Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
File: LhmWbA6l3zqYf4NlUktRKMun_JA.mft (raw, json)
Hash identifier: KhCJ6RSNlw3vassALX3qD3a7GVwbb+dq5OqhT/HP4Oo=
Subject key identifier: DD:B0:6E:35:1D:88:D2:27:2C:68:58:B7:1C:3D:EB:4F:AD:20:08:D3
Authority key identifier: 2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
Certificate issuer: /CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Certificate serial: 019D27723838335C24D64DBEF57B87E8A752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:01:29 +0000
Manifest this update: Thu 26 Mar 2026 00:01:29 +0000
Manifest next update: Fri 27 Mar 2026 00:01:29 +0000
Files and hashes: 1: LhmWbA6l3zqYf4NlUktRKMun_JA.crl (hash: Eey3Do8YCxIm7uX4ZHuzXYgoqQ6z1ytY5RcMiPfT1Uo=)
2: S22IS1ytfAHZisgvUmyvGk-8FNg.roa (hash: gXnDrgQVCJ9KXbT9Gx6Ic3/hpo6fdcPJXpi41swj64s=)
3: xFsHUXQAhTrcAhcEagihKj_bLB0.roa (hash: fUcuoh5nCrUpLQdbdf9ANcbMiNKkrpJCJisA83ImkP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:38:38:33:5c:24:d6:4d:be:f5:7b:87:e8:a7:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Validity
Not Before: Mar 26 00:01:29 2026 GMT
Not After : Mar 27 00:01:29 2026 GMT
Subject: CN=ddb06e351d88d2272c6858b71c3deb4fad2008d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:67:fa:74:60:2c:38:8a:9f:9a:cd:5c:cb:a5:
09:71:74:84:c7:f4:fc:f0:aa:b3:5c:fe:d5:f0:c5:
ad:e7:8f:38:80:72:18:7a:12:52:b1:89:30:8d:d4:
00:a7:e0:49:6e:09:88:7d:d9:b9:62:b1:f7:29:45:
43:30:81:f8:e7:e4:af:6e:81:fe:80:a9:cb:fc:f1:
db:66:01:f2:da:78:67:60:30:87:4c:07:9a:ad:cd:
81:a0:f5:ca:ff:6a:c5:ee:12:0a:05:a5:6d:f0:1f:
c1:6b:84:f5:6d:78:05:57:ce:4e:01:42:79:58:9e:
29:e1:51:20:6e:62:b3:39:92:2e:a0:7c:9f:3c:53:
ff:69:db:1c:66:3a:7a:d2:ec:4f:e5:4c:96:b9:e1:
5c:96:ff:6a:e6:01:a0:7c:01:de:ab:a0:b1:cc:8f:
1c:5b:e8:85:fb:78:ad:a1:a6:50:67:b9:e3:bc:08:
c3:7d:99:75:19:57:60:57:bc:4c:ab:a1:dc:5e:6c:
83:ab:85:7a:2a:32:33:27:ae:d5:04:78:4d:f8:83:
71:c6:a4:52:f7:35:10:75:26:a6:88:7e:0c:c7:47:
10:f8:2d:8d:47:ab:4d:7f:72:d8:62:a5:3f:e4:8d:
71:e4:e9:11:ad:60:a8:50:31:f6:a5:90:0d:18:fd:
ba:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B0:6E:35:1D:88:D2:27:2C:68:58:B7:1C:3D:EB:4F:AD:20:08:D3
X509v3 Authority Key Identifier:
keyid:2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f2:80:ca:2c:68:5e:76:b6:32:a3:b4:9c:90:61:b2:33:76:
4b:ba:cc:00:01:eb:03:4a:03:f7:54:16:b2:9c:2b:61:40:52:
16:96:e6:a4:27:ea:41:88:fd:ee:84:49:7c:0e:32:62:aa:c6:
42:b7:49:66:83:45:21:a7:19:a0:ff:e6:5a:ba:6f:3f:1b:3e:
ca:32:82:5e:3c:48:81:95:a1:dd:b6:12:59:e5:e1:be:2b:5e:
f4:bf:08:39:4a:a2:6c:7b:64:90:fd:31:82:97:5b:f9:da:77:
ab:3e:79:52:61:7f:62:c4:a6:ef:ad:96:23:9a:14:c5:d4:cf:
9c:a2:03:ae:8f:ca:3d:e8:2c:39:b7:ec:fe:d1:cc:d6:a4:c6:
ed:91:b1:66:64:11:14:d2:b6:ef:0b:c2:8f:ec:ff:b0:62:31:
5a:7e:76:f8:af:41:64:4b:72:24:ec:72:39:f0:86:3b:4a:23:
ac:fd:fa:fa:d4:cd:db:05:02:cd:11:93:bf:2f:47:55:54:54:
c0:ce:73:2a:12:7a:86:b9:ec:2a:e9:82:22:4e:0d:0a:1a:8b:
3e:e2:a4:48:d8:73:b4:94:e1:2d:b6:9e:79:63:0c:69:c6:fd:
75:14:60:dd:50:fd:23:b0:8b:72:af:11:e2:06:50:3b:21:9b:
30:8a:a6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:03:23 2026 by rpki-client