
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
File: LhEuLGHSqA58Q4XGCFjJHXXzHns.mft (raw, json)
Hash identifier: h50hGUXWU1MRBkyTdOfiQwxws1ExXZPI3dP7YvjdPEY=
Subject key identifier: C9:2B:09:F1:D2:4B:DD:DC:67:70:06:D6:C1:40:BE:8B:11:19:F4:2F
Authority key identifier: 2E:11:2E:2C:61:D2:A8:0E:7C:43:85:C6:08:58:C9:1D:75:F3:1E:7B
Certificate issuer: /CN=2e112e2c61d2a80e7c4385c60858c91d75f31e7b
Certificate serial: 019D27DF928F440666423AFB35738AF70E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
Manifest number: 05AE
Signing time: Thu 26 Mar 2026 02:00:56 +0000
Manifest this update: Thu 26 Mar 2026 02:00:56 +0000
Manifest next update: Fri 27 Mar 2026 02:00:56 +0000
Files and hashes: 1: 1VDI8LOlZotQXEwbdB6SzbnLPM4.roa (hash: l27UrnMvu8nzJebzCXh2pQXrYsMLQuNNu0v0Sq6JVOs=)
2: LhEuLGHSqA58Q4XGCFjJHXXzHns.crl (hash: t1xUXYKC/vM4hOJ/zimZc/fR/IhT4pojouD9U3TodzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:92:8f:44:06:66:42:3a:fb:35:73:8a:f7:0e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e112e2c61d2a80e7c4385c60858c91d75f31e7b
Validity
Not Before: Mar 26 02:00:56 2026 GMT
Not After : Mar 27 02:00:56 2026 GMT
Subject: CN=c92b09f1d24bdddc677006d6c140be8b1119f42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:63:3a:78:b8:53:ed:b4:4f:8d:e1:1e:34:
4b:15:46:4b:d0:9f:73:de:00:53:d3:05:ad:8a:61:
c8:f1:a5:3e:50:6c:4f:7f:d0:18:a7:92:ce:87:4d:
c8:cf:57:9a:84:ec:5a:74:63:69:ed:a1:d6:86:c4:
3a:5f:07:50:0b:e7:ce:de:d1:5e:2f:0a:8d:07:f2:
1e:a6:1c:c0:ad:d8:3b:94:86:26:54:4a:a2:85:ae:
3f:72:6a:31:02:d4:2f:19:65:f6:56:24:4d:31:9e:
e8:4b:85:14:9a:f5:89:97:9e:7b:08:b7:95:28:21:
ba:7a:6e:dc:3f:c4:3c:dd:57:af:8f:f4:86:ea:b5:
b7:fb:b7:84:1b:18:96:cb:33:41:cc:70:39:4d:7e:
4a:84:90:cd:98:bd:c4:44:53:86:61:96:9b:8d:07:
41:fb:81:dc:9b:99:15:46:0b:57:cd:07:55:85:5b:
86:a1:ef:13:e4:71:3d:2f:11:74:d9:4c:5b:6d:1d:
70:1b:a7:4c:83:6e:da:99:55:32:b5:24:58:24:42:
aa:2f:5f:6d:a5:8d:21:b8:ff:99:b5:f9:c2:69:7e:
bf:ad:d0:29:7b:a1:b5:f0:30:e4:1e:7f:e2:ca:22:
34:cc:87:c0:ce:ee:ef:f0:6f:c7:c4:59:a5:a5:d8:
b0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2B:09:F1:D2:4B:DD:DC:67:70:06:D6:C1:40:BE:8B:11:19:F4:2F
X509v3 Authority Key Identifier:
keyid:2E:11:2E:2C:61:D2:A8:0E:7C:43:85:C6:08:58:C9:1D:75:F3:1E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:24:14:0a:ae:52:45:e5:b9:9e:05:5e:f9:03:bb:ef:bb:f0:
7a:77:fd:d6:8d:b3:d5:d6:87:f2:85:cb:40:0d:5e:a4:3c:8f:
4d:af:2b:e6:04:33:20:07:77:d6:91:41:31:85:4d:e9:81:00:
fc:94:66:7d:1a:18:b9:c8:33:57:e3:f8:0f:9c:65:c3:71:cf:
c2:e9:92:42:cd:d1:ea:da:a2:b8:4b:7a:0f:c6:ff:fd:14:dd:
a5:00:46:ab:fc:a7:d3:f6:32:8c:1b:d7:6f:18:82:e5:81:f9:
0c:41:b1:59:8a:19:ca:98:98:2e:19:77:20:ad:95:0f:9d:6b:
87:23:6a:fd:fb:db:29:78:be:8d:be:8d:68:0b:65:b0:b1:3b:
40:ae:81:ad:07:15:bb:59:49:51:72:9e:1f:f3:b9:d7:41:71:
fb:ff:57:c8:d4:fc:c8:10:8f:38:17:cb:bc:2f:2a:10:5d:40:
31:fc:4e:f8:e4:31:ad:f8:1c:f8:36:f7:e8:0d:4f:3d:b3:74:
b7:7e:0b:21:88:70:fa:f4:20:c0:63:20:71:a6:0f:26:5f:97:
0b:09:e9:93:0e:d2:9d:aa:c1:1a:e0:3b:67:e4:eb:3e:eb:db:
da:e3:40:8e:1a:8f:ea:95:6f:59:72:24:08:1d:2c:f0:58:1a:
83:7e:8b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:22:13 2026 by rpki-client