Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
File: LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json)
Hash identifier: OGLgzWXtc1RvC2CofKsnaFoIVqQRaYSkEyCK67DlYXI=
Subject key identifier: 0A:FD:34:04:84:6A:40:89:E0:92:49:17:B2:AA:11:9E:64:C8:DA:B4
Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa
Certificate serial: 01A19920FDE899E7F4DD1B1207C8EC2E4F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
Manifest number: 10AF
Signing time: Sun 01 Nov 2026 22:00:38 +0000
Manifest this update: Sun 01 Nov 2026 22:00:38 +0000
Manifest next update: Mon 02 Nov 2026 22:00:38 +0000
Files and hashes: 1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: iCfXfcktDTkTmW4FessZhN6LrGAYkC23noOZ/aYMAwc=)
2: fR1OIjQ-gaEggW5Bu6WoCSw3-_8.roa (hash: +Q1EnV2TJw70P8F3SyId8vDlQiAvs3dvJ0FDJPliX6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:99:20:fd:e8:99:e7:f4:dd:1b:12:07:c8:ec:2e:4f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa
Validity
Not Before: Nov 1 22:00:38 2026 GMT
Not After : Nov 2 22:00:38 2026 GMT
Subject: CN=0afd3404846a4089e0924917b2aa119e64c8dab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:64:7c:4b:6c:59:8b:e8:e5:51:c2:bd:14:
c0:2b:cf:ab:21:74:0e:c7:aa:a8:53:7f:5d:29:15:
f1:92:3e:01:14:87:2e:32:f7:0d:ca:f3:ff:42:07:
e1:e3:97:71:29:19:32:d8:96:06:34:4e:72:96:53:
54:6c:fa:28:ad:a4:0f:b7:7c:e4:1b:c0:d6:9a:3c:
ba:46:a1:a2:6a:b0:c4:d5:37:81:8d:5c:5e:2f:16:
c7:2a:6d:89:20:ef:60:e8:2e:ce:94:96:1d:c2:a0:
58:c6:22:39:e1:e3:a8:08:52:1d:be:1f:66:6c:ea:
5b:db:21:75:51:d1:0b:03:19:20:2e:68:f2:9a:77:
88:51:e0:f5:df:84:a7:ff:9a:cc:80:42:23:f3:32:
37:2b:a0:ce:88:9c:f2:2b:9d:b3:c5:7b:5b:de:2b:
3f:31:00:cf:61:dc:fc:ac:0f:36:bf:4c:29:9a:f2:
80:a8:d4:44:48:b2:df:e5:81:81:35:7d:14:96:93:
be:ec:c5:7f:46:6f:23:0e:57:aa:4e:14:21:83:5f:
d1:7e:55:67:7a:eb:44:58:c9:b2:56:a6:4e:37:eb:
79:12:be:aa:eb:f8:e5:23:8a:35:fa:2c:e3:50:18:
3e:be:56:22:f9:45:96:c2:98:17:30:e0:49:f0:a2:
5b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FD:34:04:84:6A:40:89:E0:92:49:17:B2:AA:11:9E:64:C8:DA:B4
X509v3 Authority Key Identifier:
keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f7:05:fa:7f:62:74:35:a7:3d:1b:8b:89:18:ef:28:8c:66:
7d:38:44:d5:ae:19:b7:ab:81:0d:8f:3c:fa:f9:10:dd:e5:d1:
1d:b4:f4:a7:21:6e:19:c7:bd:20:c8:0b:6a:ec:2c:aa:63:81:
f3:10:af:7e:32:36:1b:ff:5e:f5:9a:c0:44:2f:fb:9f:81:f2:
4b:bb:4f:d2:0a:07:c1:f7:db:21:a5:45:93:d6:76:77:5c:94:
58:95:de:d3:8f:21:58:4e:ab:de:49:4f:bb:d9:b8:6e:af:df:
27:11:59:75:56:12:29:6d:55:ed:44:2e:ee:37:9a:d5:42:7b:
96:95:e5:7d:e8:c8:f0:d8:e8:94:7f:8f:70:a6:47:70:58:8e:
d1:23:7f:a7:d9:18:20:66:d5:8b:e8:88:82:40:5f:4e:1a:ed:
ba:47:d4:ef:f4:c6:6b:29:74:27:84:4d:3c:b6:77:16:6c:a7:
fa:1c:e7:3d:7d:cc:91:d7:9e:7b:5e:dd:7c:6b:d6:06:32:0f:
5e:9c:c5:d1:eb:90:bf:4f:80:95:88:c4:9b:7f:d9:95:38:6e:
6e:11:f8:2d:91:dd:bf:e3:bf:66:40:d9:d9:65:a5:3f:16:0c:
93:ba:63:cc:3d:5d:25:36:e6:6f:d7:d8:79:f9:c9:f6:fb:be:
7a:3a:48:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 06:06:52 2026 by rpki-client