Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
File: LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json)
Hash identifier: a6p5Gl/9w1bkglaHDPFB/iUR5ugV4ebQQaOPZYtaAZg=
Subject key identifier: 4C:22:50:CE:0F:4E:84:13:F0:81:31:72:22:46:A3:47:8E:45:EB:03
Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa
Certificate serial: 019D29974543C1AF9BA6DF8C4B5DA4675349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
Manifest number: 0E63
Signing time: Thu 26 Mar 2026 10:01:12 +0000
Manifest this update: Thu 26 Mar 2026 10:01:12 +0000
Manifest next update: Fri 27 Mar 2026 10:01:12 +0000
Files and hashes: 1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: Pl4CnzVAdLCV6u/mIgcNQJg5CByhKl1OdAhYxO4Rt2A=)
2: fR1OIjQ-gaEggW5Bu6WoCSw3-_8.roa (hash: +Q1EnV2TJw70P8F3SyId8vDlQiAvs3dvJ0FDJPliX6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:45:43:c1:af:9b:a6:df:8c:4b:5d:a4:67:53:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa
Validity
Not Before: Mar 26 10:01:12 2026 GMT
Not After : Mar 27 10:01:12 2026 GMT
Subject: CN=4c2250ce0f4e8413f08131722246a3478e45eb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:f7:7e:09:59:96:cb:f2:22:1b:0e:03:fb:
e8:d8:a6:86:81:b8:c3:b4:57:ff:ad:85:cd:18:ea:
e6:34:46:1e:ba:9a:40:f0:78:fb:1b:70:86:e1:ef:
e3:f4:af:3f:b8:5c:cf:87:7a:03:bb:c0:6b:e0:2d:
3c:79:cb:a3:23:27:4e:d4:45:80:7f:e1:8f:2a:4b:
12:04:1c:60:83:49:1c:4b:f2:da:f1:ba:dd:e3:44:
17:10:85:d4:7a:f9:5a:f6:11:9d:30:0c:56:ee:63:
a4:1c:44:b9:69:4e:ac:0c:bd:67:dc:b4:21:02:b8:
7d:53:79:6d:09:08:3d:a6:3b:f3:5d:1f:2a:c7:b6:
d1:80:d8:2c:c0:14:89:5a:af:89:00:a0:96:43:ef:
a3:1c:54:b5:1d:e9:06:6b:89:db:5e:7f:4d:83:fa:
67:87:86:fd:72:0b:e1:2f:44:d2:c1:4c:5c:d2:67:
d7:7a:e4:68:90:e0:e9:f5:84:03:a7:c4:9c:ea:eb:
26:26:a6:9e:15:b1:d9:d3:3f:5f:e3:b7:2e:e9:48:
a9:f7:53:3c:aa:fb:77:f0:ec:b4:02:c7:3d:bc:68:
0e:bc:39:8c:9d:de:f6:e8:1a:77:f3:88:1b:d7:1d:
fe:37:49:42:fc:97:2f:e0:fe:2e:98:88:13:d0:e0:
51:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:22:50:CE:0F:4E:84:13:F0:81:31:72:22:46:A3:47:8E:45:EB:03
X509v3 Authority Key Identifier:
keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b1:99:0c:43:89:91:1f:9e:cd:52:8d:81:25:7c:e3:28:81:
69:c1:58:bd:0a:d6:ae:12:07:9f:09:9f:6c:2d:d1:1f:0a:a7:
a6:86:dc:82:7b:69:34:a2:32:2c:91:7d:3e:f5:ee:56:92:cb:
64:8b:ab:70:b0:38:a2:e4:65:02:3e:5a:16:23:88:6a:df:2d:
70:fa:5e:a9:d9:05:5c:72:89:bc:eb:64:2c:12:69:20:22:6b:
c7:17:80:5d:6d:79:82:ec:9c:2e:a3:9e:d0:eb:c6:49:b2:b9:
6f:ca:57:65:2e:0f:bf:f2:e0:9a:01:93:e7:9f:2b:36:01:cf:
d4:0c:1a:33:47:f7:10:87:f8:08:f8:5e:c7:1e:19:22:31:95:
61:bb:d3:53:f1:f4:09:c0:92:2c:da:ee:eb:98:b3:05:6d:98:
d5:ec:78:4e:40:f6:cf:79:58:30:37:a2:a3:03:48:e4:c5:3f:
b8:a1:5f:d3:b9:17:11:6a:14:a9:f2:09:ff:1d:ad:ae:7e:9e:
15:3f:68:6a:99:7b:0a:7d:a4:50:74:d2:f2:a9:17:dd:50:80:
6d:c8:dc:1b:94:87:b5:cd:6f:09:61:d5:ca:53:bb:57:34:d8:
39:0b:bb:ca:12:9d:6a:76:f6:f1:60:76:75:5e:04:b6:38:56:
9b:8b:42:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:19:49 2026 by rpki-client