Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft
File: lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft (raw, json)
Hash identifier: +EKV8CykEVSSLCX1HXm8FpjbpwsEz8jCMNUQVst+tyg=
Subject key identifier: 2E:52:68:B7:7B:E9:F9:FB:5D:79:80:52:92:A5:4F:5B:8A:89:8F:6A
Authority key identifier: 96:17:27:13:0C:25:99:90:B0:05:EA:94:33:B5:7E:07:92:F1:AF:15
Certificate issuer: /CN=961727130c259990b005ea9433b57e0792f1af15
Certificate serial: 019D2816A30DD7A6D4DE805DBE2A65F13F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhcnEwwlmZCwBeqUM7V-B5LxrxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft
Manifest number: 1C
Signing time: Thu 26 Mar 2026 03:01:05 +0000
Manifest this update: Thu 26 Mar 2026 03:01:05 +0000
Manifest next update: Fri 27 Mar 2026 03:01:05 +0000
Files and hashes: 1: IBxQMw202wI9H-2El0dEcabarmQ.roa (hash: nV5yVbote6ZsQPTplfUETazD8sVRzYP39kvT+GSB85A=)
2: lhcnEwwlmZCwBeqUM7V-B5LxrxU.crl (hash: 6rkMffncaV/yYbW0W4r9BmLTyD7Fuae0K5U1DJdasBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhcnEwwlmZCwBeqUM7V-B5LxrxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:a3:0d:d7:a6:d4:de:80:5d:be:2a:65:f1:3f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961727130c259990b005ea9433b57e0792f1af15
Validity
Not Before: Mar 26 03:01:05 2026 GMT
Not After : Mar 27 03:01:05 2026 GMT
Subject: CN=2e5268b77be9f9fb5d79805292a54f5b8a898f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:59:39:31:fb:aa:c8:b8:a5:fd:37:39:40:99:
21:70:73:3b:ca:86:c8:9d:4b:b4:e5:aa:1f:d5:b8:
61:b3:17:73:f0:ac:66:ed:cc:64:26:36:c4:5b:90:
0c:aa:e8:ee:a5:03:4e:8b:c7:88:cf:cf:b3:d0:74:
1f:70:ca:41:b3:05:d2:64:08:34:8f:04:0d:e7:20:
95:9c:6e:cc:e0:fa:ad:e0:fe:07:d8:52:ac:da:84:
eb:fc:5a:13:0d:c4:6e:6e:b2:3f:85:e4:a9:6e:14:
cb:9b:27:c7:ad:91:1e:de:1c:1c:6e:23:59:ba:df:
86:c1:31:42:dc:df:8a:50:43:cf:d7:47:ba:78:aa:
62:45:44:b6:d2:f9:a7:60:76:61:85:87:9c:36:f3:
1b:ec:d1:d8:8d:6a:96:72:41:7e:80:ca:e8:58:4f:
2c:df:b3:93:c2:f1:8b:4b:27:91:0f:e8:c3:6e:6d:
e7:a2:f7:24:e6:d9:74:f8:bf:3e:ba:c3:ef:04:b9:
9d:f6:f2:9c:ae:bf:f0:54:88:19:69:17:55:f9:77:
9d:6b:78:50:e6:98:94:00:ea:3b:85:9c:6e:a5:cb:
95:48:69:8c:65:d0:2f:bd:1d:9e:27:6b:43:3f:36:
a2:95:38:ab:06:bd:4e:ce:6a:b7:ad:7d:c2:ee:7b:
36:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:52:68:B7:7B:E9:F9:FB:5D:79:80:52:92:A5:4F:5B:8A:89:8F:6A
X509v3 Authority Key Identifier:
keyid:96:17:27:13:0C:25:99:90:B0:05:EA:94:33:B5:7E:07:92:F1:AF:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhcnEwwlmZCwBeqUM7V-B5LxrxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:bf:34:86:c4:b5:0a:ee:94:49:45:14:0e:00:c9:d7:93:10:
a5:16:21:44:db:72:a8:70:2c:1a:5e:aa:79:94:98:f0:78:4d:
d2:18:34:e4:4f:b0:a3:14:15:b4:b1:aa:ec:d4:9c:31:aa:5e:
6f:bc:7c:4e:a1:9c:d7:23:cf:fb:c2:1c:f0:dc:22:9e:43:20:
57:55:6c:8f:31:65:4e:25:74:03:ee:65:70:88:53:ce:19:ee:
91:de:72:b0:0e:76:da:f6:b8:4c:61:ee:f9:14:d7:36:2e:d8:
63:a4:be:35:51:60:b4:26:12:a0:81:5c:ab:30:fb:39:e7:51:
60:af:04:e3:73:9a:20:03:c7:97:89:53:4c:5b:13:7d:4d:40:
8f:d9:52:1e:32:9a:b7:50:02:e3:be:d5:f1:66:27:d3:1e:9f:
fe:95:e2:af:e7:30:d7:11:a9:c6:1a:42:c1:ab:44:5e:0d:4e:
9f:69:1d:0a:a1:51:10:06:88:5d:6f:df:e8:7e:4a:76:fb:8d:
51:08:6e:d1:dd:a4:3f:a2:e5:dc:48:b3:ac:6a:3b:1c:da:29:
bc:ca:c6:d6:28:b8:53:b6:d1:30:58:27:22:c7:dc:cf:d3:cd:
69:16:81:7b:cb:00:e6:0b:e3:32:16:fc:37:1f:74:26:45:3b:
82:a0:ba:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFqMN16bU3oBdvipl8T85MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MTcyNzEzMGMyNTk5OTBiMDA1ZWE5NDMzYjU3ZTA3OTJm
MWFmMTUwHhcNMjYwMzI2MDMwMTA1WhcNMjYwMzI3MDMwMTA1WjAzMTEwLwYDVQQD
EygyZTUyNjhiNzdiZTlmOWZiNWQ3OTgwNTI5MmE1NGY1YjhhODk4ZjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFk5MfuqyLil/Tc5QJkhcHM7yobI
nUu05aof1bhhsxdz8Kxm7cxkJjbEW5AMqujupQNOi8eIz8+z0HQfcMpBswXSZAg0
jwQN5yCVnG7M4Pqt4P4H2FKs2oTr/FoTDcRubrI/heSpbhTLmyfHrZEe3hwcbiNZ
ut+GwTFC3N+KUEPP10e6eKpiRUS20vmnYHZhhYecNvMb7NHYjWqWckF+gMroWE8s
37OTwvGLSyeRD+jDbm3novck5tl0+L8+usPvBLmd9vKcrr/wVIgZaRdV+Xeda3hQ
5piUAOo7hZxupcuVSGmMZdAvvR2eJ2tDPzailTirBr1Ozmq3rX3C7ns2/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5SaLd76fn7XXmAUpKlT1uKiY9qMB8GA1UdIwQY
MBaAFJYXJxMMJZmQsAXqlDO1fgeS8a8VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGhjbkV3d2xtWkN3QmVxVU03Vi1CNUx4cnhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81OGRmMDAtOWRkYi00ZmQ1LWI2NWMt
NmNmZGMyODc3NTE4LzEvbGhjbkV3d2xtWkN3QmVxVU03Vi1CNUx4cnhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC81OGRmMDAtOWRkYi00ZmQ1LWI2NWMtNmNmZGMyODc3NTE4
LzEvbGhjbkV3d2xtWkN3QmVxVU03Vi1CNUx4cnhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwb80hsS1
Cu6USUUUDgDJ15MQpRYhRNtyqHAsGl6qeZSY8HhN0hg05E+woxQVtLGq7NScMape
b7x8TqGc1yPP+8Ic8NwinkMgV1VsjzFlTiV0A+5lcIhTzhnukd5ysA522va4TGHu
+RTXNi7YY6S+NVFgtCYSoIFcqzD7OedRYK8E43OaIAPHl4lTTFsTfU1Aj9lSHjKa
t1AC477V8WYn0x6f/pXir+cw1xGpxhpCwatEXg1On2kdCqFREAaIXW/f6H5KdvuN
UQhu0d2kP6Ll3EizrGo7HNopvMrG1ii4U7bRMFgnIsfcz9PNaRaBe8sA5gvjMhb8
Nx90JkU7gqC6Qw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:14:11 2026 by rpki-client