Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
File: lLHL_0vZcPon_e_Uv2iwLWjSud0.mft (raw, json)
Hash identifier: ZdJyg/1JNta17zj9m4Qm/XkkkOSHPVd+/KL8Ih7y2lc=
Subject key identifier: F6:13:E9:95:A6:AB:D1:F8:BF:16:C8:05:55:E4:11:F4:93:56:17:FC
Authority key identifier: 94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
Certificate issuer: /CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Certificate serial: 019D2696340BA3B9C011E635F68ED34CE385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
Manifest number: 1842
Signing time: Wed 25 Mar 2026 20:01:10 +0000
Manifest this update: Wed 25 Mar 2026 20:01:10 +0000
Manifest next update: Thu 26 Mar 2026 20:01:10 +0000
Files and hashes: 1: Nmcc09Xt79K0jETaPBL1LxCEW6o.roa (hash: 5YHh9vd/uVykgxuhDt7Fxzyb5DssF7KZ7qdP7IjIZZU=)
2: lLHL_0vZcPon_e_Uv2iwLWjSud0.crl (hash: qAPGoUezHvzL2rJRZiygzbzAi5O2pFTRSlgZdWi1wYk=)
3: mMaNrGQwPlqEufcbOdI_Rb_6RwQ.roa (hash: 1np7IvcHjiOYMR/ORA7UoY/R2p5vVot2cY5J1yx4uw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:34:0b:a3:b9:c0:11:e6:35:f6:8e:d3:4c:e3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Validity
Not Before: Mar 25 20:01:10 2026 GMT
Not After : Mar 26 20:01:10 2026 GMT
Subject: CN=f613e995a6abd1f8bf16c80555e411f4935617fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:8b:27:6e:cb:99:d2:ce:b1:ce:b4:ed:10:
81:39:3f:16:d9:f0:d0:32:39:13:79:a4:78:5a:d7:
b0:bc:c0:ea:22:01:23:a1:84:70:47:f9:cb:89:fc:
34:bd:0b:44:b8:bd:57:a7:c3:1d:5f:a2:7c:06:72:
c0:b3:29:3c:22:01:91:89:04:cd:5b:62:80:5f:05:
cb:32:69:6a:41:ce:4d:97:8a:db:d0:43:93:2f:6d:
4b:5f:6d:ec:bc:44:14:57:a3:95:45:75:12:90:74:
f0:76:81:bc:e7:4e:96:78:a6:ca:ba:34:ff:67:3a:
b6:60:e0:d8:0f:22:26:2c:e3:c6:5a:23:f4:f2:39:
49:79:4b:15:d1:4d:40:f6:48:5e:82:39:04:7b:79:
01:c6:76:9f:48:bb:65:58:82:bf:d0:b6:8a:a5:ba:
db:08:e8:ff:5a:a3:f5:90:ef:05:cf:05:b0:22:89:
04:f3:b0:7c:bc:b8:89:85:b0:e5:b9:43:dd:5a:fd:
d3:c5:78:ce:1f:8f:e7:d6:e2:ad:e3:1d:2c:25:11:
65:59:a6:1e:54:51:61:9a:23:b0:2a:ab:af:58:08:
de:96:53:18:b5:4b:2d:25:74:e0:3d:2c:69:de:56:
c7:b8:00:15:82:04:3a:72:2b:36:4d:2b:3b:c4:48:
10:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:13:E9:95:A6:AB:D1:F8:BF:16:C8:05:55:E4:11:F4:93:56:17:FC
X509v3 Authority Key Identifier:
keyid:94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4e:55:44:8f:d0:f1:94:a2:13:97:5d:2c:15:25:09:14:da:
84:cd:35:4a:d4:ea:ae:d4:87:e0:d1:0d:9e:c6:4d:c7:18:16:
59:58:a2:b1:0f:70:d3:d9:a6:6a:c6:dc:b7:11:a7:83:99:ac:
51:61:3f:89:ea:26:70:33:57:f2:ed:9e:d4:12:6e:f1:17:44:
e5:90:95:d3:88:88:9e:3b:ab:3b:4f:d7:15:54:a6:44:41:98:
78:cf:26:eb:b0:10:a7:39:73:42:cb:ff:31:ff:39:9b:d1:51:
e6:86:5b:bc:4c:51:85:6e:37:91:eb:a1:a3:a9:85:47:4b:14:
c5:59:51:23:23:f3:a0:70:4d:74:4d:c2:b8:fd:e8:29:d0:1c:
eb:eb:2d:e1:24:69:34:f4:8d:a2:82:8e:cc:08:a0:c0:41:52:
9c:c9:1c:6c:88:6d:b8:93:81:cf:1a:16:37:b5:12:25:a6:6d:
a6:c2:34:3c:24:21:67:53:16:3c:c7:29:74:08:08:09:fd:ad:
b4:46:5c:5f:c8:38:ce:40:4b:5b:8a:a3:ed:b0:4d:46:40:0c:
2a:5d:91:39:d1:5d:da:e6:be:2a:63:30:ec:fe:14:fd:a1:34:
93:1a:ac:87:77:b1:32:48:9a:d8:6e:e5:d2:16:4e:9e:ad:c6:
4b:05:b8:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mljQLo7nAEeY19o7TTOOFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0YjFjYmZmNGJkOTcwZmEyN2ZkZWZkNGJmNjhiMDJkNjhk
MmI5ZGQwHhcNMjYwMzI1MjAwMTEwWhcNMjYwMzI2MjAwMTEwWjAzMTEwLwYDVQQD
EyhmNjEzZTk5NWE2YWJkMWY4YmYxNmM4MDU1NWU0MTFmNDkzNTYxN2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF6LJ27LmdLOsc607RCBOT8W2fDQ
MjkTeaR4WtewvMDqIgEjoYRwR/nLifw0vQtEuL1Xp8MdX6J8BnLAsyk8IgGRiQTN
W2KAXwXLMmlqQc5Nl4rb0EOTL21LX23svEQUV6OVRXUSkHTwdoG8506WeKbKujT/
Zzq2YODYDyImLOPGWiP08jlJeUsV0U1A9khegjkEe3kBxnafSLtlWIK/0LaKpbrb
COj/WqP1kO8FzwWwIokE87B8vLiJhbDluUPdWv3TxXjOH4/n1uKt4x0sJRFlWaYe
VFFhmiOwKquvWAjellMYtUstJXTgPSxp3lbHuAAVggQ6cis2TSs7xEgQuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYT6ZWmq9H4vxbIBVXkEfSTVhf8MB8GA1UdIwQY
MBaAFJSxy/9L2XD6J/3v1L9osC1o0rndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbExITF8wdlpjUG9uX2VfVXYyaXdMV2pTdWQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wNjM2NTgtODI2Mi00OTY1LTk2NjEt
MDU0MjQyN2IwMmI5LzEvbExITF8wdlpjUG9uX2VfVXYyaXdMV2pTdWQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8wNjM2NTgtODI2Mi00OTY1LTk2NjEtMDU0MjQyN2IwMmI5
LzEvbExITF8wdlpjUG9uX2VfVXYyaXdMV2pTdWQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf05VRI/Q
8ZSiE5ddLBUlCRTahM01StTqrtSH4NENnsZNxxgWWViisQ9w09mmasbctxGng5ms
UWE/ieomcDNX8u2e1BJu8RdE5ZCV04iInjurO0/XFVSmREGYeM8m67AQpzlzQsv/
Mf85m9FR5oZbvExRhW43keuho6mFR0sUxVlRIyPzoHBNdE3CuP3oKdAc6+st4SRp
NPSNooKOzAigwEFSnMkcbIhtuJOBzxoWN7USJaZtpsI0PCQhZ1MWPMcpdAgICf2t
tEZcX8g4zkBLW4qj7bBNRkAMKl2ROdFd2ua+KmMw7P4U/aE0kxqsh3exMkia2G7l
0hZOnq3GSwW4PA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:15 2026 by rpki-client