Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
File: LHXzXSVsxKW4gxm7fku7oynkk0E.mft (raw, json)
Hash identifier: vleRsFWyjHBWnVBFx2MAYgoBxuf6k4wxXxb0QiySNU8=
Subject key identifier: 34:AB:F3:03:D4:1B:EA:D7:35:54:5E:CB:E6:29:28:F8:85:20:1F:F3
Authority key identifier: 2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
Certificate issuer: /CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Certificate serial: 019CADC7B6F7956E5B953304141DA03D6FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
Manifest number: 105E
Signing time: Mon 02 Mar 2026 09:01:12 +0000
Manifest this update: Mon 02 Mar 2026 09:01:12 +0000
Manifest next update: Tue 03 Mar 2026 09:01:12 +0000
Files and hashes: 1: 1a0Y-XPntLJBTaP7Z1JCmBOeYnc.roa (hash: PDXJOAnSiEAeJBJEKNLP3n4C9TS71R3MwFilb6PORGw=)
2: LHXzXSVsxKW4gxm7fku7oynkk0E.crl (hash: 4V/nutIhwPxrOVro/EJ/zpykok7QneCUFcQmfRmdkgo=)
3: ijFoRhXfDlfrNpWNyFmogIXNNoA.roa (hash: adP2IDTZNzyeUMfynFkS2hIcBFbJGISzpZDlTGKl9HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:b6:f7:95:6e:5b:95:33:04:14:1d:a0:3d:6f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Validity
Not Before: Mar 2 09:01:12 2026 GMT
Not After : Mar 3 09:01:12 2026 GMT
Subject: CN=34abf303d41bead735545ecbe62928f885201ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:57:48:8e:2f:be:22:22:e2:35:42:9d:ef:27:
54:e3:b7:a0:e7:d1:6d:58:f6:ed:b8:d5:9b:3c:4a:
3b:c9:94:6f:87:a8:b7:d1:12:11:4b:c6:6f:9c:fe:
c0:71:90:36:1d:32:f8:19:00:07:d3:8e:23:56:34:
51:2f:6a:de:2d:a5:a4:b3:2d:7a:36:93:7d:31:a3:
b0:e9:10:55:67:8c:4f:e8:70:18:8c:33:07:23:14:
6c:2b:6c:be:5e:0b:90:91:06:56:c9:27:22:46:e6:
f0:21:43:54:b3:38:69:fd:b7:4d:9f:b3:cb:11:30:
bd:2e:ed:c8:55:b8:80:2d:ba:4b:d9:a5:c3:e7:1d:
5b:cd:7a:69:6c:d9:56:27:8d:fc:70:92:4e:2e:12:
1e:ab:0a:28:d2:38:69:c5:cf:e9:1b:13:c5:1b:20:
4a:93:a4:85:e1:9e:07:8e:47:61:51:fa:3a:83:c0:
98:bc:ea:08:12:01:77:83:83:d7:1f:5d:25:a0:ac:
06:de:6d:58:5b:cf:cb:6e:61:09:5c:01:3b:b2:0b:
09:f4:f8:bc:cc:8e:0e:64:58:fa:fb:d7:4a:bc:2f:
91:ef:e4:79:52:31:61:9a:1c:f7:90:4c:de:08:a0:
a3:9d:04:8a:1a:8a:6d:1d:65:6b:74:0d:d6:22:e1:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AB:F3:03:D4:1B:EA:D7:35:54:5E:CB:E6:29:28:F8:85:20:1F:F3
X509v3 Authority Key Identifier:
keyid:2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d2:f3:c4:35:69:60:43:30:66:af:6d:a6:e6:09:2e:74:00:
4e:3a:1b:0e:a2:ea:62:ad:c3:2c:c1:6d:68:ad:0d:03:37:51:
b5:5e:dc:a6:dd:30:47:2d:75:96:eb:c1:49:f0:49:0f:93:3e:
07:e0:85:7d:51:0a:d3:f9:56:f7:a8:f8:26:53:4f:6f:0c:e7:
d1:60:ed:71:e1:b2:fc:37:75:e5:eb:ce:70:70:8e:47:53:a1:
ef:02:1e:2b:ff:43:bc:19:fe:03:f8:7f:f3:0d:a9:a1:79:b3:
82:46:c6:92:e1:b8:25:dd:b9:27:59:2c:6d:68:bc:fd:7a:4b:
83:c8:9a:15:78:b1:a9:9f:59:e2:41:d8:f3:86:81:97:fe:5f:
35:db:55:c4:51:63:71:31:49:b8:9e:8d:e2:4d:a7:9a:db:46:
c5:24:c4:fb:c9:0b:3e:56:d2:cf:10:cc:36:19:99:89:13:1d:
75:a8:84:06:44:e7:80:c6:ed:28:e7:c8:05:34:46:3b:5c:6c:
4c:75:cf:8d:f3:89:5d:99:80:e9:95:14:d8:5d:0f:be:14:14:
7e:b8:be:56:c8:3b:d7:87:6e:dd:86:1e:38:df:6a:c1:03:40:
72:94:db:10:d5:8b:b0:9a:09:38:1c:81:59:05:1a:60:b7:80:
77:ad:9c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:20:04 2026 by rpki-client