Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
File: LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json)
Hash identifier: ZSn5xHJsZFxIvkWYHlYaFHmlrLKyMf0GBHavHJpiqHA=
Subject key identifier: CA:79:A7:FE:B3:EA:6D:54:74:3E:6D:FC:AE:30:2A:76:F5:45:A6:AC
Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa
Certificate serial: 019F9580597EC64C28EF17764C180CE7D65A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
Manifest number: 0FA4
Signing time: Fri 24 Jul 2026 19:00:44 +0000
Manifest this update: Fri 24 Jul 2026 19:00:44 +0000
Manifest next update: Sat 25 Jul 2026 19:00:44 +0000
Files and hashes: 1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: 0VYDI1uZPKdedLu2yFmc1vZjGFEjNkuIalQZtHWeeFk=)
2: fR1OIjQ-gaEggW5Bu6WoCSw3-_8.roa (hash: +Q1EnV2TJw70P8F3SyId8vDlQiAvs3dvJ0FDJPliX6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:59:7e:c6:4c:28:ef:17:76:4c:18:0c:e7:d6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa
Validity
Not Before: Jul 24 19:00:44 2026 GMT
Not After : Jul 25 19:00:44 2026 GMT
Subject: CN=ca79a7feb3ea6d54743e6dfcae302a76f545a6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:de:fc:d9:77:3c:a4:b6:26:31:8c:95:da:9e:
37:87:74:d7:92:7c:38:7b:4d:16:34:86:7e:71:e9:
eb:c1:00:90:e2:a8:4a:94:ec:a0:64:e8:bf:1b:a6:
87:79:17:a8:21:f9:14:5d:33:6a:c5:21:14:da:4d:
34:d1:0c:a6:82:41:3a:f8:dd:eb:88:dc:7f:c6:84:
ce:f6:08:e1:81:d5:05:61:49:40:b9:c5:d7:82:7a:
94:62:c4:b8:29:6a:23:21:1a:55:28:f2:72:24:97:
15:e4:99:75:68:55:aa:1e:3f:a3:02:8a:b5:81:7f:
66:41:75:b0:d0:15:bd:34:08:3f:b2:fe:94:54:4f:
f7:61:ad:05:8d:08:20:26:f0:fd:a3:0a:c6:f6:e7:
47:60:bb:bc:ec:9d:87:35:81:d4:1b:dd:86:79:74:
76:3e:24:8a:f8:11:1b:39:02:f2:4c:93:05:6c:09:
00:78:48:d0:2a:62:bc:38:a4:73:a9:69:65:ca:db:
d4:bb:53:78:fc:eb:dd:d2:bd:c2:55:10:88:e7:d8:
14:0f:0c:36:3f:c6:0c:1a:60:2f:40:07:80:d6:67:
c9:9b:46:c4:81:ef:59:13:23:79:fa:b7:06:d1:72:
a8:69:3d:f5:47:c6:2b:f6:68:83:8f:4c:73:64:42:
e7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:79:A7:FE:B3:EA:6D:54:74:3E:6D:FC:AE:30:2A:76:F5:45:A6:AC
X509v3 Authority Key Identifier:
keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:cd:52:84:0f:15:d3:12:74:d5:d7:ca:5e:80:81:90:42:d3:
90:a3:70:b1:50:39:2e:2a:5c:7e:c0:b8:64:8d:24:2f:77:91:
29:3c:43:2b:cc:3a:ff:95:0d:e8:da:20:e8:fd:f1:0d:e2:7d:
3a:8b:11:89:c7:bb:ed:ce:be:d9:d8:87:0a:06:24:77:c5:fc:
43:98:f7:87:06:5d:ef:fb:54:dd:bf:d5:48:20:34:17:0e:c5:
70:7f:8e:8d:4e:70:e2:de:da:83:6e:fb:c8:44:15:41:0e:2e:
e5:33:63:bd:e4:6a:cd:45:f2:17:15:44:8d:71:fb:b9:76:c7:
53:8e:7e:88:d8:ba:b2:71:66:1d:7b:a4:18:f7:95:3e:f9:12:
8f:fb:59:74:6e:45:73:38:fa:3c:b4:a8:1d:bd:68:f8:5b:aa:
34:20:59:12:ab:5a:c6:01:6f:b4:3a:55:47:b7:d1:17:ff:dd:
fa:d4:ae:aa:a5:8f:cc:94:b5:48:07:90:3e:0d:87:aa:99:fc:
e6:2e:30:87:f9:3c:d9:93:16:b6:69:03:9a:78:d0:c1:fe:e3:
09:b4:99:3c:c4:2e:d9:c4:5d:63:44:d9:27:f2:d2:92:a7:bf:
42:f6:0f:67:e4:f3:55:ef:c8:fd:7d:f4:26:c6:05:bd:97:71:
64:82:d3:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VgFl+xkwo7xd2TBgM59ZaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNzU0YWU0NzNkOWMxNTRiODA0YjcwZWQzMTg4MWUwMjVk
OTI2YWEwHhcNMjYwNzI0MTkwMDQ0WhcNMjYwNzI1MTkwMDQ0WjAzMTEwLwYDVQQD
EyhjYTc5YTdmZWIzZWE2ZDU0NzQzZTZkZmNhZTMwMmE3NmY1NDVhNmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot782Xc8pLYmMYyV2p43h3TXknw4
e00WNIZ+cenrwQCQ4qhKlOygZOi/G6aHeReoIfkUXTNqxSEU2k000QymgkE6+N3r
iNx/xoTO9gjhgdUFYUlAucXXgnqUYsS4KWojIRpVKPJyJJcV5Jl1aFWqHj+jAoq1
gX9mQXWw0BW9NAg/sv6UVE/3Ya0FjQggJvD9owrG9udHYLu87J2HNYHUG92GeXR2
PiSK+BEbOQLyTJMFbAkAeEjQKmK8OKRzqWllytvUu1N4/Ovd0r3CVRCI59gUDww2
P8YMGmAvQAeA1mfJm0bEge9ZEyN5+rcG0XKoaT31R8Yr9miDj0xzZELnDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMp5p/6z6m1UdD5t/K4wKnb1RaasMB8GA1UdIwQY
MBaAFCx1SuRz2cFUuAS3DtMYgeAl2SaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80YTA5NDktZGY1OC00MDA1LTk3Njgt
ZmM1MzkzYzU3ODg3LzEvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC80YTA5NDktZGY1OC00MDA1LTk3NjgtZmM1MzkzYzU3ODg3
LzEvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVc1ShA8V
0xJ01dfKXoCBkELTkKNwsVA5LipcfsC4ZI0kL3eRKTxDK8w6/5UN6Nog6P3xDeJ9
OosRice77c6+2diHCgYkd8X8Q5j3hwZd7/tU3b/VSCA0Fw7FcH+OjU5w4t7ag277
yEQVQQ4u5TNjveRqzUXyFxVEjXH7uXbHU45+iNi6snFmHXukGPeVPvkSj/tZdG5F
czj6PLSoHb1o+FuqNCBZEqtaxgFvtDpVR7fRF//d+tSuqqWPzJS1SAeQPg2Hqpn8
5i4wh/k82ZMWtmkDmnjQwf7jCbSZPMQu2cRdY0TZJ/LSkqe/QvYPZ+TzVe/I/X30
JsYFvZdxZILTGA==
-----END CERTIFICATE-----
Generated at Sat Jul 25 04:30:17 2026 by rpki-client