Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fe4f03-033d-493a-8176-006e52ff77df/1/LhyU6i-JbBvfcG8eHDxZpMavwiw.mft
File: LhyU6i-JbBvfcG8eHDxZpMavwiw.mft (raw, json)
Hash identifier: 7UGdy2MPOovx76AZC+/8YTfRCZ6WtCWOdU+tT/VQ7nQ=
Subject key identifier: 8A:4F:95:ED:61:79:8C:67:85:F4:30:4F:80:5F:64:7D:AC:62:D0:88
Authority key identifier: 2E:1C:94:EA:2F:89:6C:1B:DF:70:6F:1E:1C:3C:59:A4:C6:AF:C2:2C
Certificate issuer: /CN=2e1c94ea2f896c1bdf706f1e1c3c59a4c6afc22c
Certificate serial: 019D2BF2E8CB058999E2CDD5B838C9081A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhyU6i-JbBvfcG8eHDxZpMavwiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fe4f03-033d-493a-8176-006e52ff77df/1/LhyU6i-JbBvfcG8eHDxZpMavwiw.mft
Manifest number: 96
Signing time: Thu 26 Mar 2026 21:00:32 +0000
Manifest this update: Thu 26 Mar 2026 21:00:32 +0000
Manifest next update: Fri 27 Mar 2026 21:00:32 +0000
Files and hashes: 1: LhyU6i-JbBvfcG8eHDxZpMavwiw.crl (hash: aK2tL2QW4ZyN+qil746gfvDaoWLv3/Vn6xQwweULqpA=)
2: nC0BklgM5Gqb773_4KE7YEJa48o.roa (hash: iFvusL2e+CmA5BNVVcVR79wn1MKJILkJWhtD9a5znMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fe4f03-033d-493a-8176-006e52ff77df/1/LhyU6i-JbBvfcG8eHDxZpMavwiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/fe4f03-033d-493a-8176-006e52ff77df/1/LhyU6i-JbBvfcG8eHDxZpMavwiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhyU6i-JbBvfcG8eHDxZpMavwiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f2:e8:cb:05:89:99:e2:cd:d5:b8:38:c9:08:1a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1c94ea2f896c1bdf706f1e1c3c59a4c6afc22c
Validity
Not Before: Mar 26 21:00:32 2026 GMT
Not After : Mar 27 21:00:32 2026 GMT
Subject: CN=8a4f95ed61798c6785f4304f805f647dac62d088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:01:65:c3:8e:24:da:69:8c:4e:c9:bb:97:54:
d3:6f:6a:44:16:76:fa:12:12:76:19:03:6b:34:19:
b6:dc:02:45:6d:6d:24:55:31:28:8a:66:e8:00:51:
5f:c6:44:39:fe:c3:c8:dd:41:10:67:94:5a:f5:03:
20:48:c7:8d:32:02:f3:b4:ce:27:8f:57:31:86:af:
a1:6f:90:a9:c6:0f:6d:4e:1a:23:6b:82:d0:f0:fa:
b0:43:25:1c:e3:a4:d6:21:48:fc:29:b3:bc:7d:64:
e9:18:4c:d1:6c:5a:0b:d0:be:15:28:a7:09:6c:d0:
59:0d:a9:25:eb:70:ab:95:79:45:82:63:a8:80:de:
9f:1a:28:a6:61:ba:da:e8:8f:ce:2c:78:fa:eb:e8:
a4:a8:1b:c2:d5:d8:2c:e1:af:e8:44:d0:0c:1e:9a:
6e:d5:62:d4:8f:47:1f:24:20:8f:af:a5:ff:81:e1:
c6:5d:f2:21:55:8b:0f:b4:33:1f:c5:73:11:73:ef:
b1:31:12:16:c8:34:92:69:0c:04:e7:7c:52:aa:fb:
6f:22:64:d7:9d:66:7f:ad:b0:10:c0:5b:22:38:bd:
96:40:e8:03:5e:bf:15:39:1d:2f:80:f4:f6:d2:8b:
c4:62:1f:82:fb:af:20:ef:25:89:51:9b:c1:69:e3:
04:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4F:95:ED:61:79:8C:67:85:F4:30:4F:80:5F:64:7D:AC:62:D0:88
X509v3 Authority Key Identifier:
keyid:2E:1C:94:EA:2F:89:6C:1B:DF:70:6F:1E:1C:3C:59:A4:C6:AF:C2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhyU6i-JbBvfcG8eHDxZpMavwiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fe4f03-033d-493a-8176-006e52ff77df/1/LhyU6i-JbBvfcG8eHDxZpMavwiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fe4f03-033d-493a-8176-006e52ff77df/1/LhyU6i-JbBvfcG8eHDxZpMavwiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b5:ff:5c:23:9e:3f:17:70:3b:8e:91:52:5f:3e:91:4e:55:
7b:60:9c:57:f5:52:6b:ae:6e:e7:13:e3:04:51:26:6a:bb:4a:
d8:bd:ee:eb:c7:2a:67:e8:b2:1e:33:a6:f9:fc:80:34:f7:32:
75:59:04:83:68:ec:f2:64:4c:9c:e9:76:3f:a8:7a:2f:ea:9a:
ee:63:b6:9a:8b:2f:59:d3:c3:f7:f8:59:8e:4c:ca:b8:97:f8:
06:58:ef:6b:0a:d0:f7:08:aa:04:a6:5c:e1:c8:e9:4d:ef:c2:
59:7f:96:0a:c6:46:1e:fc:f9:94:fe:a9:2d:cb:79:be:31:0d:
b9:8d:8b:6c:5e:7b:98:0c:56:24:3c:e5:94:3f:b5:64:e7:be:
5c:43:ec:f8:58:cd:ce:87:b3:e4:cf:dd:3a:f5:09:2d:a7:35:
e4:f6:58:d2:b7:c3:ff:c2:00:af:3d:20:51:a8:cc:8a:74:eb:
50:d9:6e:38:60:50:82:11:79:43:54:d3:a9:1c:9a:fe:c8:1d:
04:e5:23:a6:56:b8:ec:eb:e9:32:d5:b6:be:95:2d:5e:a0:d1:
42:47:6a:95:0b:b7:a3:5e:46:cc:f2:9d:a8:a5:9e:6b:91:e2:
74:c6:5d:fc:b1:85:a6:b4:96:90:6d:b4:98:f2:90:06:73:ba:
08:25:2b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:27:32 2026 by rpki-client