Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
File: LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft (raw, json)
Hash identifier: wKicekZX6223CqvVZtRuxXWhsiwBCHHiCDgfzhXmBTs=
Subject key identifier: EF:3A:28:63:32:06:DD:93:8C:03:69:FD:5B:A0:51:57:8C:52:3B:33
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 019CAA586F3D687FB2147D4816E09CA9B4DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 17:00:48 +0000
Manifest this update: Sun 01 Mar 2026 17:00:48 +0000
Manifest next update: Mon 02 Mar 2026 17:00:48 +0000
Files and hashes: 1: L4LkPtTKu6uh824DJ6xjRvNmWTU.roa (hash: 0NgdalWgdZZseus2rUGUIbaj+mAP6w8e2361KL42z6g=)
2: LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl (hash: Sk0zXlhTrG7tIWJuo8Jbpm91b1cD+JrIZpOrj5l77qw=)
3: fRlgrC6V-4hpDOR3xf-j7dbCZZ8.roa (hash: aMV6NBt217+iKos/Lhiyotp7vHjyI7McAj/90qITACM=)
4: qsejt5iw_nC2cpa2gTFa-6x-D30.roa (hash: OQehKpZjdvH5fT9tftK+VPDJxCO7SZpTNsO/1LiDTxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:6f:3d:68:7f:b2:14:7d:48:16:e0:9c:a9:b4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: Mar 1 17:00:48 2026 GMT
Not After : Mar 2 17:00:48 2026 GMT
Subject: CN=ef3a28633206dd938c0369fd5ba051578c523b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:92:b1:81:49:a6:14:3a:2b:e2:ae:03:73:f1:
66:e2:fb:77:be:66:e4:f3:00:90:a7:a3:7c:20:66:
ac:a4:ea:a0:cc:e0:ba:fa:70:04:e7:09:38:af:c6:
3f:8a:f3:44:13:0d:ac:4b:c8:dc:bb:ba:0b:82:6e:
ea:f4:3f:07:09:35:e0:cc:73:e1:3b:dd:61:00:95:
e0:b3:ee:fa:ca:e4:ae:cc:d0:45:31:35:fb:2e:c6:
01:93:ff:04:23:02:c3:46:35:39:32:69:28:8f:01:
e2:eb:d9:72:38:c7:23:80:ee:a0:11:71:06:16:86:
f7:47:26:38:66:20:fd:1d:8d:1f:6d:1a:b3:d9:d5:
73:4b:1c:d4:e6:4e:bf:1c:e5:4f:6a:9b:d1:6f:ce:
44:6d:b5:26:68:64:30:25:d5:da:0b:fd:1f:d7:3a:
7e:68:13:b2:d5:0f:23:9c:c7:c6:b5:84:83:37:55:
9b:7c:d9:f4:c5:ac:94:2f:6e:43:f1:75:ef:66:7e:
e9:4f:5e:2f:1e:4f:c6:3a:9f:0a:ac:b1:b2:4e:65:
64:70:b9:c2:e4:92:7d:bf:1a:56:ad:eb:84:8c:44:
2c:ce:0b:3f:aa:bd:a2:c0:1f:b7:6e:c0:fb:ff:98:
07:c9:ab:f2:d1:73:eb:24:2e:4a:22:0c:de:59:7b:
a4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3A:28:63:32:06:DD:93:8C:03:69:FD:5B:A0:51:57:8C:52:3B:33
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:4e:73:cc:a5:fc:d8:18:34:f6:8a:33:da:ad:09:99:3c:37:
26:95:a0:b4:cb:78:36:4d:4e:34:96:a3:4e:60:76:f4:17:5c:
36:c9:bd:08:7e:61:0a:18:fe:a9:9e:51:0d:9a:6e:c7:8b:40:
43:59:01:b7:ca:55:7b:9f:af:9d:a8:b9:5c:da:46:7d:49:18:
5a:cb:08:c2:c9:f4:65:94:6a:78:97:26:80:8b:63:5e:30:2f:
a8:56:44:b4:e4:b1:ff:d0:13:f5:f8:36:db:ce:f5:9e:fc:ef:
b4:c5:ed:fd:3b:22:02:1e:89:ad:fe:63:1b:a2:76:a7:83:f3:
f4:27:f1:fd:93:e1:fb:b4:85:c4:1c:5b:34:15:8a:24:2d:11:
42:ad:9e:9b:03:20:8f:c1:48:16:6e:7c:44:cb:0b:3f:b0:f0:
ce:d3:8f:7d:5e:50:49:f0:2e:5e:d0:c6:fd:c5:20:4d:c8:5c:
c9:ee:7c:6b:bc:cb:dc:f1:36:dc:6d:e2:c1:0a:56:13:4e:9c:
97:b1:5e:29:94:28:52:da:76:3b:d0:f1:82:0b:0a:ba:c7:96:
99:1c:59:db:91:d2:b4:4f:62:47:1a:26:af:56:da:b9:9f:8e:
08:8f:08:1c:33:8a:7c:ee:a1:52:ff:ee:4b:8e:bf:0a:c2:3c:
29:c4:eb:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWG89aH+yFH1IFuCcqbTdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMTYyMDg5MGY3MDBmMDEyYjBiYTYwMTcyMzE0ZTNjODU5
MTk1MTMwHhcNMjYwMzAxMTcwMDQ4WhcNMjYwMzAyMTcwMDQ4WjAzMTEwLwYDVQQD
EyhlZjNhMjg2MzMyMDZkZDkzOGMwMzY5ZmQ1YmEwNTE1NzhjNTIzYjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJKxgUmmFDor4q4Dc/Fm4vt3vmbk
8wCQp6N8IGaspOqgzOC6+nAE5wk4r8Y/ivNEEw2sS8jcu7oLgm7q9D8HCTXgzHPh
O91hAJXgs+76yuSuzNBFMTX7LsYBk/8EIwLDRjU5MmkojwHi69lyOMcjgO6gEXEG
Fob3RyY4ZiD9HY0fbRqz2dVzSxzU5k6/HOVPapvRb85EbbUmaGQwJdXaC/0f1zp+
aBOy1Q8jnMfGtYSDN1WbfNn0xayUL25D8XXvZn7pT14vHk/GOp8KrLGyTmVkcLnC
5JJ9vxpWreuEjEQszgs/qr2iwB+3bsD7/5gHyavy0XPrJC5KIgzeWXukUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO86KGMyBt2TjANp/VugUVeMUjszMB8GA1UdIwQY
MBaAFC4WIIkPcA8BKwumAXIxTjyFkZUTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGhZZ2lROXdEd0VyQzZZQmNqRk9QSVdSbFJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy84MjExNTItOWYxMy00YzA5LTlkY2Qt
NDViYmIyM2ExNWQ4LzEvTGhZZ2lROXdEd0VyQzZZQmNqRk9QSVdSbFJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy84MjExNTItOWYxMy00YzA5LTlkY2QtNDViYmIyM2ExNWQ4
LzEvTGhZZ2lROXdEd0VyQzZZQmNqRk9QSVdSbFJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC05zzKX8
2Bg09ooz2q0JmTw3JpWgtMt4Nk1ONJajTmB29BdcNsm9CH5hChj+qZ5RDZpux4tA
Q1kBt8pVe5+vnai5XNpGfUkYWssIwsn0ZZRqeJcmgItjXjAvqFZEtOSx/9AT9fg2
2871nvzvtMXt/TsiAh6Jrf5jG6J2p4Pz9Cfx/ZPh+7SFxBxbNBWKJC0RQq2emwMg
j8FIFm58RMsLP7DwztOPfV5QSfAuXtDG/cUgTchcye58a7zL3PE23G3iwQpWE06c
l7FeKZQoUtp2O9DxggsKuseWmRxZ25HStE9iRxomr1bauZ+OCI8IHDOKfO6hUv/u
S46/CsI8KcTrLA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:44 2026 by rpki-client