Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
File: LHXzXSVsxKW4gxm7fku7oynkk0E.mft (raw, json)
Hash identifier: rhSB/Mcz+Z7GAC3JLwf8HD6pQORuTb7hUbETLbk4yIc=
Subject key identifier: 3B:E9:BD:1F:C8:2B:78:AD:19:4C:E4:66:44:F3:91:4F:B0:9B:B5:34
Authority key identifier: 2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
Certificate issuer: /CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Certificate serial: 019D29615501B30CD24262042C49CD7E2558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
Manifest number: 109E
Signing time: Thu 26 Mar 2026 09:02:17 +0000
Manifest this update: Thu 26 Mar 2026 09:02:17 +0000
Manifest next update: Fri 27 Mar 2026 09:02:17 +0000
Files and hashes: 1: 1a0Y-XPntLJBTaP7Z1JCmBOeYnc.roa (hash: PDXJOAnSiEAeJBJEKNLP3n4C9TS71R3MwFilb6PORGw=)
2: LHXzXSVsxKW4gxm7fku7oynkk0E.crl (hash: 57bqOColeQTsL1DJT3+5kEj9etJuhnNyBfCbzSfP8a4=)
3: ijFoRhXfDlfrNpWNyFmogIXNNoA.roa (hash: adP2IDTZNzyeUMfynFkS2hIcBFbJGISzpZDlTGKl9HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:55:01:b3:0c:d2:42:62:04:2c:49:cd:7e:25:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Validity
Not Before: Mar 26 09:02:17 2026 GMT
Not After : Mar 27 09:02:17 2026 GMT
Subject: CN=3be9bd1fc82b78ad194ce46644f3914fb09bb534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:db:55:91:fc:2f:dc:68:c2:0d:92:75:7e:75:
76:8f:56:f1:63:c3:4e:b7:d5:25:f3:3c:36:1b:e3:
43:b4:88:8c:9a:2e:61:b8:60:1b:d0:be:36:4c:2b:
4c:b1:82:1d:bc:61:2f:a3:d8:5b:f4:94:3b:c7:df:
92:23:7d:9f:52:d3:b2:4a:2c:e9:b2:cc:1c:4a:bd:
80:8c:72:64:99:90:fe:37:14:82:b3:3c:23:b8:f9:
a8:15:7e:31:76:6e:84:d5:50:56:89:78:10:d5:62:
b6:10:bf:69:7f:2a:59:1d:e4:72:4d:c3:f3:19:b8:
82:e7:fc:c7:1b:4c:55:6a:0a:de:ce:1a:a4:48:54:
9a:f7:b3:55:b9:61:04:15:c1:85:c7:f0:42:c1:77:
10:42:76:80:47:0b:a0:d0:28:85:fb:19:f5:b6:50:
d2:40:67:da:cd:f1:95:45:bb:e6:5e:6d:59:3a:ba:
df:bf:dc:ad:27:58:b2:05:06:2a:2b:ad:ee:f5:ca:
d6:e3:a5:58:4a:d5:c2:d8:3f:53:d1:ce:98:9a:e1:
ab:13:ac:59:56:3b:1e:78:73:bb:bd:d6:78:75:01:
a4:26:86:1a:31:4c:33:96:72:16:32:52:56:9e:d9:
9e:15:ad:79:4d:1a:39:6d:4d:a7:fe:54:f5:63:05:
8a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E9:BD:1F:C8:2B:78:AD:19:4C:E4:66:44:F3:91:4F:B0:9B:B5:34
X509v3 Authority Key Identifier:
keyid:2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ef:d5:5c:20:f7:e9:f7:71:f4:e3:1a:5a:75:4e:97:0b:25:
19:f4:a9:d3:d9:1d:36:98:34:1e:b3:11:a3:3d:c6:d8:9b:03:
81:1b:bd:83:ab:bb:04:63:a6:78:c4:14:33:10:33:4b:ec:05:
b9:ed:bd:d0:4b:3d:d4:aa:36:38:2f:8e:80:2e:d8:96:f9:ea:
d5:c6:3b:b1:34:19:3a:5f:49:fe:06:47:ae:41:f9:cd:b3:b8:
69:c4:07:32:16:b6:79:39:43:73:e3:02:8b:7a:0f:90:7f:7e:
df:67:0a:7c:89:f3:0c:41:5e:18:26:0b:16:a6:23:49:66:9c:
93:c9:07:bc:3f:73:6d:55:25:9c:b0:a4:26:42:29:0e:c6:77:
c7:05:ec:53:3b:03:85:d3:c5:bd:b1:c9:46:d3:9e:dd:f4:09:
f5:8f:2e:4f:b7:4a:9d:ab:3d:25:73:09:d3:57:47:a6:43:bd:
d0:cf:28:4d:c2:73:71:b2:41:27:96:81:80:84:ea:9d:38:b7:
6c:80:42:cb:e5:8d:86:9a:bf:e9:b8:be:30:e0:ea:33:5d:75:
8b:82:51:e7:a7:88:c4:7c:0a:24:fa:99:e7:bb:19:fa:90:50:
fa:e1:63:ce:8f:bf:72:71:5a:f7:ef:e3:47:ea:ee:6a:49:75:
8d:0d:c4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:43:11 2026 by rpki-client