Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
File: LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json)
Hash identifier: Qfhk1TlnCty4U0OqDuUcsg5QAC964QERAKxP4GOqzPY=
Subject key identifier: 9F:46:BF:F6:28:9B:5C:97:11:1F:C6:0F:26:75:39:A5:7A:7B:8C:F7
Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa
Certificate serial: 019D2B859CA2ABB84B62725065ED995A0AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
Manifest number: 0E64
Signing time: Thu 26 Mar 2026 19:01:09 +0000
Manifest this update: Thu 26 Mar 2026 19:01:09 +0000
Manifest next update: Fri 27 Mar 2026 19:01:09 +0000
Files and hashes: 1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: rkkabFAtCFVUTetxOFzDmRPkmdwQKO1l2N+d9ovh8hw=)
2: fR1OIjQ-gaEggW5Bu6WoCSw3-_8.roa (hash: +Q1EnV2TJw70P8F3SyId8vDlQiAvs3dvJ0FDJPliX6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:9c:a2:ab:b8:4b:62:72:50:65:ed:99:5a:0a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa
Validity
Not Before: Mar 26 19:01:09 2026 GMT
Not After : Mar 27 19:01:09 2026 GMT
Subject: CN=9f46bff6289b5c97111fc60f267539a57a7b8cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cf:ae:b3:0b:e5:ce:c5:2a:2a:79:2c:74:32:
91:80:0c:1e:80:f4:22:d2:75:32:00:8f:75:12:44:
28:29:e4:da:64:c9:0d:84:65:33:f6:86:54:41:d8:
18:37:e1:a3:93:61:f9:64:90:a1:b3:a2:00:7b:13:
56:8f:bc:11:4c:2e:5e:16:54:0f:34:af:1b:f1:13:
77:d3:fb:48:2d:d1:46:cf:20:c8:9c:e8:4e:00:0e:
3d:d0:e9:17:90:95:33:bf:29:08:c9:0c:26:80:3a:
7a:cb:5a:f4:d3:bd:fb:19:2a:d6:14:5f:d7:8a:6b:
2b:1f:f9:1a:ec:50:6f:ea:73:3e:35:34:ae:da:56:
1a:c1:82:93:fe:02:70:4f:f8:63:0d:02:6c:6a:5e:
88:9f:3a:fd:65:78:d9:48:4a:4c:f5:d5:61:8c:00:
57:07:76:6f:65:b6:d2:c0:0b:d2:3c:09:a2:39:0a:
47:28:9e:43:bb:d6:8a:59:be:68:be:1b:b0:e3:b6:
b8:5b:36:6d:b4:1c:bc:72:5e:51:53:69:73:9e:ca:
f9:e5:8a:01:ab:39:ab:7c:8e:a5:02:34:d5:71:e7:
95:0c:c1:56:05:a7:5d:98:b4:34:4e:b3:ca:90:28:
a9:31:0a:fd:e6:74:16:cb:84:5b:ec:09:c7:0f:59:
fc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:46:BF:F6:28:9B:5C:97:11:1F:C6:0F:26:75:39:A5:7A:7B:8C:F7
X509v3 Authority Key Identifier:
keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:47:9c:93:65:7f:cd:c0:1a:f1:40:9a:97:49:0e:8f:34:a2:
63:00:69:52:7a:57:a6:4f:63:c6:0e:4e:71:dd:0d:11:76:eb:
ec:ff:a7:57:fe:ff:6f:18:0f:f0:eb:6f:ed:1a:15:3f:d8:79:
71:5d:84:25:49:04:8d:9f:12:a8:a8:9d:14:49:2d:89:d7:14:
f0:4f:96:09:8e:a3:63:e2:47:ca:b5:9b:e9:23:0b:5b:fb:b3:
dd:55:de:ed:4a:59:43:1f:2f:46:e4:43:89:d2:c5:80:72:f7:
a9:66:bf:ab:a3:27:0b:7d:b5:3a:76:00:30:ce:71:73:23:31:
29:dc:5f:c1:82:f3:43:4b:03:11:43:19:60:e8:3d:a4:2e:b2:
dd:fc:0e:19:4a:06:68:4c:e1:70:65:90:52:58:82:7c:81:48:
51:5a:2e:bc:80:46:73:48:4c:ec:8a:3c:75:6e:2f:e3:bd:a7:
db:b4:8a:06:00:ed:cb:da:c4:6e:b8:98:12:a8:33:d4:9a:8d:
0d:dc:08:a2:a1:46:0a:52:91:b0:57:79:00:68:42:e1:27:19:
6c:d3:60:e2:0f:de:7f:65:59:13:c7:b2:af:73:4e:43:76:c9:
7a:08:53:a7:11:f8:f4:e8:46:fa:1e:ec:ee:16:b6:0b:ab:13:
1c:4a:5f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:14:50 2026 by rpki-client