Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
File: lhud90XDLfJ98z68_VNvGeE0dP4.mft (raw, json)
Hash identifier: 5wpopndDoRbAahQ+be6HHl/Oc4azcRKIbGZJSGOGIFI=
Subject key identifier: 16:E4:7A:1E:FC:4C:B1:C7:17:A4:8F:C9:9A:63:0F:8E:04:D5:64:10
Authority key identifier: 96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
Certificate issuer: /CN=961b9df745c32df27df33ebcfd536f19e13474fe
Certificate serial: 019D29CE4568D64F09F5239E5798E579CD51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
Manifest number: 11A2
Signing time: Thu 26 Mar 2026 11:01:17 +0000
Manifest this update: Thu 26 Mar 2026 11:01:17 +0000
Manifest next update: Fri 27 Mar 2026 11:01:17 +0000
Files and hashes: 1: Rf4ua2gShCgNnsbPUQ6ubuJBV1k.roa (hash: tSFC9dWk5W60HWYLlM+PiN1UjypysKUpyAViK3s11Fw=)
2: Uxtr-atmnNBITnladLThcv7huIU.roa (hash: n7M6NPbamAy18kfeXWpn06XaPUvf5LbKfUxiapVP6+w=)
3: cd4PR_7Zwc-Jv_h3ekBVWiw0K-0.roa (hash: HpbyUUXySxZasQuBBURj008LhTbNYYQxJ+uuJec1F1s=)
4: lhud90XDLfJ98z68_VNvGeE0dP4.crl (hash: ykSt++5tUWGEtjtqgG+QMhtDRhr5CTVI/lAhQhKCihM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:45:68:d6:4f:09:f5:23:9e:57:98:e5:79:cd:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961b9df745c32df27df33ebcfd536f19e13474fe
Validity
Not Before: Mar 26 11:01:17 2026 GMT
Not After : Mar 27 11:01:17 2026 GMT
Subject: CN=16e47a1efc4cb1c717a48fc99a630f8e04d56410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:2c:eb:21:e1:56:9c:41:07:a7:25:73:9c:
62:e6:17:27:91:d1:1d:e8:ad:e4:9b:74:59:d8:c7:
63:26:ba:7b:53:49:7e:36:01:28:e1:85:73:ec:20:
58:13:ad:78:18:8a:31:d2:bf:e5:0c:a5:88:08:3b:
2e:a9:ab:8c:1a:d3:a9:e9:40:79:84:78:46:c6:b8:
3b:32:15:98:60:bf:77:15:ec:84:fa:44:3f:e1:f6:
e1:eb:4b:b6:f4:aa:73:fe:46:d2:bc:e4:c4:ab:a1:
93:8d:df:b0:45:05:ab:0a:30:53:30:8e:11:52:8d:
e9:d3:98:d7:75:fb:31:8b:d4:f7:7f:7b:e3:c1:b1:
21:7d:b8:4d:57:94:77:41:63:1c:5a:37:3d:32:df:
e9:cd:cf:b1:2e:16:86:87:56:72:c4:79:9b:a8:98:
43:22:87:db:20:75:26:d5:57:80:30:d4:43:96:c3:
6c:a0:99:9b:35:29:34:29:b7:6e:ef:10:03:ef:7a:
35:20:93:84:67:21:98:ad:51:79:f0:85:69:c7:9d:
5f:ee:87:d1:e1:53:94:0a:23:b6:e8:19:5e:7c:47:
eb:f5:5a:5d:40:b9:64:2a:0c:78:fe:a7:52:21:62:
ed:83:85:c9:d7:1b:76:14:02:72:87:4e:3a:69:b0:
c8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E4:7A:1E:FC:4C:B1:C7:17:A4:8F:C9:9A:63:0F:8E:04:D5:64:10
X509v3 Authority Key Identifier:
keyid:96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a9:65:12:08:54:eb:66:bc:83:0e:73:38:05:b9:57:22:ce:
06:3f:05:85:da:c5:77:1b:a8:76:f0:23:cd:1f:85:4e:4f:3e:
12:92:61:eb:cc:34:15:aa:48:e8:82:29:fd:9f:cc:e7:5d:14:
32:46:db:e7:e8:1d:34:dc:1a:d7:b8:aa:f1:41:7d:ce:82:83:
17:65:3d:a4:ff:30:df:0b:c7:b7:fa:dc:80:7e:06:4c:69:b3:
9e:e4:79:b5:19:83:d1:da:e2:13:21:37:5d:a8:68:4e:0e:60:
3c:cb:45:08:c1:4a:02:65:54:79:35:28:92:b6:8b:76:24:1e:
67:c9:5f:e1:d4:d1:fa:5f:4a:cf:e1:67:ab:88:b0:8b:3b:fc:
76:83:1e:eb:cf:51:82:32:af:87:b6:38:58:41:97:a4:cf:7c:
9f:4e:74:40:2f:5d:d8:c6:56:3d:25:79:bb:7e:a3:76:40:d5:
19:35:6b:ca:49:83:db:87:e8:44:02:b1:b4:f8:74:e7:3b:50:
3e:1a:30:5a:a5:ac:cd:dd:8b:e4:59:26:ef:77:1b:e3:29:11:
40:56:f6:f9:63:1b:cd:cb:3c:50:ab:2b:25:e2:46:5b:bc:37:
93:57:94:ad:65:fb:12:cf:ce:0c:cd:d9:9c:1d:19:25:23:36:
35:38:46:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:19:45 2026 by rpki-client