Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft
File: lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft (raw, json)
Hash identifier: l5JIKQ28tjUwV9r+u6R/QqnGj4e9jFFa59ngsQwy/g8=
Subject key identifier: F0:5A:33:E5:9D:B7:92:9B:78:0D:19:9D:68:1A:1B:C3:9F:80:A8:91
Authority key identifier: 96:17:27:13:0C:25:99:90:B0:05:EA:94:33:B5:7E:07:92:F1:AF:15
Certificate issuer: /CN=961727130c259990b005ea9433b57e0792f1af15
Certificate serial: 01A0E02AB34131671FB0A343F2F9B6B9B119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhcnEwwlmZCwBeqUM7V-B5LxrxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft
Manifest number: 0209
Signing time: Sun 27 Sep 2026 00:01:29 +0000
Manifest this update: Sun 27 Sep 2026 00:01:29 +0000
Manifest next update: Mon 28 Sep 2026 00:01:29 +0000
Files and hashes: 1: IBxQMw202wI9H-2El0dEcabarmQ.roa (hash: nV5yVbote6ZsQPTplfUETazD8sVRzYP39kvT+GSB85A=)
2: lhcnEwwlmZCwBeqUM7V-B5LxrxU.crl (hash: rhtwi9I6mS68IcDKWgkXe6I0MDoarANCtuPVPjJ775k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhcnEwwlmZCwBeqUM7V-B5LxrxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:b3:41:31:67:1f:b0:a3:43:f2:f9:b6:b9:b1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961727130c259990b005ea9433b57e0792f1af15
Validity
Not Before: Sep 27 00:01:29 2026 GMT
Not After : Sep 28 00:01:29 2026 GMT
Subject: CN=f05a33e59db7929b780d199d681a1bc39f80a891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:81:d7:02:a4:bf:bb:a6:f7:75:c3:7f:19:ee:
bb:7b:c5:83:fd:41:85:71:1c:56:aa:88:d3:59:68:
49:df:19:f5:7d:f3:55:fa:0f:8e:03:4d:f5:e2:46:
0b:aa:8d:1f:db:50:aa:f1:c2:c0:95:84:10:00:a5:
b6:e7:9e:3c:de:9e:0d:66:95:47:dd:1c:99:da:25:
9c:89:cb:60:fe:18:ff:ee:c2:b1:d2:72:74:9b:da:
5d:79:8c:3f:ee:45:cd:9d:3a:4f:58:04:da:a8:b0:
54:39:c5:60:8d:15:ac:98:83:9b:f2:fb:53:44:19:
82:53:6a:9e:7f:0b:83:b7:03:4c:0e:bc:e5:6f:1e:
d7:91:37:e8:1f:8a:ea:f7:c0:40:e5:88:6d:5b:d6:
84:9e:7a:96:be:b5:25:0d:57:93:c0:13:d8:7a:b9:
63:8a:ad:10:47:77:2b:64:2f:b6:f9:b2:23:48:26:
da:d5:f4:b8:5c:39:c1:73:fc:bd:05:a6:70:48:fa:
31:68:1c:5f:8a:24:d0:67:d9:e9:06:ca:17:0f:bd:
fe:46:06:d8:f6:2a:dd:21:e3:2e:f7:18:a6:a6:c8:
75:72:c1:ec:e6:ae:b0:87:bd:1b:aa:d3:82:b6:25:
24:05:cb:2e:13:30:c8:31:ca:87:27:59:5b:56:81:
f8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5A:33:E5:9D:B7:92:9B:78:0D:19:9D:68:1A:1B:C3:9F:80:A8:91
X509v3 Authority Key Identifier:
keyid:96:17:27:13:0C:25:99:90:B0:05:EA:94:33:B5:7E:07:92:F1:AF:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhcnEwwlmZCwBeqUM7V-B5LxrxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:95:f6:af:a3:c6:54:0a:e9:9a:98:c9:a2:41:4c:af:50:62:
53:f4:0d:56:3e:0f:13:c7:5f:0d:4b:1b:4b:dc:30:01:8c:e8:
75:c0:64:0f:0c:38:28:5b:0b:83:99:50:5d:83:9d:db:81:74:
54:34:66:78:2e:d2:2b:eb:cb:39:10:d3:54:0e:7e:d0:59:8e:
3c:4d:a1:a3:8b:e8:7b:da:9b:5f:ba:29:b2:ee:8f:dd:35:37:
fe:c4:a1:24:3f:41:e2:fa:ad:c2:5e:e1:aa:1e:b6:33:2a:e2:
94:a2:e5:3d:0d:cb:e4:b4:97:e0:d8:6e:e9:a3:d1:1b:a0:c1:
74:23:04:ba:5c:73:0f:90:e1:a3:60:83:a6:4d:ef:e3:04:1b:
5c:e9:8a:9b:29:44:ba:9f:12:2b:cc:bd:22:de:b8:99:ba:bb:
fa:ee:02:e4:2c:3e:1b:ef:3a:d3:da:96:f4:f3:d7:4e:73:17:
16:43:f9:0d:8e:60:98:df:ff:dd:c3:cc:7f:66:f9:3e:1d:a6:
f7:87:ed:78:4c:d3:0c:06:6b:31:cc:c1:13:17:22:ee:75:2e:
19:0d:cb:7c:c5:63:52:87:a8:30:fd:ab:ac:da:29:95:8f:ad:
6f:1d:13:fa:48:8e:23:3e:80:aa:72:36:91:14:07:6e:87:36:
ee:f5:7b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:40:54 2026 by rpki-client