Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
File: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft (raw, json)
Hash identifier: tCjx8unAbp1VUd/Xld4jOc1DVU6FEE6kEMGVIkW/Guo=
Subject key identifier: 9E:64:EC:2C:94:93:23:2C:EF:FE:35:66:76:0F:0D:11:E0:D7:B2:5B
Authority key identifier: 96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
Certificate issuer: /CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Certificate serial: 01A0DE733E2FE0A6FBBD495ABC35179F0DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
Manifest number: 11AA
Signing time: Sat 26 Sep 2026 16:01:29 +0000
Manifest this update: Sat 26 Sep 2026 16:01:29 +0000
Manifest next update: Sun 27 Sep 2026 16:01:29 +0000
Files and hashes: 1: Qb_RZp-mahSy8KfrU77wNxpfg_E.roa (hash: u1xd1aPYepFZHPAZOvL3xwts9hFrIKK/yaiHVAix9zo=)
2: lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl (hash: N4ZnAGHJ50ffZ7eBjk5Jz7QSwrl+RVdFyf+BDdWfyTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:73:3e:2f:e0:a6:fb:bd:49:5a:bc:35:17:9f:0d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b87e5fd1aadc1bbea372b4269eebd393c5cd67
Validity
Not Before: Sep 26 16:01:29 2026 GMT
Not After : Sep 27 16:01:29 2026 GMT
Subject: CN=9e64ec2c9493232ceffe3566760f0d11e0d7b25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:58:45:55:83:26:81:cc:e7:6c:8e:f9:82:7e:
24:2d:7a:0b:76:fb:3b:15:40:98:f0:c4:b3:58:ec:
7a:25:86:c6:b5:c3:55:b3:78:5b:48:33:4e:73:bc:
a3:4e:a4:36:0d:8d:ad:24:52:f1:60:11:74:ac:e1:
1b:97:14:e5:a9:2d:d5:06:4d:e8:9c:b4:4b:d0:11:
cd:86:8e:ac:00:22:60:5f:13:05:a4:b2:c7:4e:55:
de:a5:47:67:f7:9d:f6:3c:d6:5d:4c:45:25:5b:85:
9f:35:b6:d4:80:b0:91:4c:41:76:5a:d4:b1:56:3c:
94:26:25:71:0a:0a:c8:82:b5:f8:28:66:98:97:49:
b7:06:11:44:a4:d7:fb:c1:ef:70:dc:18:32:e7:12:
b2:7d:e9:90:d0:24:b7:15:6f:79:c0:ed:da:53:a0:
64:8a:22:00:03:28:62:99:70:96:69:de:d2:6a:c8:
58:b8:11:6f:b7:81:40:90:7d:6b:c8:72:ea:6b:8a:
67:45:bf:3c:94:b6:a7:71:8a:a0:db:90:90:4f:4f:
6c:ec:cf:ae:34:bb:25:8b:f1:7b:b2:5b:7f:35:36:
8b:8f:27:7b:78:5f:4d:26:52:29:ff:cb:0d:99:0c:
cb:03:e4:74:e9:66:66:34:c1:09:b4:81:b8:22:c8:
17:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:64:EC:2C:94:93:23:2C:EF:FE:35:66:76:0F:0D:11:E0:D7:B2:5B
X509v3 Authority Key Identifier:
keyid:96:B8:7E:5F:D1:AA:DC:1B:BE:A3:72:B4:26:9E:EB:D3:93:C5:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a88ac-efb4-45e4-9199-2abdb21941bc/1/lrh-X9Gq3Bu-o3K0Jp7r05PFzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:03:cd:b3:fd:3b:c8:50:a2:d8:34:6e:95:b8:98:44:9b:1b:
2d:92:43:87:91:b0:77:aa:4f:e1:82:60:6d:33:ac:1e:d6:66:
20:ca:3b:11:bf:37:e2:5e:06:e7:e4:fd:b0:ba:db:80:a5:84:
f2:46:a3:60:d9:d1:25:7f:b0:81:31:d2:9f:2c:de:17:1d:d5:
d1:ec:34:5d:65:98:03:2a:bc:4c:47:7e:4c:80:a4:5c:71:3d:
2a:48:5b:7a:5f:87:28:2d:1f:aa:00:47:f1:77:00:10:89:8f:
1e:88:0a:c4:5a:d4:32:08:6b:98:f8:f6:14:0c:12:24:43:bf:
9f:92:f1:d4:23:1b:c5:cf:ba:02:c0:3f:56:44:e8:99:07:28:
5d:11:b1:b0:b7:da:a6:ce:96:ee:22:2d:0e:20:1e:c3:d7:f0:
d0:d1:b8:02:e9:6b:47:03:09:9d:83:be:dc:77:14:9f:24:fd:
76:19:51:7a:dd:b6:cf:3a:c1:d5:f6:64:0d:bc:9e:f6:54:a4:
c3:d6:99:30:bd:2f:74:2d:82:d5:cd:24:86:22:71:28:f0:ee:
b9:52:22:55:a9:c2:e2:60:36:88:f1:75:87:3d:66:4e:e1:53:
bb:e8:2f:e4:2d:b3:27:82:d9:3d:1c:b2:ed:23:a3:06:a6:e4:
dc:ab:d3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:06:49 2026 by rpki-client