Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
File: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft (raw, json)
Hash identifier: iUMJje7Z0EVG4O1gKK64xVoGNW45TJ1dAQ8YVJjSeiA=
Subject key identifier: C9:E1:FA:B6:27:55:32:AC:56:64:2E:69:3D:7D:05:08:CD:00:F6:88
Authority key identifier: 2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
Certificate issuer: /CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Certificate serial: 019D984F8C03AF67BC12AC24462890E94AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 22:00:43 +0000
Manifest this update: Thu 16 Apr 2026 22:00:43 +0000
Manifest next update: Fri 17 Apr 2026 22:00:43 +0000
Files and hashes: 1: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl (hash: ckSatsHCmpPuDZ5M17OJTLTsqydAlUbk72tLSvLxlSk=)
2: oPn9BEZzljIPQPQ_eYJw4GgcX3c.roa (hash: MFu3RUWuCmBoIzCATrSbU+RcXXRsfsL7FD0RBKZyeXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:8c:03:af:67:bc:12:ac:24:46:28:90:e9:4a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Validity
Not Before: Apr 16 22:00:43 2026 GMT
Not After : Apr 17 22:00:43 2026 GMT
Subject: CN=c9e1fab6275532ac56642e693d7d0508cd00f688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:38:fe:d6:e5:6f:2f:ae:fb:05:59:b3:ef:a3:
67:34:bc:7d:80:cd:14:56:5b:d7:b7:72:36:73:41:
d0:f0:ad:76:a7:8e:56:55:2e:03:09:18:5e:c8:4f:
d9:8d:f1:24:b9:66:38:95:47:4b:73:72:0e:31:f9:
c6:cc:9d:7b:d7:bf:eb:20:42:9e:86:ab:61:24:2f:
20:fc:af:2f:2b:6f:6d:1d:1c:94:53:19:2a:d4:2c:
51:3c:f3:70:e9:31:76:6f:c5:97:f8:97:56:1d:22:
36:6d:d1:da:0d:0e:1f:a7:9f:57:d6:c0:40:55:48:
a4:a4:72:e9:b1:5d:7d:39:a9:a9:1a:b5:62:d6:e0:
b0:a7:36:d6:b9:04:de:82:da:ea:31:e8:c5:9d:7b:
7e:bb:a2:79:35:97:8c:5f:dc:37:ee:d9:be:87:4d:
cb:30:84:fb:43:fa:f8:d1:d3:90:2f:09:96:15:fa:
65:b8:0b:ec:71:df:21:7a:70:73:18:93:5b:6c:6b:
72:64:21:03:12:7a:82:2d:88:16:44:fa:2e:3a:b8:
eb:92:64:c0:99:c6:15:2e:33:bb:f8:e3:9d:05:86:
5e:14:45:36:67:c6:e7:56:55:02:2a:7a:87:cb:38:
e0:0c:38:1c:37:04:b6:8d:92:c7:02:25:ad:bc:61:
49:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E1:FA:B6:27:55:32:AC:56:64:2E:69:3D:7D:05:08:CD:00:F6:88
X509v3 Authority Key Identifier:
keyid:2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:46:e6:c7:df:1c:8b:ac:ca:eb:10:7a:65:b7:d0:9f:06:1a:
0b:92:b2:7e:d7:93:cc:20:6e:94:eb:37:25:1a:49:28:8a:8b:
f5:83:e0:9b:db:5e:b0:05:5a:ea:29:35:ce:33:86:a2:da:e8:
45:26:6c:9e:43:98:f9:b4:fb:8d:b6:4b:58:35:fe:b0:49:ba:
c5:23:01:06:bf:d2:01:10:fc:de:e3:46:51:8d:a7:91:ba:8a:
1a:2f:f4:73:71:ed:43:d1:bc:2e:42:73:58:d1:77:7c:16:1c:
82:4e:da:79:ba:93:9f:3c:51:e1:50:62:c2:30:43:ea:d3:38:
b8:51:63:56:ed:69:25:a7:88:37:5d:ee:f7:de:52:e7:64:93:
8f:22:2f:25:13:17:d4:24:8f:97:e6:c9:41:4b:96:c3:f4:c6:
26:73:bb:19:55:59:30:b0:84:89:74:e4:0c:ac:dd:dd:07:6c:
63:2a:44:a3:06:b8:5c:5a:44:7c:2b:62:b6:fd:ad:dc:7b:a0:
ea:dc:f0:23:ef:70:0f:d0:86:c5:6e:d7:51:56:bf:4f:74:19:
03:44:14:29:0b:69:30:6e:bd:da:52:ab:57:70:e7:1d:cc:e1:
83:82:c3:4f:ad:db:f6:48:a4:c6:71:e9:6d:a4:06:de:92:95:
f7:0b:a1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:15 2026 by rpki-client