5b:0d:
e2:ad:47:a9:63:c9:eb:7f:da:f8:d1:af:17:37:31:
7d:05:1f:01:52:0e:6f:ff:8b:af:14:e7:60:9d:df:
e3:61:f3:f1:a7:1d:ae:58:9b:8d:ec:63:ae:bd:e2:
67:05:71:79:da:83:14:b7:de:15:24:e5:11:1f:36:
ff:aa:7a:58:02:84:e6:86:d7:26:b9:bc:e7:93:1d:
3f:47:f3:4e:a6:51:ef:61:0e:98:d2:de:1f:1e:80:
a6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A0:A3:58:96:BF:27:85:EA:07:39:E7:21:55:14:D6:15:5F:B8:6B
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:97:aa:5d:09:14:f6:6d:a6:61:dd:fc:22:41:42:a5:10:24:
66:99:3f:a1:7c:44:ea:b7:25:0b:73:fa:33:23:43:42:ad:4c:
88:11:ed:8d:e6:ac:ca:4a:b8:11:9e:1a:82:be:c3:f3:f5:1a:
c2:7a:0c:b7:34:81:0c:16:e6:a8:de:79:50:5b:ea:7b:6b:a2:
91:ea:f4:20:cd:63:b1:d6:c7:7b:5e:d1:9d:a2:ac:a1:09:9c:
fc:3e:57:31:3a:de:03:90:75:73:fb:2f:71:de:6b:67:bb:2a:
6f:d4:f6:14:0f:e2:e6:69:1b:48:0b:d5:2c:58:e7:60:96:eb:
08:35:61:4f:2a:40:90:61:d0:6f:3c:e5:35:fe:bf:ce:3a:d4:
c2:cb:4f:6c:5e:dc:d6:87:15:4a:e8:39:13:7f:55:5b:a1:c5:
6a:43:76:87:82:df:23:36:e2:af:97:58:7a:01:2b:78:3b:56:
f6:cd:af:41:83:87:09:ee:16:db:9e:23:06:66:6c:f5:5a:07:
a4:0c:36:04:77:44:50:4f:8b:ef:88:f5:a6:66:1a:ca:5d:81:
81:85:2d:56:a7:43:3e:64:8b:62:84:db:82:e4:d8:79:ab:39:
84:ef:57:12:cc:7e:50:d8:c3:f9:51:0a:00:cc:89:2a:68:19:
8e:a7:39:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:49:22 2026 by rpki-client