Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
File: LHXzXSVsxKW4gxm7fku7oynkk0E.mft (raw, json)
Hash identifier: Dkm1tIh5rSSCkL6/bkVvGcmjPeoSiuXEhCGoQHixiOg=
Subject key identifier: 6F:01:0C:BE:34:77:09:2D:44:33:5F:24:87:05:3D:BA:22:C2:2D:B7
Authority key identifier: 2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
Certificate issuer: /CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Certificate serial: 019EC2C996CA30376854162129D022CEBD7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
Manifest number: 1172
Signing time: Sat 13 Jun 2026 21:00:51 +0000
Manifest this update: Sat 13 Jun 2026 21:00:51 +0000
Manifest next update: Sun 14 Jun 2026 21:00:51 +0000
Files and hashes: 1: 1a0Y-XPntLJBTaP7Z1JCmBOeYnc.roa (hash: PDXJOAnSiEAeJBJEKNLP3n4C9TS71R3MwFilb6PORGw=)
2: LHXzXSVsxKW4gxm7fku7oynkk0E.crl (hash: Wl2pbu/ipH6WCOn3maLwWEHDW0w5socfp4RMwZnO5/g=)
3: ijFoRhXfDlfrNpWNyFmogIXNNoA.roa (hash: adP2IDTZNzyeUMfynFkS2hIcBFbJGISzpZDlTGKl9HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:96:ca:30:37:68:54:16:21:29:d0:22:ce:bd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Validity
Not Before: Jun 13 21:00:51 2026 GMT
Not After : Jun 14 21:00:51 2026 GMT
Subject: CN=6f010cbe3477092d44335f2487053dba22c22db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:31:de:0f:0f:0c:7d:82:bd:35:e1:55:3b:f9:
df:f6:5d:d3:b4:21:39:3e:96:0f:7b:3f:3b:18:3a:
93:f7:a7:91:ec:1f:6e:6e:4a:a0:c8:1f:0a:55:41:
92:ce:b8:b1:09:87:c8:f0:9b:00:8a:01:14:f7:ee:
13:04:13:4d:3c:6e:e9:11:a0:29:07:de:a7:0e:bd:
e4:c3:76:64:a4:e7:b1:17:10:ec:43:ca:19:50:c3:
78:1b:1c:84:e6:c9:d1:37:c9:a6:95:88:d0:54:b5:
1d:9e:f8:30:c2:c2:4e:22:69:aa:4c:c0:07:ea:ca:
55:c1:af:f8:0f:ed:f1:98:44:bc:d7:87:88:e7:54:
63:3b:3d:bb:82:e7:e9:18:db:86:5f:1e:c4:46:a9:
a3:cf:81:fc:d6:96:c0:e1:d6:b1:97:e3:98:f3:74:
c7:c0:4f:e0:90:5c:43:dc:f8:93:a9:55:61:ab:76:
16:82:57:61:4e:1f:ea:f5:67:d0:ad:06:dd:f7:81:
35:9c:73:4c:4f:55:ad:3a:ab:53:8f:59:92:70:08:
f1:2e:71:db:9e:a0:8b:4b:6d:91:03:22:82:76:73:
e8:b0:fa:31:0c:6c:24:79:9c:67:b6:5a:d6:a1:4b:
2b:b2:86:b8:8c:02:30:a0:35:61:6d:17:14:80:d2:
04:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:01:0C:BE:34:77:09:2D:44:33:5F:24:87:05:3D:BA:22:C2:2D:B7
X509v3 Authority Key Identifier:
keyid:2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c8:e0:e2:ad:e8:9c:54:df:cf:56:05:12:c6:55:7b:54:e8:
b6:36:68:12:3e:fc:2e:d7:b9:55:57:25:fd:39:d9:d9:a7:4c:
44:44:32:f9:c1:72:0d:48:5c:fc:bb:79:65:99:1f:ae:e0:de:
4f:b7:2c:03:ba:87:0f:be:46:39:59:ee:90:fd:73:51:f1:14:
14:11:33:32:f1:32:52:d1:20:6f:cb:52:28:cd:19:9b:cd:77:
0f:f8:7d:60:d9:26:b8:95:7d:6d:7a:63:0e:10:09:19:c8:0d:
9e:8a:b0:11:99:2c:a8:9e:f0:9d:dd:e3:64:b7:e4:2b:5b:d8:
b5:82:da:6d:e9:13:fc:7a:c0:d6:70:f0:50:b5:7c:b4:1e:b4:
3a:95:fc:6b:7a:30:20:ff:56:3a:b2:dd:93:48:4b:5d:7d:2a:
dc:f2:de:50:1c:19:8a:53:3b:98:2f:30:ac:66:08:49:38:15:
fa:7e:6f:63:c7:06:c8:be:82:89:1e:1d:2e:04:b2:08:25:75:
8c:51:e4:af:24:7f:59:7e:4e:47:e7:92:79:9f:58:92:50:6a:
f9:79:99:7e:f8:b8:b8:74:a9:d2:29:5d:e1:38:1c:16:1d:30:
07:d2:c3:d0:66:6d:33:8e:6f:30:2f:7d:32:39:4f:d6:bc:75:
44:d8:76:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:25:35 2026 by rpki-client