Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
File: LHXzXSVsxKW4gxm7fku7oynkk0E.mft (raw, json)
Hash identifier: oOmkVdJFn7+nyBYJ+jqAshXfQcFua5AJY9sDgXbuLxc=
Subject key identifier: 49:2B:0E:02:EA:17:BF:A6:9C:72:FA:36:49:BF:CD:C9:6B:11:C9:69
Authority key identifier: 2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
Certificate issuer: /CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Certificate serial: 019D9B5135F84DA290A2749F76D9B66F0A69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
Manifest number: 10D9
Signing time: Fri 17 Apr 2026 12:01:23 +0000
Manifest this update: Fri 17 Apr 2026 12:01:23 +0000
Manifest next update: Sat 18 Apr 2026 12:01:23 +0000
Files and hashes: 1: 1a0Y-XPntLJBTaP7Z1JCmBOeYnc.roa (hash: PDXJOAnSiEAeJBJEKNLP3n4C9TS71R3MwFilb6PORGw=)
2: LHXzXSVsxKW4gxm7fku7oynkk0E.crl (hash: Gkomrv2EwTeS15K4dd4jjJFTKdf93wniPZawEInesE8=)
3: ijFoRhXfDlfrNpWNyFmogIXNNoA.roa (hash: adP2IDTZNzyeUMfynFkS2hIcBFbJGISzpZDlTGKl9HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:35:f8:4d:a2:90:a2:74:9f:76:d9:b6:6f:0a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Validity
Not Before: Apr 17 12:01:23 2026 GMT
Not After : Apr 18 12:01:23 2026 GMT
Subject: CN=492b0e02ea17bfa69c72fa3649bfcdc96b11c969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b5:de:0b:96:49:bb:dd:31:83:dc:8b:c4:6b:
d4:9f:26:ae:d0:e3:ed:25:e9:28:54:4b:9f:c2:4c:
7c:ef:58:c1:eb:cf:7c:b6:ae:d2:aa:7e:74:cf:81:
a2:aa:c8:72:9b:de:72:b2:e4:1f:17:4d:cd:b1:ca:
9e:80:67:52:69:b7:82:49:0c:c7:85:31:e9:5f:9b:
dc:bb:09:9d:31:4e:ba:33:30:44:7f:24:05:e8:6e:
6c:34:67:56:e2:03:af:8f:a7:33:b7:28:e5:93:98:
e1:bf:7b:e8:5d:4f:af:8a:8c:1c:94:9f:30:ee:76:
2a:d0:57:6d:55:22:b3:f5:f0:68:58:8a:11:c5:c9:
23:a8:3c:b6:21:8a:43:96:e0:78:20:b8:72:4e:0f:
74:fe:bd:76:f2:bc:fe:9a:c1:7f:2c:b6:03:b1:81:
94:cb:45:e4:e6:a4:86:9a:98:35:78:fd:7a:b6:31:
83:fc:a9:a8:f1:df:f4:d2:9a:15:c3:62:9d:3b:fb:
1f:6b:b1:de:32:66:f2:19:5e:7b:79:c3:70:06:56:
f3:51:e5:39:91:eb:0c:b7:f8:c4:e8:03:9a:65:6f:
ec:dc:8f:1a:64:92:b3:c7:f1:31:b7:ad:c3:54:a9:
e2:ec:b9:59:47:ed:29:35:f9:26:4b:40:78:32:68:
b7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2B:0E:02:EA:17:BF:A6:9C:72:FA:36:49:BF:CD:C9:6B:11:C9:69
X509v3 Authority Key Identifier:
keyid:2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:de:b9:a3:07:83:c3:c1:21:10:af:19:fb:66:a0:03:6e:34:
63:e3:02:3d:0d:d5:2c:55:35:fc:cb:cd:c9:a3:82:46:78:ff:
de:ae:1f:09:d7:4b:9a:3a:b8:4c:69:6e:c3:bf:7b:ab:45:3a:
4f:44:77:01:ab:db:59:a7:68:46:71:46:6b:25:7c:28:34:b0:
89:42:5f:55:57:7d:ff:69:db:a3:96:f1:f7:5f:06:80:12:64:
2d:fc:50:d1:f2:a0:f5:5c:bf:96:ef:4f:b3:7c:ce:2e:7d:4a:
82:46:2e:51:2e:6a:e7:ef:16:0a:80:8b:26:3c:c2:4a:c6:30:
5d:d3:67:ae:f8:13:17:20:13:f3:0f:c5:eb:09:a3:33:cf:d8:
79:35:c5:9e:ad:53:e1:a9:b8:b5:c0:eb:73:1a:ae:f4:31:90:
3e:50:5a:fd:49:ec:fc:79:e6:35:1f:6b:00:3a:01:2b:87:3e:
5e:48:e3:c3:55:3b:3e:3a:5c:b8:41:5d:a7:6d:ef:c2:4d:15:
6c:dc:83:8e:80:4d:b5:b4:3a:44:dd:b9:af:d3:c2:f0:4b:dd:
6b:f8:c4:a2:11:84:8f:f5:cc:93:2e:8a:7b:3b:41:10:0f:37:
e1:4f:0f:85:19:73:e9:05:02:7f:06:39:2b:00:48:04:2d:b5:
88:32:6e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:27:37 2026 by rpki-client