Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
File: lhebOdHB0o9QY8qSHWAH42Phxgs.mft (raw, json)
Hash identifier: Mk7AXMpqy1WpB73a9sdGyzneOGB7KaCwQIGKRtqTKHU=
Subject key identifier: 19:F0:FE:D3:0A:0E:B5:F2:DD:7B:99:CB:7E:C8:C1:3F:44:B5:9D:EA
Authority key identifier: 96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B
Certificate issuer: /CN=96179b39d1c1d28f5063ca921d6007e363e1c60b
Certificate serial: 019D9962291851ACF993DCB121DDFDAD0F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:00:40 +0000
Manifest this update: Fri 17 Apr 2026 03:00:40 +0000
Manifest next update: Sat 18 Apr 2026 03:00:40 +0000
Files and hashes: 1: WNgi38YIBh7gSGGMAz3pOwSfPa8.roa (hash: Fi6JSkMtS00G2FM2ty185le8FKrXwlLgR3IpBCt2xCc=)
2: lhebOdHB0o9QY8qSHWAH42Phxgs.crl (hash: 5JafVuylPpitm2eVPQ9J6QGb5FA49oSZNdWjiOPpAWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:29:18:51:ac:f9:93:dc:b1:21:dd:fd:ad:0f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96179b39d1c1d28f5063ca921d6007e363e1c60b
Validity
Not Before: Apr 17 03:00:40 2026 GMT
Not After : Apr 18 03:00:40 2026 GMT
Subject: CN=19f0fed30a0eb5f2dd7b99cb7ec8c13f44b59dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:70:d0:20:a6:e8:61:c8:1a:8f:c2:06:62:69:
51:1e:e3:22:81:d8:25:2a:51:77:23:9d:9a:ba:a5:
1d:86:f2:94:d3:13:2e:37:df:be:ea:2b:ef:fe:74:
31:bd:df:c3:0c:70:61:49:31:ea:2d:4a:f0:9a:0b:
d3:af:9b:d6:7c:e9:70:a7:b8:6b:8d:d0:b5:9c:db:
2c:e4:ba:d9:be:15:75:db:2c:10:79:e1:de:ed:25:
24:c0:04:82:cb:2a:03:e2:ca:83:7e:c9:a6:4a:f2:
ac:db:15:fa:41:a7:31:b6:4c:9a:bb:9a:af:ff:05:
da:70:2c:c6:16:f3:99:f7:0e:9f:36:2d:97:48:99:
37:96:aa:21:ef:32:e6:47:24:cd:a9:ff:54:16:2c:
fd:47:9d:bf:ec:de:87:8c:6a:44:28:bf:7a:03:66:
4b:f3:5d:05:bb:8c:3a:33:36:ae:54:ef:11:45:dd:
6b:3d:08:6b:7b:e2:5d:32:8b:42:56:d5:01:3e:dc:
16:2c:b4:69:6f:2c:f9:c3:ad:c4:37:dd:40:a0:ae:
d8:4a:9a:56:64:19:2a:52:ef:84:00:d3:24:2a:1d:
5e:a0:e8:38:86:0c:49:93:b4:35:f4:ae:8f:fb:1c:
14:72:ef:63:fc:79:fc:f6:90:a2:fd:16:1c:07:3f:
8b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F0:FE:D3:0A:0E:B5:F2:DD:7B:99:CB:7E:C8:C1:3F:44:B5:9D:EA
X509v3 Authority Key Identifier:
keyid:96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:42:b7:7a:be:f8:40:21:21:51:c7:29:f0:c7:d3:ab:c2:f1:
70:c4:1d:d9:61:ca:77:14:f8:cd:96:1f:2a:38:53:8c:70:72:
4e:a4:4a:49:b6:53:ee:6b:2c:37:8f:6f:ab:85:76:ee:e7:60:
f0:01:a5:42:0c:23:50:06:86:4d:1d:60:57:bb:2d:9f:ba:ee:
0e:40:42:a2:70:84:6c:3f:28:de:c1:1b:7c:ac:28:a0:f2:12:
a5:75:dc:f2:da:e8:43:3d:cc:b3:e2:6e:72:db:d4:b4:a3:71:
3b:1c:d8:4e:e3:2d:60:59:b7:60:ae:81:cf:18:96:27:4b:aa:
96:bf:48:0c:53:c6:c4:52:b6:eb:eb:21:95:3f:1b:78:6e:85:
31:9b:c2:23:92:fd:d2:01:ee:f3:4f:ff:30:03:2d:b8:49:da:
12:44:eb:da:f3:1b:f2:0c:ad:d9:95:71:21:0e:f2:19:51:f7:
8c:94:37:a0:89:8e:c4:4c:6f:88:40:08:49:c3:2e:26:f2:2a:
1f:e3:88:d1:30:e0:f8:c8:2a:bc:03:28:f8:8c:fa:76:02:18:
0f:c2:14:67:d4:71:6f:7a:79:67:65:42:6f:1f:07:ac:eb:c3:
66:10:e0:f0:e7:e3:33:1f:b8:d9:a1:f6:38:26:6f:fc:9d:2b:
0b:1f:c1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:44:39 2026 by rpki-client