Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
File: LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft (raw, json)
Hash identifier: 00Uj4dInJmpOKlnDGnEZynJRdv/3bYtrcIxSTgofFj0=
Subject key identifier: 2A:52:EA:EE:E8:EA:F3:BF:8A:21:3C:59:05:FA:E6:A7:43:89:0D:71
Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
Certificate issuer: /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Certificate serial: 01A1DE02AA8B1CD47CB89E9C8B3E4877A002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
Manifest number: 1AFE
Signing time: Sun 15 Nov 2026 07:01:18 +0000
Manifest this update: Sun 15 Nov 2026 07:01:18 +0000
Manifest next update: Mon 16 Nov 2026 07:01:18 +0000
Files and hashes: 1: LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl (hash: d42nevKL+JX/Rc8YzfZVbRi1+Z3sRYhfnSyjNhtWGVI=)
2: PhCS65LruV3U6b8Ca6Z7Oo-MbY0.roa (hash: RoukLN17HEVFuKCJd4uqal1toMgfNC1RsX/IX0RX0fY=)
3: ZR8BONNdXKWp1MwsG4mK6VjTQHs.roa (hash: /U4sk1hEfw6QielSTTSNVHXW385f6r5x3U3PzQsHic0=)
4: _lZzPK9uWMwoSBp8I6Oz0H5otFM.roa (hash: HhqN6YMYlZ3P1sgosME+uE6us2GmXOviN/kysVznFCI=)
5: qVl9UPtcOfv2GnXxXOewgnePOCY.roa (hash: Ls9yx6jQRN+6skTSMeFCiw+2fZmjJYWCP94aDC2pEzQ=)
6: rdJ8xXk5mnbp3JUsMack9bv5xiI.roa (hash: D2xipsYNPUahyWKXqjJrN51ikNliYwMKQLyig70LUbA=)
7: ww1PQxdbKvTQH6rQL3Nf89Au6Os.roa (hash: qw3dBH90auYZSvCUgIiKsoKHtmICDEf0vkVYNxSJ9/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:aa:8b:1c:d4:7c:b8:9e:9c:8b:3e:48:77:a0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Validity
Not Before: Nov 15 07:01:18 2026 GMT
Not After : Nov 16 07:01:18 2026 GMT
Subject: CN=2a52eaeee8eaf3bf8a213c5905fae6a743890d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:85:62:46:9b:fb:bb:7b:3b:68:1e:ee:4f:6e:
b8:ff:2d:73:ad:d2:5c:f5:2a:06:4c:7d:c9:8c:a9:
a3:b1:5f:be:24:60:13:ea:ee:8d:57:5a:9b:90:a8:
fa:40:6c:f7:d3:7a:70:dc:3d:d4:12:2b:00:77:f7:
9c:b4:ac:cc:11:94:c7:eb:3f:ad:b4:60:1e:ee:56:
8a:06:e7:c3:07:3f:43:53:97:0e:02:2c:12:2c:20:
6f:be:0d:12:70:e2:56:da:fc:7b:2d:b3:76:37:a7:
c7:33:41:0a:e9:5e:09:6c:7d:9f:96:34:c7:67:52:
73:d2:5e:aa:8c:31:d0:a6:fc:e5:22:ba:d3:8a:ae:
e9:f7:26:98:1c:19:64:fa:d8:80:54:41:19:6e:30:
1b:d9:e0:e5:1c:e9:95:b9:38:e7:2b:6c:1a:89:4f:
c9:9b:e3:c3:7e:6d:b9:46:65:39:18:1a:8d:a2:93:
85:ef:70:26:ec:90:9c:8d:b7:46:92:1e:41:96:ce:
93:05:c4:87:09:4b:5c:86:64:e0:e4:49:0d:61:5c:
36:ec:e6:50:da:59:32:d0:7b:07:24:5c:40:57:48:
23:76:4b:dc:28:71:e0:7f:82:29:09:9c:29:30:16:
6d:b0:55:9b:ae:ba:92:da:57:00:be:95:fd:6b:ed:
c2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:52:EA:EE:E8:EA:F3:BF:8A:21:3C:59:05:FA:E6:A7:43:89:0D:71
X509v3 Authority Key Identifier:
keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d1:22:10:47:9a:5b:d6:e8:90:c9:11:b1:15:d7:c6:82:40:
9d:53:15:13:0d:5c:db:cf:bf:47:1a:78:7e:63:1d:c9:11:63:
73:4b:79:29:b9:59:d7:14:f3:70:5a:5c:ad:b3:77:e6:63:af:
10:0c:94:88:3e:be:a8:7d:58:67:a0:5b:43:75:dd:05:48:da:
3b:a4:48:74:8d:95:c1:16:81:21:9d:ab:94:83:33:d6:d8:f0:
7e:52:ba:00:63:5f:31:23:4c:36:20:a3:4c:60:13:03:7a:f8:
63:41:1b:ae:87:be:9d:48:41:6d:41:c6:77:38:c4:a2:e5:fd:
f9:ef:17:2d:50:ce:2b:6e:bb:ce:0e:cd:d4:4b:7f:5e:4a:54:
21:fd:4c:19:6a:74:4b:ce:a0:13:bf:99:4a:87:99:d7:07:57:
ab:61:ad:2d:3a:e7:a4:84:2d:13:9e:8d:6c:9c:26:b1:78:4e:
d2:f3:62:a8:92:81:82:2e:f7:87:f9:54:0b:f9:44:b7:6f:81:
ca:4a:21:c9:9e:a2:68:a2:18:98:f9:72:9e:0e:2d:4d:cd:e2:
70:eb:bb:1c:3e:85:bc:31:c0:c1:8a:c2:f1:e6:19:22:24:ed:
40:13:9b:6f:79:64:39:71:ad:55:e8:da:d8:ff:5c:34:75:56:
a1:9f:78:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:59:34 2026 by rpki-client