Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
File: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft (raw, json)
Hash identifier: 3u7gn8nVLdL4GY3FHt6OmV5VrxakKBaEjnjxwe6aeX8=
Subject key identifier: 82:BD:69:70:16:A3:74:A8:8A:94:0B:CC:82:12:A4:AD:84:AA:FF:6E
Authority key identifier: 96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
Certificate issuer: /CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Certificate serial: 019FAD516577E8B68D38E857F193DAEFE30C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
Manifest number: 110C
Signing time: Wed 29 Jul 2026 10:00:20 +0000
Manifest this update: Wed 29 Jul 2026 10:00:20 +0000
Manifest next update: Thu 30 Jul 2026 10:00:20 +0000
Files and hashes: 1: Qb_RZp-mahSy8KfrU77wNxpfg_E.roa (hash: u1xd1aPYepFZHPAZOvL3xwts9hFrIKK/yaiHVAix9zo=)
2: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl (hash: +p147aPII3ghVuCcnTI6XLiTNd/DDRPNz4egdOXpGKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:65:77:e8:b6:8d:38:e8:57:f1:93:da:ef:e3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Validity
Not Before: Jul 29 10:00:20 2026 GMT
Not After : Jul 30 10:00:20 2026 GMT
Subject: CN=82bd697016a374a88a940bcc8212a4ad84aaff6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ef:81:d5:f9:ce:62:6d:21:1d:7a:42:33:6f:
a6:66:c3:ac:c5:42:4d:99:c4:00:1c:50:e7:c6:97:
ad:c0:23:1f:5b:31:e7:48:c5:fd:f3:fc:80:bc:ef:
4e:05:58:13:d2:23:26:59:18:ec:62:9b:96:78:d2:
d7:8e:28:d9:b2:fb:b2:47:5f:af:57:55:66:84:05:
f2:18:42:5a:d3:b4:ad:71:ca:ae:02:cf:18:0a:ff:
0b:3a:f5:28:e3:63:08:d3:4b:29:29:aa:5a:f5:98:
aa:71:97:a8:47:ac:58:64:84:90:3d:27:26:27:cb:
3c:85:30:c4:7c:7b:01:be:7b:87:8d:ae:ee:91:41:
9e:47:a5:62:99:97:7d:10:54:7b:3b:e3:14:39:c3:
c8:48:c1:d5:8b:9d:32:f0:1e:72:52:d0:9c:a7:6e:
30:31:f2:7c:7e:b6:9b:ef:69:0a:0f:dd:ab:f1:95:
14:05:94:d4:b6:cf:a9:96:d7:81:aa:75:46:79:a9:
45:d1:ff:c4:22:c7:4f:e4:22:93:5f:3b:29:60:29:
1d:50:cf:08:90:44:a5:42:0c:b1:37:e0:8d:2f:d5:
cf:f4:36:4d:3a:44:a7:c5:01:a2:16:71:fb:32:e0:
0b:97:3e:12:7e:75:dc:5e:5d:4c:f4:21:ba:e2:6a:
29:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BD:69:70:16:A3:74:A8:8A:94:0B:CC:82:12:A4:AD:84:AA:FF:6E
X509v3 Authority Key Identifier:
keyid:96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:97:56:8e:0a:33:18:8d:74:f4:36:7a:0e:8d:e3:b5:e0:0f:
f7:1a:87:da:23:aa:2a:dc:c4:68:a4:19:3d:10:b0:99:5f:2a:
fd:32:70:5b:ec:1a:76:38:e9:43:e0:f6:0f:00:18:40:77:83:
bf:9b:89:9e:59:a4:35:16:cb:18:41:82:57:b0:de:3f:35:39:
85:27:1e:06:b2:76:17:d0:c7:5e:c1:7b:73:b7:73:51:f1:53:
3e:c7:3e:1b:0a:c6:78:d4:45:83:b0:cd:28:bd:a3:74:fa:ec:
6e:2a:6a:50:b2:59:7b:60:ed:3c:9e:82:5b:25:37:a9:43:97:
03:7b:e0:36:f7:0b:85:52:93:59:a6:67:11:5b:09:27:ac:50:
7f:8f:3f:d7:ff:4d:be:57:11:be:e8:ff:c4:05:15:82:0f:79:
34:01:2c:bc:42:ae:00:e5:78:b0:79:fe:e3:6b:c7:59:47:b6:
64:8a:60:a2:79:9b:3c:87:ef:42:8c:da:f5:be:f2:a8:80:77:
49:5f:9c:5c:43:11:9e:aa:e3:99:9e:85:29:ff:9a:b0:c0:26:
16:bb:ea:c8:d9:3d:03:df:27:91:a6:66:33:ac:13:2a:18:4d:
2e:39:68:d1:c3:0e:ab:97:e7:60:4f:01:a9:65:79:9c:d4:bf:
bd:14:9d:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tUWV36LaNOOhX8ZPa7+MMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2Yjg3ZTVmZDFhYWRjMWJiZWEzNzJiNDI2OWVlYmQzOTNj
NWNkNjcwHhcNMjYwNzI5MTAwMDIwWhcNMjYwNzMwMTAwMDIwWjAzMTEwLwYDVQQD
Eyg4MmJkNjk3MDE2YTM3NGE4OGE5NDBiY2M4MjEyYTRhZDg0YWFmZjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie+B1fnOYm0hHXpCM2+mZsOsxUJN
mcQAHFDnxpetwCMfWzHnSMX98/yAvO9OBVgT0iMmWRjsYpuWeNLXjijZsvuyR1+v
V1VmhAXyGEJa07StccquAs8YCv8LOvUo42MI00spKapa9ZiqcZeoR6xYZISQPScm
J8s8hTDEfHsBvnuHja7ukUGeR6VimZd9EFR7O+MUOcPISMHVi50y8B5yUtCcp24w
MfJ8frab72kKD92r8ZUUBZTUts+plteBqnVGealF0f/EIsdP5CKTXzspYCkdUM8I
kESlQgyxN+CNL9XP9DZNOkSnxQGiFnH7MuALlz4SfnXcXl1M9CG64mop/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIK9aXAWo3SoipQLzIISpK2Eqv9uMB8GA1UdIwQY
MBaAFJa4fl/RqtwbvqNytCae69OTxc1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHJoLVg5R3EzQnUtbzNLMEpwN3IwNVBGeldjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82YTg4YWMtZWZiNC00NWU0LTkxOTkt
MmFiZGIyMTk0MWJjLzEvbHJoLVg5R3EzQnUtbzNLMEpwN3IwNVBGeldjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi82YTg4YWMtZWZiNC00NWU0LTkxOTktMmFiZGIyMTk0MWJj
LzEvbHJoLVg5R3EzQnUtbzNLMEpwN3IwNVBGeldjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbpdWjgoz
GI109DZ6Do3jteAP9xqH2iOqKtzEaKQZPRCwmV8q/TJwW+wadjjpQ+D2DwAYQHeD
v5uJnlmkNRbLGEGCV7DePzU5hSceBrJ2F9DHXsF7c7dzUfFTPsc+GwrGeNRFg7DN
KL2jdPrsbipqULJZe2DtPJ6CWyU3qUOXA3vgNvcLhVKTWaZnEVsJJ6xQf48/1/9N
vlcRvuj/xAUVgg95NAEsvEKuAOV4sHn+42vHWUe2ZIpgonmbPIfvQoza9b7yqIB3
SV+cXEMRnqrjmZ6FKf+asMAmFrvqyNk9A98nkaZmM6wTKhhNLjlo0cMOq5fnYE8B
qWV5nNS/vRSdWA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:16:36 2026 by rpki-client