Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
File: lhebOdHB0o9QY8qSHWAH42Phxgs.mft (raw, json)
Hash identifier: +1ZsGqSU9BTS/OHH9jf7HYnjupwkI6LsAG0Md8b7V+0=
Subject key identifier: 9C:B7:5F:E3:8E:DA:44:6A:32:C4:62:10:40:61:92:34:5F:E5:8C:F7
Authority key identifier: 96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B
Certificate issuer: /CN=96179b39d1c1d28f5063ca921d6007e363e1c60b
Certificate serial: 019CABD8F3E454CA867D93868DEF8A63B45B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:00:47 +0000
Manifest this update: Mon 02 Mar 2026 00:00:47 +0000
Manifest next update: Tue 03 Mar 2026 00:00:47 +0000
Files and hashes: 1: WNgi38YIBh7gSGGMAz3pOwSfPa8.roa (hash: Fi6JSkMtS00G2FM2ty185le8FKrXwlLgR3IpBCt2xCc=)
2: lhebOdHB0o9QY8qSHWAH42Phxgs.crl (hash: XugP/WRmZ7jNIvQV6RAMQqnXlXU/QgoHhmkPMND5zv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:f3:e4:54:ca:86:7d:93:86:8d:ef:8a:63:b4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96179b39d1c1d28f5063ca921d6007e363e1c60b
Validity
Not Before: Mar 2 00:00:47 2026 GMT
Not After : Mar 3 00:00:47 2026 GMT
Subject: CN=9cb75fe38eda446a32c46210406192345fe58cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:59:89:e9:5a:e2:b9:c9:b7:4d:5b:52:a7:74:
44:e8:77:5d:7a:78:d7:26:5c:ef:e6:0e:4d:a8:2d:
17:28:bb:17:36:dd:47:09:1f:db:9c:22:3f:31:12:
87:fd:1b:fd:1d:21:2b:22:f1:1a:07:33:44:b8:26:
f8:06:06:d7:01:d6:78:0d:b3:92:1a:2c:54:3e:5f:
c6:5b:e2:e7:f4:4e:6b:db:bc:16:1b:d6:5c:04:9e:
45:30:2e:31:4b:5c:a3:14:db:c9:3c:a6:e9:c8:13:
df:89:22:fb:f1:c3:37:54:1f:bb:05:55:2e:00:e4:
d4:5c:3d:ff:95:59:5a:97:cd:4a:8a:ab:cd:01:d1:
9c:79:fc:85:ea:27:5f:71:71:dd:17:e8:05:18:b8:
ba:3a:74:dc:9d:9f:b2:79:30:c8:74:bb:10:25:f7:
a8:61:4f:28:df:9f:a4:8f:e6:23:7f:f6:a9:85:e5:
3f:66:16:aa:9e:15:48:6f:da:a7:7d:a5:4a:d8:76:
75:bc:87:71:6f:63:08:66:a1:f0:49:3a:c2:ce:91:
ff:5d:88:92:38:a9:a5:a7:8e:a9:5e:ba:46:29:3e:
88:3f:f5:6c:ac:c9:86:4e:88:a1:f3:e2:24:9c:1a:
17:e8:a5:7c:f8:f3:69:42:03:ea:e7:99:2e:b9:57:
7f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B7:5F:E3:8E:DA:44:6A:32:C4:62:10:40:61:92:34:5F:E5:8C:F7
X509v3 Authority Key Identifier:
keyid:96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a0:42:30:ac:d4:bd:2a:ab:e4:a7:e2:25:4c:18:5a:26:3b:
10:1f:62:0a:e0:ce:6d:6f:4b:d7:97:41:e2:e0:f9:0d:ef:ff:
78:60:9d:d4:c6:5d:d9:d4:1e:6e:b7:18:63:13:e2:c5:8b:60:
70:8d:df:f7:e0:1f:68:4b:d8:31:3d:0e:87:2c:7a:3f:32:f2:
d0:56:33:7d:f4:a0:62:3b:e5:b2:45:cf:0c:cf:53:85:46:6e:
f4:af:38:cd:20:75:49:9e:ae:72:2b:40:b8:e7:b7:57:3e:87:
b2:71:7e:a4:eb:e9:e4:ea:a6:7c:c5:03:e1:2e:2e:00:c0:4c:
6b:ac:83:5b:06:7b:1b:3f:ca:b8:17:9c:dc:b9:25:e0:55:d8:
71:e0:ba:ca:b2:48:9e:fd:1b:f9:32:7e:c4:2b:6d:aa:e5:d8:
69:df:e7:06:96:b0:b4:c7:38:68:c7:a9:bf:bb:78:13:8f:31:
62:84:31:65:42:d3:52:9e:11:72:83:80:e5:d3:6e:6d:dd:f6:
83:6b:4c:8b:8a:50:a6:5c:2f:ed:fc:67:65:83:65:70:23:4c:
a9:01:22:5f:d0:54:7c:a9:6f:83:15:fd:50:1e:92:ea:66:64:
52:2a:21:7d:8a:d5:20:27:ff:d5:e0:fb:fd:e5:36:6b:a5:3a:
57:10:d6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:44 2026 by rpki-client