Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
File: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft (raw, json)
Hash identifier: PqWAekalebxHKzQ2kLFMXcnwefmtFH3wHW2SgH+yDWY=
Subject key identifier: 43:3C:E4:38:5B:C7:FE:D6:0B:1A:49:58:30:A4:A2:32:32:D0:E2:11
Authority key identifier: 96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
Certificate issuer: /CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Certificate serial: 019E1D907FF1D5B5B394169D6DDD4AF098E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
Manifest number: 103D
Signing time: Tue 12 May 2026 19:01:09 +0000
Manifest this update: Tue 12 May 2026 19:01:09 +0000
Manifest next update: Wed 13 May 2026 19:01:09 +0000
Files and hashes: 1: Qb_RZp-mahSy8KfrU77wNxpfg_E.roa (hash: u1xd1aPYepFZHPAZOvL3xwts9hFrIKK/yaiHVAix9zo=)
2: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl (hash: 3Xho9gFr5fuhYVnsU+skNeZQAbWfs1lIZ7mI0WJHwRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:7f:f1:d5:b5:b3:94:16:9d:6d:dd:4a:f0:98:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Validity
Not Before: May 12 19:01:09 2026 GMT
Not After : May 13 19:01:09 2026 GMT
Subject: CN=433ce4385bc7fed60b1a495830a4a23232d0e211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:94:2b:98:ef:e1:48:85:fa:9b:b0:a2:ea:
5a:f1:d5:b9:d8:98:b4:c1:83:ac:fb:e8:eb:9d:15:
f8:6a:0f:e2:37:72:d1:57:9e:e3:ed:79:ca:6a:1c:
c6:83:f5:38:cd:3d:5a:1e:05:a2:c6:be:79:72:25:
68:dd:96:82:ec:65:6a:7c:68:c7:46:06:d0:51:a8:
a8:71:24:5c:24:c8:d9:06:72:97:e8:dc:d0:ca:87:
17:d9:b1:cd:94:04:c0:6b:3d:d1:f8:f0:73:a4:b9:
1d:98:b5:6e:82:e8:da:b6:a4:e4:53:f7:91:52:43:
09:6b:30:c0:7e:34:8c:ff:5a:b8:b6:9e:a9:69:47:
96:61:6a:e8:42:73:a1:5b:c8:43:d2:b1:36:75:30:
3b:14:03:a0:2a:3a:d9:dc:c4:7b:ff:02:9a:88:54:
ba:91:8f:f5:56:16:1e:a2:5d:d1:e0:8b:3e:d8:d5:
1e:d8:7c:50:b3:72:69:4b:b6:25:dc:ab:85:f1:04:
40:21:d1:d0:19:f6:bd:89:5c:19:e9:06:58:4f:8b:
fc:04:40:10:36:5a:23:59:a2:a1:cc:ad:0f:32:20:
3e:d2:52:df:d2:68:1c:4d:68:74:dc:a8:8c:b5:4b:
e0:56:ce:14:7d:3f:a7:47:c1:3d:ba:fa:61:b5:89:
c5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3C:E4:38:5B:C7:FE:D6:0B:1A:49:58:30:A4:A2:32:32:D0:E2:11
X509v3 Authority Key Identifier:
keyid:96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:2c:f2:78:fd:8d:29:2e:28:c6:52:2e:3e:72:21:b6:aa:d5:
09:f6:30:e6:4d:36:ba:a5:d5:ca:84:d1:47:73:4f:5d:86:32:
20:95:6c:c0:29:47:87:78:d3:8a:3c:a2:80:26:87:ef:02:64:
08:18:f9:f1:f5:97:66:89:8a:35:cc:1d:52:51:b4:28:47:96:
ff:85:41:5c:b0:6c:53:0d:33:54:5f:a8:1b:90:2f:39:97:d0:
0e:49:6c:66:c0:ed:b7:82:ab:d9:8e:ea:98:9a:6c:ef:c3:32:
1e:11:60:ab:3c:46:2b:b7:95:cc:bb:99:50:7a:46:b1:b1:1a:
65:02:58:ff:01:e5:36:02:86:80:7c:85:2b:d4:a1:38:34:20:
c1:ae:51:57:d7:8e:79:77:88:c9:ea:54:1c:02:db:c2:8c:a6:
fc:16:57:f4:f5:c7:42:f5:7d:93:e4:ed:6f:1b:f7:30:76:33:
78:11:5f:7e:a1:1a:cb:f4:19:72:d7:65:65:f1:3f:de:e1:04:
c5:05:90:59:6e:ee:88:c0:68:b6:ec:26:90:a7:48:cb:58:a4:
73:5a:68:3f:15:fa:0f:62:bb:18:38:f2:87:28:80:60:f3:1f:
89:69:8f:b3:01:7f:af:e1:b3:fd:eb:c6:be:2e:02:05:af:ac:
81:22:20:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:11 2026 by rpki-client