Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
File: lhebOdHB0o9QY8qSHWAH42Phxgs.mft (raw, json)
Hash identifier: 5GGMsBLfVN3KkCedAY7vxYGWDEIa3p0mSObZrZIWtGw=
Subject key identifier: CA:72:85:BC:E3:85:E8:28:97:D9:E2:35:E5:49:AD:7A:1E:0F:3B:F6
Authority key identifier: 96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B
Certificate issuer: /CN=96179b39d1c1d28f5063ca921d6007e363e1c60b
Certificate serial: 019D27727EA1B46C0D79AF68FAB674173648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:01:48 +0000
Manifest this update: Thu 26 Mar 2026 00:01:48 +0000
Manifest next update: Fri 27 Mar 2026 00:01:48 +0000
Files and hashes: 1: WNgi38YIBh7gSGGMAz3pOwSfPa8.roa (hash: Fi6JSkMtS00G2FM2ty185le8FKrXwlLgR3IpBCt2xCc=)
2: lhebOdHB0o9QY8qSHWAH42Phxgs.crl (hash: Z6TD8nUMig+MoXM7VZmoLPEKT4vgy/UdzFL5VkZKbAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:7e:a1:b4:6c:0d:79:af:68:fa:b6:74:17:36:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96179b39d1c1d28f5063ca921d6007e363e1c60b
Validity
Not Before: Mar 26 00:01:48 2026 GMT
Not After : Mar 27 00:01:48 2026 GMT
Subject: CN=ca7285bce385e82897d9e235e549ad7a1e0f3bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:54:94:b1:4d:f8:5c:7e:bd:26:88:5a:e2:
ff:bf:b6:77:7f:80:c3:df:85:d7:e1:c8:2c:aa:15:
30:94:23:5c:94:ca:ea:4d:34:3e:84:dd:57:46:2d:
d9:5a:bd:ff:c7:1c:ed:c1:b9:ef:43:cc:7c:6b:f7:
84:55:67:cc:f5:53:cb:e2:6e:65:0e:a7:44:0e:41:
bd:94:f5:c5:11:ae:f1:56:66:c3:12:23:f8:53:fb:
fa:ce:12:51:76:b8:9c:94:8c:40:3f:80:73:79:65:
61:0c:55:81:55:73:dc:9d:94:52:eb:00:2a:27:74:
af:ef:52:90:65:7e:50:e9:f4:f6:66:40:b1:a2:74:
2e:88:9c:0d:ce:39:de:6d:d8:a9:ff:a3:44:e1:89:
a0:0d:77:b1:d9:9b:dc:31:1c:da:d0:ed:6e:a4:4e:
9b:42:3f:e0:0d:c9:c7:ec:d7:2e:4d:65:e3:1a:d9:
41:2e:bc:45:6d:27:f1:67:db:90:b6:5c:4c:e2:0f:
5c:38:8c:f9:7f:3f:4b:76:fc:8c:1f:86:90:fb:19:
5d:66:bc:44:42:9f:bc:16:76:28:3a:98:3d:12:e6:
44:8e:58:f6:9c:d5:83:39:b3:31:d5:25:3b:3c:8d:
5a:0b:87:d3:34:68:42:44:78:1c:13:dd:a9:4b:69:
7a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:72:85:BC:E3:85:E8:28:97:D9:E2:35:E5:49:AD:7A:1E:0F:3B:F6
X509v3 Authority Key Identifier:
keyid:96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:39:75:bd:40:b9:17:79:ba:1e:29:a1:c5:f3:ac:14:7f:7b:
bd:fd:d1:a0:12:47:48:5a:84:dc:cf:5d:6b:8e:81:9e:8b:09:
cc:a6:a1:d0:e2:a1:af:a8:a4:29:e0:38:1b:12:7f:54:94:91:
32:3d:f2:c2:09:f6:1e:5c:0f:fb:67:ae:92:dc:2f:4f:db:40:
6f:ca:3e:de:6e:2a:ba:3e:64:e7:b7:46:45:18:cc:f0:42:dc:
36:18:af:b2:b2:96:ff:99:1b:dc:74:67:a9:03:1c:00:dc:6d:
c2:ff:f1:92:ed:b0:ec:09:51:16:e5:b2:cc:bf:c2:22:e7:f5:
a7:36:66:0b:fd:0b:93:70:4b:ba:dc:e5:a3:96:d3:77:12:e8:
31:df:a2:d8:7d:60:84:5c:e9:bd:12:4e:c0:7d:76:d4:57:3e:
b9:b5:b5:96:bd:c5:8e:a0:77:99:9f:4d:97:93:49:28:f8:ad:
96:56:f0:de:6d:2c:8a:15:44:4f:4e:e7:ef:c9:2a:cc:e2:1e:
05:81:e1:66:d6:ef:d3:79:54:e8:ea:8c:d4:2f:19:6e:d2:63:
f8:76:4c:c5:ab:26:a8:cd:8b:65:31:91:ff:b8:c4:df:38:c6:
ad:e1:6d:2b:ee:4a:13:11:9a:fa:fe:3f:7c:6a:7b:55:4d:83:
73:c1:34:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:22 2026 by rpki-client