Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
File: lhud90XDLfJ98z68_VNvGeE0dP4.mft (raw, json)
Hash identifier: QAiXxLFqzukUNUn/qIAmvr8ko5pUtzjhezM3sbXON1o=
Subject key identifier: 64:4F:54:56:56:44:B0:03:1F:C4:52:78:BA:90:E5:C6:A4:BC:A5:5E
Authority key identifier: 96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
Certificate issuer: /CN=961b9df745c32df27df33ebcfd536f19e13474fe
Certificate serial: 019D25F174CBC1DE7637579220EA825D2237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
Manifest number: 11A0
Signing time: Wed 25 Mar 2026 17:01:14 +0000
Manifest this update: Wed 25 Mar 2026 17:01:14 +0000
Manifest next update: Thu 26 Mar 2026 17:01:14 +0000
Files and hashes: 1: Rf4ua2gShCgNnsbPUQ6ubuJBV1k.roa (hash: tSFC9dWk5W60HWYLlM+PiN1UjypysKUpyAViK3s11Fw=)
2: Uxtr-atmnNBITnladLThcv7huIU.roa (hash: n7M6NPbamAy18kfeXWpn06XaPUvf5LbKfUxiapVP6+w=)
3: cd4PR_7Zwc-Jv_h3ekBVWiw0K-0.roa (hash: HpbyUUXySxZasQuBBURj008LhTbNYYQxJ+uuJec1F1s=)
4: lhud90XDLfJ98z68_VNvGeE0dP4.crl (hash: sl9A7ATzGzEpdVnRLNWDBrLfk/6CzIJewWjuNHfJo3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:74:cb:c1:de:76:37:57:92:20:ea:82:5d:22:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961b9df745c32df27df33ebcfd536f19e13474fe
Validity
Not Before: Mar 25 17:01:14 2026 GMT
Not After : Mar 26 17:01:14 2026 GMT
Subject: CN=644f54565644b0031fc45278ba90e5c6a4bca55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:35:7d:5e:01:66:24:8c:9e:d4:3b:77:d0:
ac:01:d6:48:8b:04:38:23:96:9d:a9:9b:a3:66:32:
f4:bd:29:89:05:3f:19:d0:2f:3f:f1:33:c3:fe:16:
a6:d7:60:7b:d0:4b:ca:3a:86:ca:44:34:a0:10:d8:
1b:32:42:d6:3e:95:64:bf:13:cf:c5:88:a5:47:58:
ad:e2:af:f3:17:e9:cd:33:4b:47:2b:cd:1c:94:ee:
29:b7:d9:cc:e5:3d:6f:c3:9d:8d:d2:6c:f6:11:12:
13:0a:e2:d4:4a:ab:44:7a:2f:73:7a:9e:50:d3:94:
7e:2a:fa:4f:61:cb:f3:25:8b:1b:72:b7:05:d8:10:
b0:3c:0f:4a:02:0d:1a:4e:df:48:97:b1:1c:b2:07:
30:59:28:07:3b:7f:9c:0d:bc:0b:11:09:24:33:09:
4b:02:f0:f0:a6:18:b0:ec:72:ac:f5:09:58:e9:0c:
9a:73:c4:9a:8c:50:20:0d:e7:e1:d4:cb:84:0a:df:
7d:47:d3:68:ae:e9:13:2f:63:68:2b:d9:98:81:9a:
5b:d5:9c:bc:6a:e8:0f:07:c5:d9:04:e6:15:13:ac:
12:55:78:6f:ed:99:2a:92:15:11:b4:9b:78:f0:11:
33:b8:40:5a:d9:ed:b6:0e:50:95:65:a8:00:51:36:
19:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4F:54:56:56:44:B0:03:1F:C4:52:78:BA:90:E5:C6:A4:BC:A5:5E
X509v3 Authority Key Identifier:
keyid:96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2f:50:80:7a:0a:59:c5:1c:25:8e:05:1a:b2:40:f8:a1:38:
d1:eb:ce:46:f0:41:fe:a0:d5:e9:15:54:9c:95:06:95:47:47:
33:f3:7d:59:0e:5b:b4:c4:3e:6b:91:31:9d:c9:41:e6:d8:ba:
06:d9:50:07:22:60:86:3b:8b:49:72:ca:29:7a:67:0a:17:d3:
db:b8:1c:72:b8:7e:df:a4:81:ca:55:c5:97:41:d9:77:fa:f4:
0d:46:51:1b:4a:f6:73:a9:19:a3:b9:b3:4b:40:6a:44:93:f0:
47:ae:f4:44:8d:e2:f1:ef:cc:3e:b8:fa:7e:54:d5:b9:df:b4:
ba:d4:44:ee:23:7d:7d:b0:97:ba:da:fa:15:1d:3e:9d:b2:59:
4b:cd:34:c2:38:39:56:3a:41:34:6a:62:96:c6:76:f3:d0:34:
5e:c3:29:fe:21:4a:d0:68:64:46:89:22:0b:e8:cc:59:09:31:
21:44:2a:fb:d4:ad:a7:00:6c:69:b1:a8:3d:3a:cf:01:43:b4:
ac:d7:9a:e7:74:fa:83:30:8e:cb:f1:2a:09:8e:08:f0:cb:18:
16:b0:25:ef:db:ba:31:d6:33:64:ba:f5:a3:f8:d8:ba:c0:5b:
c9:6d:a9:f2:bf:a6:01:f8:aa:66:75:b0:e2:ac:bd:c7:fc:1d:
2d:59:66:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:46:02 2026 by rpki-client