Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
File: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft (raw, json)
Hash identifier: hsmA1WRmISD+WnW9empUT9zvHP88TCN5fiQTAN7N4F4=
Subject key identifier: AF:73:B0:A5:F5:02:3B:EC:B4:C5:F8:2D:60:4A:72:16:80:AF:45:7D
Authority key identifier: 96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
Certificate issuer: /CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Certificate serial: 019D265F04FA8FDF0669E8063759C96775A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
Manifest number: 0FBD
Signing time: Wed 25 Mar 2026 19:00:54 +0000
Manifest this update: Wed 25 Mar 2026 19:00:54 +0000
Manifest next update: Thu 26 Mar 2026 19:00:54 +0000
Files and hashes: 1: Qb_RZp-mahSy8KfrU77wNxpfg_E.roa (hash: u1xd1aPYepFZHPAZOvL3xwts9hFrIKK/yaiHVAix9zo=)
2: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl (hash: roqGxHOa7ZGq5JKkswhmXXQZ+Hd9QBtRGUa9nbLPtWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:04:fa:8f:df:06:69:e8:06:37:59:c9:67:75:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Validity
Not Before: Mar 25 19:00:54 2026 GMT
Not After : Mar 26 19:00:54 2026 GMT
Subject: CN=af73b0a5f5023becb4c5f82d604a721680af457d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:12:9a:e3:b1:fb:31:76:65:dc:f5:55:99:
b6:b0:d5:d8:7a:48:71:9a:c2:9b:1c:d5:03:b8:86:
1f:b1:0c:3b:f6:35:07:23:5e:5a:7f:41:cd:12:0a:
ca:db:08:d9:51:8d:5f:a1:91:44:e0:38:2e:97:f7:
bb:ea:a8:50:e3:15:62:84:df:10:da:91:e5:87:b9:
1f:46:2f:b9:99:c0:b0:59:81:4b:3a:ba:e7:d0:83:
2a:3b:10:c8:ba:9c:c3:21:6b:54:13:b3:0d:7b:dd:
b7:2c:41:6f:75:41:60:da:b0:c0:a5:e6:f2:a7:f4:
34:4a:61:8a:52:b5:8f:8c:1e:07:8f:75:1b:b1:78:
fd:f4:0e:8f:59:67:1f:91:35:47:18:0c:07:05:11:
6e:a2:83:7f:d2:75:dd:74:0b:80:a2:2a:28:9f:6e:
8f:75:b4:e0:21:e7:6b:b1:33:73:ba:ec:bf:df:6d:
76:30:0e:ac:bd:7b:d6:8a:0c:6a:55:a8:b4:b8:4d:
56:29:d0:05:ea:88:d0:90:9d:b3:68:5d:23:63:a2:
76:34:c5:86:ae:d7:2c:62:e0:4d:ed:08:6e:aa:6c:
7b:f5:db:6b:8f:93:b2:98:5d:c7:d8:1b:4c:23:bc:
c0:4c:4b:36:96:c3:9d:22:22:87:1c:73:41:49:55:
7a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:73:B0:A5:F5:02:3B:EC:B4:C5:F8:2D:60:4A:72:16:80:AF:45:7D
X509v3 Authority Key Identifier:
keyid:96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:5d:b2:e8:c1:60:92:67:6d:07:15:ba:42:ad:b3:0c:2f:1d:
f1:aa:9a:70:81:e1:14:60:6a:00:5b:a3:47:dd:72:97:95:df:
c1:de:dc:58:d1:49:7b:46:0c:cf:8d:76:95:50:83:12:5b:20:
12:fd:77:bd:aa:5d:be:99:1a:8a:23:37:7c:5f:92:c8:8a:60:
ea:b3:c4:65:cc:c2:ba:fe:71:3b:ed:da:18:95:88:c2:63:8f:
fe:8b:67:cb:64:f2:07:1d:58:d5:23:b5:4b:2a:b0:38:97:bb:
36:4a:65:00:43:1f:a8:ef:2e:3d:05:d5:10:93:a8:74:24:91:
82:1a:96:e0:0e:00:11:f4:70:31:29:e1:ec:3c:09:f4:ff:df:
37:ac:4a:44:8b:99:b2:1d:fd:d4:88:26:91:d1:d0:76:54:0a:
e8:74:9f:29:12:0b:07:39:ed:a3:9e:57:40:64:83:5c:60:74:
a0:c2:27:28:f0:ab:f7:9f:b6:d8:0d:24:99:5d:9c:03:d4:d8:
2b:48:76:77:81:3c:b2:96:b8:c6:fe:53:3b:1f:72:79:2d:90:
fe:f5:c2:c7:07:0a:64:34:37:00:47:34:64:cd:46:97:08:f3:
1a:c9:75:f9:8d:e2:3e:d8:b0:9f:2c:0a:39:49:69:b7:86:93:
9c:72:d2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:35 2026 by rpki-client