Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
File: LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft (raw, json)
Hash identifier: 5OYzWh5X5TmsxUps7RIfKiZQDljxlc9lMHAYkL/O89s=
Subject key identifier: F2:D5:A4:07:3E:11:BF:0E:EC:F1:B8:64:6E:04:70:63:9E:67:21:06
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 01A0D0804EFAAAE15ACFCACD32169CCE6054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 23:01:04 +0000
Manifest this update: Wed 23 Sep 2026 23:01:04 +0000
Manifest next update: Thu 24 Sep 2026 23:01:04 +0000
Files and hashes: 1: L4LkPtTKu6uh824DJ6xjRvNmWTU.roa (hash: 0NgdalWgdZZseus2rUGUIbaj+mAP6w8e2361KL42z6g=)
2: LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl (hash: Im9Y0WJHGC+foXC1Mwwwy7/HdYQu5QScdf1R9O8SMf8=)
3: fRlgrC6V-4hpDOR3xf-j7dbCZZ8.roa (hash: aMV6NBt217+iKos/Lhiyotp7vHjyI7McAj/90qITACM=)
4: qsejt5iw_nC2cpa2gTFa-6x-D30.roa (hash: OQehKpZjdvH5fT9tftK+VPDJxCO7SZpTNsO/1LiDTxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:4e:fa:aa:e1:5a:cf:ca:cd:32:16:9c:ce:60:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: Sep 23 23:01:04 2026 GMT
Not After : Sep 24 23:01:04 2026 GMT
Subject: CN=f2d5a4073e11bf0eecf1b8646e0470639e672106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3b:57:f0:6c:fa:35:fc:1f:7a:eb:ab:14:1c:
50:36:2e:b0:dd:14:c5:17:1c:7a:14:fe:5f:52:fc:
9a:be:de:d1:87:e1:28:18:ed:3d:07:e1:0d:ff:f6:
7d:a7:db:69:11:42:fd:43:b2:62:38:87:30:f0:7f:
e0:06:d5:1a:ee:3d:c1:c8:d2:0c:3f:82:f3:0f:f0:
6d:2d:cd:f5:a2:7f:f6:28:dc:ed:f4:1c:93:62:f9:
03:da:67:dc:b7:8d:53:1d:ec:a6:d2:96:21:60:66:
1d:ff:09:63:b1:ae:de:ca:58:00:93:d8:6c:6d:6b:
d8:bd:fb:b9:24:9a:57:9e:48:60:a6:05:48:b4:a2:
90:56:ec:8a:7f:cf:9a:94:e7:fb:28:e2:dc:05:49:
f2:c0:85:c2:2f:c0:03:42:a8:50:3d:c5:a5:84:f5:
66:d2:5d:84:72:be:ed:d2:15:33:b5:4d:9f:b7:21:
88:58:6a:8e:79:f0:28:a6:95:db:8f:8e:51:88:de:
9c:f2:44:30:34:7d:e4:ec:85:a2:07:68:c7:37:4f:
f4:d1:09:46:2a:6c:55:d8:7c:ae:f3:1f:2a:50:cf:
55:12:00:74:8b:a6:b2:1b:d8:e0:13:5b:38:de:ed:
b2:69:c4:cb:be:58:c4:43:96:d9:b0:b4:29:15:7d:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D5:A4:07:3E:11:BF:0E:EC:F1:B8:64:6E:04:70:63:9E:67:21:06
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:40:a7:08:83:a7:b9:85:a3:c2:b9:36:17:71:23:db:e2:ed:
db:ec:cd:1d:47:4f:fb:f5:ac:ee:fa:dd:55:29:4c:19:6f:b2:
88:fa:fc:5c:3f:18:44:19:a2:9d:1f:ab:f2:a9:0f:9b:3c:35:
fa:69:88:48:05:79:90:4e:51:bb:56:20:ae:80:41:9b:9c:51:
03:c6:9e:d8:dc:43:53:d6:a1:2a:88:fa:44:5a:a0:b0:b8:ec:
06:05:97:74:5d:86:e7:92:cf:58:08:05:25:28:ce:e3:24:87:
fb:7f:70:95:cf:ff:a0:35:b6:0e:24:d4:a0:46:58:58:f5:19:
aa:45:51:62:22:3d:62:3e:2c:3b:2d:7d:83:32:78:19:8c:52:
ed:6e:d9:0f:36:4b:cb:25:d5:3d:65:43:34:9d:75:cf:a1:43:
ce:d2:46:2c:bf:89:7c:54:8c:03:6a:06:8f:4d:6f:1f:ed:49:
25:84:3f:ed:d8:d8:bc:59:dc:47:ad:c0:4b:5f:49:26:75:25:
d3:15:e8:94:41:21:ea:04:bb:7d:c7:95:cd:f7:ca:3a:d2:e2:
fc:45:3c:45:dd:d7:ae:71:9c:78:cb:be:b1:2a:79:5c:49:90:
4e:b5:13:89:f3:8b:bb:97:94:61:1f:14:94:58:68:2f:46:94:
4f:b3:90:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:29:47 2026 by rpki-client