Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
File: LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft (raw, json)
Hash identifier: s65bcZxWMpQUkY2co/BgVZvQT8MydiB4ZlxJqA46DCk=
Subject key identifier: 72:C6:B2:49:16:43:65:B4:4B:F3:80:AC:B2:7C:75:5B:80:C0:7C:F8
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 019EBF5B224D87BE56623B53EBADBE6F6A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
Manifest number: 1958
Signing time: Sat 13 Jun 2026 05:01:21 +0000
Manifest this update: Sat 13 Jun 2026 05:01:21 +0000
Manifest next update: Sun 14 Jun 2026 05:01:21 +0000
Files and hashes: 1: L4LkPtTKu6uh824DJ6xjRvNmWTU.roa (hash: 0NgdalWgdZZseus2rUGUIbaj+mAP6w8e2361KL42z6g=)
2: LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl (hash: fsD6NoNuNX2Qa8JuT9yLZhxnpfG3zfKMOJRykEFw1CY=)
3: fRlgrC6V-4hpDOR3xf-j7dbCZZ8.roa (hash: aMV6NBt217+iKos/Lhiyotp7vHjyI7McAj/90qITACM=)
4: qsejt5iw_nC2cpa2gTFa-6x-D30.roa (hash: OQehKpZjdvH5fT9tftK+VPDJxCO7SZpTNsO/1LiDTxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5b:22:4d:87:be:56:62:3b:53:eb:ad:be:6f:6a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: Jun 13 05:01:21 2026 GMT
Not After : Jun 14 05:01:21 2026 GMT
Subject: CN=72c6b249164365b44bf380acb27c755b80c07cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d2:fb:35:5e:ca:e7:97:7d:c4:75:14:25:08:
bb:a9:03:e8:ec:4a:53:93:fa:d0:be:75:48:71:53:
15:77:7d:59:7a:7f:49:cc:f8:f3:29:f4:bf:f9:11:
33:7d:b1:81:c9:47:3d:fb:c7:7c:a1:5c:3b:dd:62:
2b:80:b1:c0:e2:11:f4:f0:1e:89:dd:db:c1:93:21:
05:a6:6c:c2:69:d2:6f:93:36:78:8d:43:a8:33:6c:
87:d8:a4:5c:e0:20:5c:e5:56:95:9a:59:f7:18:27:
7d:bd:ad:15:29:c3:9e:33:37:8d:4b:04:ca:22:c3:
c4:3b:66:7c:03:a4:92:6d:aa:6e:7c:1e:ff:53:07:
07:f2:73:bb:61:29:d0:7d:63:d6:64:38:43:be:87:
d1:7a:8d:4e:0c:cc:cd:d8:62:6f:d8:4c:0a:6f:4d:
b0:db:3a:f3:47:6a:bf:19:5a:0b:89:05:3a:de:25:
13:c4:40:c7:40:4d:b4:0d:bb:66:67:83:90:2d:85:
34:f2:96:ac:3e:28:31:fc:03:a7:1e:a5:a8:08:e1:
94:5e:3b:94:42:85:6b:e0:c4:10:f1:0d:0c:58:60:
61:d2:60:71:65:e7:b5:ca:65:dd:b4:b2:69:c4:74:
aa:0b:d3:de:35:52:e3:39:f5:ae:e3:7d:7a:23:a8:
a1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C6:B2:49:16:43:65:B4:4B:F3:80:AC:B2:7C:75:5B:80:C0:7C:F8
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a4:52:1a:ed:45:1c:4e:5c:2b:22:ee:4f:2c:77:67:a2:bc:
35:50:4f:c0:f0:6d:27:62:43:17:25:3e:53:98:78:f4:40:a2:
91:25:75:30:2d:7f:26:f7:78:ab:74:0e:ef:a9:dc:fe:f8:ea:
55:92:84:59:30:fd:23:cd:90:92:fa:bb:9d:e1:5a:0f:d3:40:
9d:75:2b:e8:ce:e3:db:cc:ca:3a:a4:76:95:ee:12:af:5b:4c:
ea:64:52:70:1d:c5:30:01:70:ce:d1:42:0d:31:06:4d:7a:32:
5b:20:9b:bb:dd:a3:d6:54:9f:d4:02:72:5c:53:64:e9:ff:26:
66:23:ff:74:4b:e5:1e:63:30:5a:cc:72:1e:dd:5f:5c:5e:1e:
3f:61:8a:ce:70:4f:2a:f7:f8:d7:9b:8d:80:06:3d:fb:63:b6:
e8:ca:8e:ed:62:19:7f:c6:4b:a2:da:67:7e:af:82:e2:dd:02:
43:dd:2d:41:2d:53:c9:65:45:fc:46:2b:88:15:66:a7:7f:24:
eb:ea:d3:62:7c:f1:45:c1:b4:ad:fe:fa:f7:da:32:58:a6:58:
30:66:2e:96:ac:16:02:0e:df:8f:04:fa:8f:12:4c:93:68:c7:
d8:d9:82:37:c2:f5:48:32:f7:95:b0:c6:15:da:51:98:a6:00:
44:ef:2d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:49:11 2026 by rpki-client