Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
File: LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft (raw, json)
Hash identifier: tMlTVB6Lnykq0xtWRePw+WMPo0lVt+7TXBrA/GytfXI=
Subject key identifier: 5D:A3:BC:66:42:90:A9:79:06:79:C1:50:19:A1:34:D0:03:B6:08:67
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 019FAAF591FB55D18F310EDA7000096CDC93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 23:00:48 +0000
Manifest this update: Tue 28 Jul 2026 23:00:48 +0000
Manifest next update: Wed 29 Jul 2026 23:00:48 +0000
Files and hashes: 1: L4LkPtTKu6uh824DJ6xjRvNmWTU.roa (hash: 0NgdalWgdZZseus2rUGUIbaj+mAP6w8e2361KL42z6g=)
2: LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl (hash: piaiiYD6NWxGaZqDO7o3rsvJwhjWjkNPH2sf6UlxVEE=)
3: fRlgrC6V-4hpDOR3xf-j7dbCZZ8.roa (hash: aMV6NBt217+iKos/Lhiyotp7vHjyI7McAj/90qITACM=)
4: qsejt5iw_nC2cpa2gTFa-6x-D30.roa (hash: OQehKpZjdvH5fT9tftK+VPDJxCO7SZpTNsO/1LiDTxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:91:fb:55:d1:8f:31:0e:da:70:00:09:6c:dc:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: Jul 28 23:00:48 2026 GMT
Not After : Jul 29 23:00:48 2026 GMT
Subject: CN=5da3bc664290a9790679c15019a134d003b60867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e7:46:2a:35:73:00:fb:11:b0:78:8b:96:09:
45:8e:f6:a3:41:bc:a9:bc:91:2e:59:a6:36:8c:01:
94:83:ae:f0:c6:bf:2c:e1:7c:2b:e2:09:42:f1:37:
99:87:ec:3c:7d:1b:72:ec:4b:a9:f7:32:9f:93:85:
d9:d6:a8:0b:54:60:73:b0:e8:56:dc:3b:71:f6:5d:
34:ec:01:f4:f0:de:b7:0d:c9:a9:c3:ad:e1:9f:45:
c8:f8:e9:d6:99:12:c5:54:6f:ce:3f:49:b2:aa:b2:
47:39:71:1f:43:c7:5c:b0:f9:0e:22:d5:4f:a8:64:
97:b4:ec:6e:05:00:80:4d:4d:0e:de:98:60:32:67:
e9:e2:a7:15:1d:ea:1e:26:4a:02:01:23:dc:08:b7:
ac:28:0d:eb:a1:41:a2:9b:79:6d:ea:6b:bc:0f:86:
88:61:a2:af:92:37:31:13:a1:91:83:5d:ce:5d:bb:
33:85:e7:ab:5e:dc:e3:50:35:40:a3:ef:b9:26:be:
17:29:63:25:8b:74:dc:55:a1:f0:40:75:14:7d:37:
52:6c:3a:80:5d:60:b6:d2:19:31:9d:12:02:0a:56:
fc:90:77:f9:90:c1:df:16:30:7c:36:46:c5:93:bc:
4e:9d:17:8a:5a:20:d9:cf:28:d3:37:da:0b:57:3b:
a1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A3:BC:66:42:90:A9:79:06:79:C1:50:19:A1:34:D0:03:B6:08:67
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a0:bb:54:e3:ca:de:ca:db:35:94:d2:59:d7:ba:1f:b5:3e:
38:5f:f7:0f:7e:f0:d8:8f:e0:ea:eb:10:eb:e5:0e:6f:09:65:
c0:f6:ce:e5:09:51:fd:bc:03:b5:4b:a1:6d:bf:03:e0:25:8d:
76:65:f2:9a:1b:c5:9f:1b:d9:82:b9:9a:6c:91:1e:ff:54:fd:
49:0b:ec:b4:18:39:10:22:1d:b7:97:ce:22:29:7e:78:f4:17:
3d:49:d9:dc:b4:1d:f2:8f:3a:4d:a0:78:28:e2:31:a5:fa:33:
ca:fb:97:fe:0f:67:f8:7f:26:e5:35:d8:70:e0:7c:2f:97:86:
93:14:51:62:fe:10:26:45:61:e4:f8:3c:d9:31:d8:3f:30:8c:
63:58:90:07:ba:36:f7:d3:55:7c:9f:be:61:f2:b0:77:af:82:
14:4e:75:05:32:8c:aa:b0:a3:bc:64:09:19:fd:96:cf:a3:6b:
4e:a7:89:ca:cf:fd:c9:b1:1d:9b:64:5a:f0:3a:da:3f:aa:b0:
df:e0:c4:e3:3c:7e:bf:91:ba:fe:23:5c:8f:cf:78:6a:fc:46:
73:3c:31:50:8a:83:2d:2a:cf:a9:16:3e:41:7c:7b:ee:b8:28:
b2:bb:7f:10:bf:dd:70:c1:17:29:6b:37:db:81:2f:de:ba:98:
1d:ef:87:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:10:00 2026 by rpki-client