Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
File: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft (raw, json)
Hash identifier: FVEGaSHGBY/YrIAU0oTnDJa+HnH7gVxxSecOWPj3bGo=
Subject key identifier: 7C:8C:66:CD:6E:D5:C4:D4:DE:00:6B:DD:09:0E:A5:20:01:00:76:DC
Authority key identifier: 96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
Certificate issuer: /CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Certificate serial: 019F9247F9362B532000EB5BF799E29996A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
Manifest number: 10FE
Signing time: Fri 24 Jul 2026 04:00:18 +0000
Manifest this update: Fri 24 Jul 2026 04:00:18 +0000
Manifest next update: Sat 25 Jul 2026 04:00:18 +0000
Files and hashes: 1: Qb_RZp-mahSy8KfrU77wNxpfg_E.roa (hash: u1xd1aPYepFZHPAZOvL3xwts9hFrIKK/yaiHVAix9zo=)
2: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl (hash: e+NvYgQVCdo5zVmkMXZ2zbMpEstd+GMK4nfa4DgDjYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:47:f9:36:2b:53:20:00:eb:5b:f7:99:e2:99:96:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Validity
Not Before: Jul 24 04:00:18 2026 GMT
Not After : Jul 25 04:00:18 2026 GMT
Subject: CN=7c8c66cd6ed5c4d4de006bdd090ea520010076dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a2:14:3b:3d:af:2b:29:e6:24:02:52:a1:bb:
1c:77:2d:16:0e:84:0f:a4:6a:fb:10:02:69:be:f4:
c5:ab:2c:d6:6a:c1:b1:32:66:21:cb:3c:8a:89:84:
e7:9c:90:dc:c0:f7:b0:d8:e1:a4:b1:fd:69:f3:73:
28:05:dc:84:7d:50:35:67:d7:88:95:23:bf:09:f1:
d7:ff:0b:fe:dc:36:6c:59:27:81:73:f1:37:7a:77:
67:17:2f:c9:ec:66:a7:84:14:26:33:ca:c8:f6:a1:
c6:d7:7b:fd:fe:c1:68:40:16:b9:0d:9d:40:c8:df:
43:27:df:e3:1e:f1:9f:8e:48:03:64:f6:3a:15:62:
90:15:51:4a:49:71:fc:fe:6f:31:17:62:df:d7:05:
42:96:29:15:0b:fd:5c:fd:ea:88:82:5e:0b:e2:13:
98:74:3a:f1:43:06:c1:7a:31:1c:bd:b5:b1:55:91:
e7:59:21:c3:75:3d:2a:50:00:35:be:38:22:1b:44:
8e:e9:83:ca:69:11:46:ad:df:a2:01:64:69:e7:1e:
a7:86:c5:3e:d5:b0:76:e1:ee:c5:4f:51:7d:ab:a1:
e7:f9:bc:79:e2:60:a7:1c:08:b1:85:47:16:cf:df:
45:56:68:58:b9:20:75:54:0a:2f:78:61:ab:dc:93:
f4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8C:66:CD:6E:D5:C4:D4:DE:00:6B:DD:09:0E:A5:20:01:00:76:DC
X509v3 Authority Key Identifier:
keyid:96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:01:4b:17:ef:ae:68:f5:4a:5c:5b:e6:b2:ab:9e:76:e7:16:
16:f2:23:1d:06:f4:6c:7b:44:01:f0:27:0b:4d:e4:8f:bd:22:
ef:37:dd:bc:b1:f9:6f:22:c8:37:d6:39:86:e3:96:90:72:c2:
b2:01:c5:b5:4d:69:f5:b6:90:44:f3:be:d6:d9:e8:1b:47:75:
c5:7f:99:4d:a0:7b:38:23:5b:3f:59:0f:92:a2:b5:3e:ad:85:
5b:b8:00:a8:f5:5a:0d:4b:d7:82:1f:49:80:b4:25:84:df:e6:
d4:b7:8c:86:fa:fa:db:16:b4:41:b3:a3:d3:6e:98:79:0b:2a:
9c:f7:39:f1:17:19:b9:db:79:11:39:bb:41:d9:86:18:27:c2:
d0:35:a0:6e:47:9b:14:b1:fa:9e:0c:a6:9b:fd:60:8b:01:a0:
cb:57:58:09:e3:18:5d:3b:5a:78:1d:41:37:07:9c:ec:ce:d7:
98:3b:d5:e5:06:9b:7e:a2:52:e1:f9:fc:7c:f7:60:82:50:ff:
35:9c:48:74:08:2a:47:aa:64:eb:3f:ea:2f:ea:05:6d:dd:6a:
29:da:d7:ab:80:98:ed:29:37:37:07:74:71:3b:62:50:dc:64:
31:35:fa:f2:10:82:b6:77:68:ba:ef:f9:db:35:e6:24:38:d9:
fd:70:db:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:25:43 2026 by rpki-client