Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
File: LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json)
Hash identifier: NQaEDLfkj938/wSV5P2/MAjvlhCFYUPxcAGUpL+N7r0=
Subject key identifier: A7:C3:06:F6:16:96:04:A6:2F:CB:0E:0C:5F:A9:23:51:73:F0:9E:04
Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa
Certificate serial: 019E20C8289873F3A9346450200F1691BE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
Manifest number: 0EE3
Signing time: Wed 13 May 2026 10:00:48 +0000
Manifest this update: Wed 13 May 2026 10:00:48 +0000
Manifest next update: Thu 14 May 2026 10:00:48 +0000
Files and hashes: 1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: l9KF7H1unslPEO43XNeoBIfo3F86syGG/Bn+CIJuO4g=)
2: fR1OIjQ-gaEggW5Bu6WoCSw3-_8.roa (hash: +Q1EnV2TJw70P8F3SyId8vDlQiAvs3dvJ0FDJPliX6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:28:98:73:f3:a9:34:64:50:20:0f:16:91:be:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa
Validity
Not Before: May 13 10:00:48 2026 GMT
Not After : May 14 10:00:48 2026 GMT
Subject: CN=a7c306f6169604a62fcb0e0c5fa9235173f09e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:18:97:b7:9d:53:e5:5b:32:de:bb:47:2d:
c4:9c:a3:7f:2e:c4:97:43:97:57:3c:5f:46:22:55:
cf:33:ba:c2:34:0e:01:3f:1f:df:81:3a:00:14:54:
70:25:40:bf:71:47:17:d2:c4:01:4a:e7:f0:3f:a5:
44:00:c4:11:26:ee:38:a1:18:a3:1d:5b:15:77:97:
ba:fa:13:0a:11:3f:e7:5d:cd:f7:27:dd:1b:b4:d2:
34:96:02:d3:0e:92:f5:c2:c4:0b:ad:12:1d:02:99:
bb:ae:30:c6:f6:74:63:9b:1f:d3:09:37:1d:85:41:
22:a4:e1:1f:75:fd:43:8e:ae:7e:03:c9:24:29:ac:
8b:01:30:4f:91:11:8d:11:ca:73:89:5f:c4:21:67:
55:0f:6f:a1:cf:18:31:e4:8a:06:a1:c2:48:64:c2:
aa:e5:10:af:0f:a4:28:cd:63:1e:6c:ab:d1:fe:c6:
ab:fe:75:86:d1:90:8a:13:ee:cf:3d:db:79:2e:53:
76:01:d5:af:0e:a3:96:65:ad:09:1f:24:05:a1:6e:
da:93:a6:6b:20:4a:37:6e:a5:cd:05:70:4d:41:78:
70:26:c1:5b:41:24:07:df:06:32:41:7c:45:c3:d1:
ad:0b:4d:fc:74:76:9e:6d:8f:6e:00:b0:6b:44:d6:
55:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C3:06:F6:16:96:04:A6:2F:CB:0E:0C:5F:A9:23:51:73:F0:9E:04
X509v3 Authority Key Identifier:
keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a7:19:df:b7:3b:0c:e6:c1:6a:af:5a:9f:bb:d5:2d:ea:42:
3d:79:cb:04:82:3c:f1:89:e3:22:01:3a:9d:2a:2c:86:4d:a7:
df:38:f7:5e:ca:a8:3d:69:f5:3e:67:24:09:53:0c:29:03:4a:
17:63:ff:01:16:b5:f2:26:b6:5b:47:84:f5:90:2a:e5:7a:c3:
82:3d:ae:64:76:5a:f3:29:e6:30:54:da:bb:b6:0c:81:94:0e:
13:b5:9d:00:ec:e5:73:80:bd:3d:d0:b4:e3:42:34:eb:8e:61:
c5:20:58:25:48:6d:29:58:1c:e2:b5:fe:66:68:c5:bb:ce:14:
3e:7d:c8:bc:d9:54:41:72:b8:31:95:1f:cc:df:ec:2f:83:d2:
73:f3:6c:91:49:46:97:52:d9:49:77:be:44:93:f2:ae:7a:0a:
0c:b8:16:30:48:a2:0c:fb:98:7a:b0:0c:51:cd:86:bd:d1:16:
d5:cf:26:d2:ed:73:4e:cf:a4:40:fa:95:87:09:76:9f:62:99:
5f:15:a6:94:25:a7:67:e1:1c:36:ed:d8:d6:4e:bf:8b:1a:ab:
3b:d4:de:be:65:34:23:01:bf:50:35:06:1d:92:9c:6a:30:ab:
74:6f:33:a2:34:15:88:1c:be:56:5b:5c:66:a1:69:b3:e9:9e:
80:3d:f8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:50:31 2026 by rpki-client