Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
File: lHMg0DCTAXjm987vkdKrh4TT3BY.mft (raw, json)
Hash identifier: kRxzDlxfYEdgCmj0VP2bZQUn9Nv4+Xukr9AQIvtnQKw=
Subject key identifier: 79:06:63:95:AB:32:36:0F:F4:3B:D3:B4:58:0E:45:C5:BC:80:A8:E3
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial: 019D28BB3C523B92E25DBE3150685C07EC32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
Manifest number: 14B9
Signing time: Thu 26 Mar 2026 06:00:52 +0000
Manifest this update: Thu 26 Mar 2026 06:00:52 +0000
Manifest next update: Fri 27 Mar 2026 06:00:52 +0000
Files and hashes: 1: 15WLZBLgJ9g9rpon7ikwmnOpu2o.roa (hash: cDtWR/sWDEjocXdbWFuLldw8hA+RRTGqd9G5Qgigc2g=)
2: L4FVL-IOve6YhBWZ8jz8Nor0cv4.roa (hash: IchcC27uPlsKIbmA49GFEPAY66Qr3a8M8fgjbxbsGQs=)
3: j7qwhPrSo-8ueCrFJo_GWwM93Tg.roa (hash: gJyu32k59hXhVllwZCm02crtrLnwlpxMsqibTEWrODw=)
4: jb81OuVJup1PLJeMNccOVNPoCJ8.roa (hash: deKoWNZnlpwFwiqew1tUzp1N8o/V+tWA//EpRC0uV3s=)
5: kEA4tj_KkVDLvM2DWnwX5k8m6BI.roa (hash: pnHIraVgBAZPz/3bw02SbdT0VFhTYaLYb8ZPwjAg3r4=)
6: lHMg0DCTAXjm987vkdKrh4TT3BY.crl (hash: oCzWPar5GTymIBu+vaikoHC5TZBFj3WxP2oKrhEq54o=)
7: q-8ltpoThmmPBuTuT5C4cGm14Tk.roa (hash: 5hF8BW/BSTiPn3vyhPttnkUg4VDyaJiwZYhFxh/LtpA=)
8: zjv8SZhQ9gV8oRmS9YUAJhkKaT8.roa (hash: 9mmbxYMsoWHE5kxulUQxb1ol9WOyJhGIh77y7/oMRtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:3c:52:3b:92:e2:5d:be:31:50:68:5c:07:ec:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Validity
Not Before: Mar 26 06:00:52 2026 GMT
Not After : Mar 27 06:00:52 2026 GMT
Subject: CN=79066395ab32360ff43bd3b4580e45c5bc80a8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9f:ca:f3:00:ff:f6:53:84:14:62:be:be:e9:
89:fa:b6:d1:59:d5:6c:0f:ad:28:20:54:a6:09:b9:
cb:98:61:af:0b:5e:5f:19:ce:f0:26:d7:7d:fd:38:
5d:ce:2b:02:90:75:51:b0:ba:3c:fd:68:3c:db:b2:
2d:be:1b:f4:dd:52:26:72:c9:88:bf:73:c7:50:4f:
78:f1:2e:69:93:71:03:1e:a9:61:23:fc:7f:7e:c8:
a7:d5:ed:07:15:7b:0c:08:2e:b9:71:03:3f:b1:d6:
2a:c8:3a:dd:2f:e7:d8:6b:20:98:59:75:d1:62:96:
98:a6:f3:f3:78:6c:0d:4f:09:e9:00:66:4d:df:ad:
ba:6f:b9:be:8e:0f:a2:4e:96:a3:10:9f:8d:8e:d3:
fd:e1:ee:9a:eb:34:9d:a0:f8:f4:c5:de:d4:9f:71:
7e:44:2d:d9:71:65:e6:3c:a2:25:a2:38:04:e5:68:
a4:f7:7c:01:5e:71:18:73:91:6a:97:5f:db:ea:38:
b7:ca:35:01:e3:d4:01:cb:d3:22:6f:83:ef:e7:89:
34:0f:e9:a4:72:87:7c:53:be:17:c2:39:31:79:11:
a0:60:a2:f9:a5:a7:2e:e3:0d:03:7e:64:e3:95:52:
1a:0d:9d:27:0d:74:8d:2a:6a:6e:41:b0:bc:ca:d3:
b9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:06:63:95:AB:32:36:0F:F4:3B:D3:B4:58:0E:45:C5:BC:80:A8:E3
X509v3 Authority Key Identifier:
keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:42:3d:62:5e:b2:a7:f9:ef:a0:6c:18:92:9f:9d:2d:be:92:
f6:f8:d7:4e:8d:00:08:38:4e:32:6b:dc:82:92:66:fd:de:81:
97:a7:43:f9:21:40:54:29:b4:57:e3:a5:c0:50:b7:45:73:7b:
41:1b:4a:59:64:7b:e1:f5:45:cb:15:60:d3:da:48:4b:57:ed:
83:fa:26:69:74:83:00:2a:89:33:fb:2d:5e:05:0d:c4:52:90:
06:60:68:11:c9:48:ef:9b:aa:29:5a:8e:e0:fc:5b:a6:44:e0:
21:b2:99:a2:99:3e:e5:a3:a9:60:ee:d9:03:0c:d3:ba:26:46:
04:c5:85:75:67:8b:94:dd:14:30:d7:2d:46:31:c3:6e:89:74:
3f:15:28:ee:f0:d5:d9:22:aa:50:3a:6f:f3:b6:61:a8:bb:4d:
7f:4d:58:b2:b1:14:cb:43:64:4b:94:2d:f9:27:67:15:99:e0:
f0:5b:ba:7a:8a:bd:7c:64:7d:08:ad:85:e4:f6:7b:d7:03:5a:
57:f1:3f:6d:ce:67:33:66:28:94:8e:a2:f0:93:c1:21:f2:b7:
3a:d9:d9:49:0b:7b:ea:65:ad:09:a1:ab:e2:4b:62:a3:a0:0a:
ff:07:40:b0:3e:a2:58:6c:13:06:6b:13:bd:77:b1:d6:9a:43:
9d:fb:7d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:23 2026 by rpki-client