Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
File: LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft (raw, json)
Hash identifier: Jzwuuj91i55fcuBUTpBjo0I6thhyTsUY991bt8vLLMw=
Subject key identifier: 3E:B6:07:D7:45:F7:F1:D0:4E:B3:9E:0D:77:64:7A:BD:D8:52:08:37
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 01A0C8C67B273403A454FF61279A65EDAE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
Manifest number: 1A66
Signing time: Tue 22 Sep 2026 11:00:45 +0000
Manifest this update: Tue 22 Sep 2026 11:00:45 +0000
Manifest next update: Wed 23 Sep 2026 11:00:45 +0000
Files and hashes: 1: L4LkPtTKu6uh824DJ6xjRvNmWTU.roa (hash: 0NgdalWgdZZseus2rUGUIbaj+mAP6w8e2361KL42z6g=)
2: LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl (hash: VWxv4zUU2Zp7NWIF03b+9zS9Y0gt1nh/5iSFe9P2JHE=)
3: fRlgrC6V-4hpDOR3xf-j7dbCZZ8.roa (hash: aMV6NBt217+iKos/Lhiyotp7vHjyI7McAj/90qITACM=)
4: qsejt5iw_nC2cpa2gTFa-6x-D30.roa (hash: OQehKpZjdvH5fT9tftK+VPDJxCO7SZpTNsO/1LiDTxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:7b:27:34:03:a4:54:ff:61:27:9a:65:ed:ae:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: Sep 22 11:00:45 2026 GMT
Not After : Sep 23 11:00:45 2026 GMT
Subject: CN=3eb607d745f7f1d04eb39e0d77647abdd8520837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:d4:4e:d3:d6:6f:4d:a7:08:3e:7a:43:f5:
6a:cb:d2:0d:c2:40:e8:c0:33:0a:d8:bd:03:ec:2d:
42:ea:f4:7f:fa:73:80:cb:d4:cb:e5:50:f4:29:07:
6d:fd:26:80:ff:fb:9b:e5:cc:3c:bf:da:71:d7:30:
ec:cf:02:f9:9a:5e:7d:b3:a6:75:25:22:68:c1:72:
e5:8f:c6:a1:a2:cf:d4:15:8d:24:30:3c:e1:b2:52:
2f:03:3e:83:34:6d:c8:47:e4:64:b2:a0:44:fb:35:
4f:f8:32:f1:98:a4:eb:5e:20:7a:04:2d:56:7e:5c:
4b:25:05:b8:02:57:3d:9b:c0:d4:73:af:53:2a:a1:
6f:96:29:f5:78:57:ad:21:e6:31:47:85:0d:9b:40:
5f:30:d1:a8:54:c8:db:27:7e:53:48:81:25:ad:26:
32:77:2e:d3:2d:19:e5:b3:35:9e:72:e6:23:df:2a:
77:2d:3e:95:ee:a5:a3:5a:5a:fb:52:bc:ea:5a:8e:
94:f8:89:0f:28:b7:be:e6:51:8a:93:c0:7f:82:1f:
0c:9e:fc:85:db:5b:bd:63:af:06:d4:50:c3:b9:7e:
9f:57:d9:7a:50:c7:d1:8d:2b:f6:fe:ff:a1:dd:64:
02:9b:f8:d9:c2:04:4a:7e:4c:d3:b9:db:30:85:1f:
9c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B6:07:D7:45:F7:F1:D0:4E:B3:9E:0D:77:64:7A:BD:D8:52:08:37
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d8:97:f0:a4:8f:db:14:ac:65:09:46:7e:4a:d1:1c:46:5c:
6a:fa:db:25:d1:f4:9d:61:37:6e:88:59:2d:0a:06:49:75:26:
77:76:2e:8b:0f:a6:fe:8d:09:06:60:bc:3d:74:0d:af:05:f4:
24:0f:32:68:28:40:92:4b:d6:b5:08:b0:7a:67:f3:57:02:49:
2d:53:41:a1:a9:89:cd:ff:10:d8:99:e9:c6:f9:d2:89:f0:59:
5f:4d:55:33:b5:01:38:0f:71:f6:50:e7:e8:1e:2c:e3:e3:14:
d3:a1:32:24:aa:85:b1:1e:ee:ac:3b:95:11:a7:2f:4c:85:d9:
ce:6b:bf:cd:e1:19:fc:d1:3a:df:a7:f8:1b:36:8b:4a:37:e8:
43:15:2a:29:6b:7c:0f:eb:a1:7e:4a:38:79:2d:2e:e4:5d:c0:
1c:1a:0b:a6:46:2d:55:b1:fe:6c:ab:0e:16:a7:66:b6:2c:1a:
af:e0:48:ef:f1:5a:03:74:63:fe:19:3a:89:80:c1:96:08:ca:
a5:35:ca:d1:3a:8e:62:85:b9:cf:10:43:23:82:61:db:52:9e:
f4:1f:0d:12:36:c3:6f:2b:92:1e:7c:68:a4:be:09:09:0f:54:
85:de:82:75:00:ec:b2:f1:1c:25:b0:0a:59:a5:f5:7d:bc:37:
6c:ea:1b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:03:33 2026 by rpki-client