Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
File: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft (raw, json)
Hash identifier: s4ZN4r8kUaTT9o84NZHlwT+ZhRCM6Ss1HhMgjG9/HiI=
Subject key identifier: 14:72:2E:8A:95:4E:8C:37:D9:D0:DA:A0:B3:41:B4:70:6D:11:11:57
Authority key identifier: 96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
Certificate issuer: /CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Certificate serial: 01A110A8C95611E3A19271B981CB5486C359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
Manifest number: 11C4
Signing time: Tue 06 Oct 2026 10:00:59 +0000
Manifest this update: Tue 06 Oct 2026 10:00:59 +0000
Manifest next update: Wed 07 Oct 2026 10:00:59 +0000
Files and hashes: 1: Qb_RZp-mahSy8KfrU77wNxpfg_E.roa (hash: u1xd1aPYepFZHPAZOvL3xwts9hFrIKK/yaiHVAix9zo=)
2: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl (hash: Tk7vm39WJEQ9I0mC+WYRZEIVd3VvndnaMsOA+nrMzic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:a8:c9:56:11:e3:a1:92:71:b9:81:cb:54:86:c3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Validity
Not Before: Oct 6 10:00:59 2026 GMT
Not After : Oct 7 10:00:59 2026 GMT
Subject: CN=14722e8a954e8c37d9d0daa0b341b4706d111157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:57:f7:2e:e5:77:64:7e:57:94:c7:92:38:ec:
16:46:43:d9:d9:af:bb:7b:29:23:8d:d2:f5:b6:5f:
b9:ca:9f:e2:12:52:a1:1a:59:e4:47:bd:a6:1c:31:
d3:8b:35:2e:e7:e4:fd:21:ee:fd:65:23:1e:a7:0e:
16:dd:34:6a:d9:d1:b3:2c:c4:14:ea:53:3d:04:2b:
36:11:4c:90:05:7a:28:ec:44:7e:9e:3a:ad:1c:a4:
a1:f0:48:d3:e2:7e:fd:5c:47:27:62:9c:b2:ba:f7:
cd:21:33:b4:de:13:62:13:d8:7b:a6:e4:d6:0f:9c:
40:c7:a8:51:93:5c:85:8f:ba:e1:78:1d:2c:43:65:
16:43:f2:14:68:af:0f:97:dc:d2:c6:05:61:a5:75:
00:51:cf:6c:52:93:86:4a:0d:8c:27:23:d4:f4:e0:
e6:24:21:f8:35:e3:b6:b9:cf:29:8a:cf:b6:13:73:
9e:26:11:1c:35:8e:90:3c:39:79:c0:a0:93:e9:b2:
6e:3c:08:76:c9:1a:06:5e:ba:3d:67:f6:a6:44:10:
25:8d:ed:36:9f:31:6b:45:47:99:9b:f0:6c:4b:ef:
0a:38:ef:06:d4:15:6b:70:96:1e:d8:74:13:f0:e3:
7e:b6:2c:4c:c4:17:15:b0:a7:45:3c:59:c2:55:a6:
33:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:72:2E:8A:95:4E:8C:37:D9:D0:DA:A0:B3:41:B4:70:6D:11:11:57
X509v3 Authority Key Identifier:
keyid:96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:fd:d6:ca:4f:9f:ba:f3:e6:d5:2d:f1:eb:7f:fd:f5:33:15:
2a:36:25:ac:3b:d3:24:c9:17:a1:9d:70:5e:40:82:97:17:83:
10:f6:7d:4e:a9:19:49:e7:0d:1e:e0:b3:b6:b5:8b:64:32:2b:
ef:de:ba:89:85:40:91:93:fd:61:40:60:82:c8:ce:cd:5e:b7:
32:d5:6e:9b:a3:0e:32:12:b9:b4:1f:21:3a:f8:95:2f:29:b1:
10:e9:bc:23:6a:ec:b5:2e:a5:f0:75:f0:91:bb:ec:8a:19:c2:
1a:4c:61:bd:2a:e1:5a:42:6e:c2:0e:a6:3f:16:3d:28:cb:17:
a6:f2:e3:0f:e5:fc:01:82:50:27:3e:5c:b3:b7:0e:d2:fe:d8:
3b:af:35:a0:7c:98:ea:e9:89:ce:fb:d2:dd:24:22:d8:4b:d3:
7e:3e:b6:18:6a:1f:56:7b:85:e0:9d:64:2f:81:0a:d2:71:4f:
87:ff:69:e6:96:69:1d:59:18:75:64:51:f6:12:9c:fb:c9:6a:
1a:df:05:72:2d:a9:a5:c8:3f:a6:da:97:b3:23:81:c2:9c:42:
bb:b0:3a:3a:6c:ec:56:8b:71:60:05:60:9d:aa:b3:9a:53:a2:
86:23:67:70:ae:51:9d:21:be:b5:09:5d:ad:e6:b3:9e:5c:ba:
90:e1:ed:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:07:37 2026 by rpki-client