Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
File: LHPvCB4tVzHERXQ5c6lqv96xQss.mft (raw, json)
Hash identifier: W9YKD21OVqqWyNxuopGQbjOTole/4HINQDFaEws52gU=
Subject key identifier: 57:52:6C:30:FC:91:7C:19:98:1F:3F:8D:64:34:69:FF:65:DC:2F:10
Authority key identifier: 2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
Certificate issuer: /CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Certificate serial: 019D26CD4EF94A9D1BB7365E8CA6B12D54E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
Manifest number: 0980
Signing time: Wed 25 Mar 2026 21:01:22 +0000
Manifest this update: Wed 25 Mar 2026 21:01:22 +0000
Manifest next update: Thu 26 Mar 2026 21:01:22 +0000
Files and hashes: 1: CvtOzQgg0yU5uNiDJv9sRE54F7w.roa (hash: /RWVX+MB4g62z+EInyoLc3Ee/IcQswcuywMSa8ZRlSI=)
2: LHPvCB4tVzHERXQ5c6lqv96xQss.crl (hash: /9VgHL9QZax5amLaUFOhuYfdJM6AxyXEZ55VLG6Udls=)
3: elqT59ZWrAInz7TAGHCfesbdKLo.roa (hash: MtloAfg5PV+ZmF39WN4IskuqHMHTWwP8zag9ZXLDmqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:4e:f9:4a:9d:1b:b7:36:5e:8c:a6:b1:2d:54:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Validity
Not Before: Mar 25 21:01:22 2026 GMT
Not After : Mar 26 21:01:22 2026 GMT
Subject: CN=57526c30fc917c19981f3f8d643469ff65dc2f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7f:48:89:c5:fd:cd:ac:79:0d:fc:9e:f6:15:
05:54:1d:32:82:6d:12:88:72:70:73:2f:73:d7:a7:
d4:91:05:df:e2:ff:16:e6:8d:80:78:50:91:bf:42:
9c:85:b2:55:92:db:5e:63:0c:86:1d:4d:28:26:2b:
95:c8:40:ee:de:2f:e5:04:fa:16:0f:a6:5b:67:4d:
c9:25:a4:ea:8a:6d:16:5f:24:99:6c:ae:bb:1f:5f:
df:6c:36:ce:67:a9:89:86:bc:ca:4d:42:0c:25:af:
d6:eb:32:6d:e1:ff:2b:f6:2b:a3:cd:8d:02:2f:cc:
72:67:2d:e2:d8:ad:0d:ca:00:c1:e0:6c:7b:cf:a4:
bf:0f:ae:f3:94:c7:eb:d1:c7:9a:9b:1c:39:4a:72:
82:5c:c8:41:8d:61:2f:65:ee:97:a3:eb:ff:cb:8c:
4e:32:b5:d0:b3:f7:45:28:42:0e:ae:81:24:87:dc:
b1:32:22:aa:ff:c4:8d:60:98:38:f5:66:f1:94:f6:
ad:a5:2c:1a:c6:22:24:45:ea:63:4c:84:f6:dd:19:
c1:23:21:8e:36:e4:6f:d6:e8:2c:15:fd:56:04:bd:
39:a3:da:4f:91:be:14:01:06:26:62:72:25:2d:8e:
7c:a8:83:74:11:8c:d3:6e:ce:80:3b:50:ef:ac:f1:
fb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:52:6C:30:FC:91:7C:19:98:1F:3F:8D:64:34:69:FF:65:DC:2F:10
X509v3 Authority Key Identifier:
keyid:2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:8c:57:ad:5c:15:92:2d:87:38:e4:eb:b4:0f:a6:47:0f:9c:
5d:89:11:24:41:86:fc:af:82:53:1c:e4:4c:ea:49:51:ad:c4:
57:d8:c4:29:b6:ba:78:64:a1:b0:8c:8f:ce:5c:4d:82:d1:2f:
4c:8e:a6:0c:53:c1:e8:a0:0d:65:81:2b:9b:fb:d5:78:3d:42:
85:3a:d3:86:43:87:1f:6c:a7:57:3c:17:3d:e8:dc:4f:b2:e2:
3f:2a:60:37:0c:5d:fd:24:98:f4:d0:4d:38:33:95:c7:34:e3:
a3:5c:1a:57:6a:25:f8:7e:3c:49:57:37:52:5c:38:de:da:9f:
40:94:46:85:4b:5d:19:e9:ef:46:22:d6:50:79:de:8d:31:ff:
78:0a:ca:ef:a1:e0:61:7b:8d:0d:64:37:23:83:f1:1e:f9:8a:
bb:ae:0b:38:79:96:6b:8d:e7:23:34:dd:e0:dc:a9:c0:b9:0d:
31:4f:3e:12:67:e7:e6:83:61:7f:5c:b6:7b:f9:ec:c5:0c:1b:
35:07:99:cc:b6:00:bd:de:62:6b:ea:31:3d:98:8a:02:24:99:
2f:f6:ca:cd:ab:a4:6f:fe:a0:52:7b:0e:d5:37:c3:85:19:81:
4a:2a:77:68:4b:4f:1d:d8:22:28:32:22:78:17:8a:5a:c9:5c:
57:d8:01:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:03 2026 by rpki-client