Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
File: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft (raw, json)
Hash identifier: LtC9mvGsxwyoWvvJVF6DEII2iLyze9RRSm0ncNC0wjI=
Subject key identifier: 4B:61:B9:F8:7E:CA:05:E8:79:98:72:5F:A1:FF:48:D3:DC:B0:AB:5F
Authority key identifier: 2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
Certificate issuer: /CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Certificate serial: 019CAAC60D31AB190642A5BB6E88FD57BAA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:00:32 +0000
Manifest this update: Sun 01 Mar 2026 19:00:32 +0000
Manifest next update: Mon 02 Mar 2026 19:00:32 +0000
Files and hashes: 1: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl (hash: RF+DuTlkOo5IdIGdW3q6dFZcXUXj4mUQsKDKxUxlM0g=)
2: oPn9BEZzljIPQPQ_eYJw4GgcX3c.roa (hash: MFu3RUWuCmBoIzCATrSbU+RcXXRsfsL7FD0RBKZyeXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:0d:31:ab:19:06:42:a5:bb:6e:88:fd:57:ba:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Validity
Not Before: Mar 1 19:00:32 2026 GMT
Not After : Mar 2 19:00:32 2026 GMT
Subject: CN=4b61b9f87eca05e87998725fa1ff48d3dcb0ab5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:d7:82:35:36:04:2b:e6:81:51:fe:6a:c2:
75:42:30:f6:91:80:79:5f:bc:df:cb:49:eb:0c:a1:
8b:ca:2c:a9:c8:fe:bf:16:2d:c2:09:c9:3f:04:f1:
65:f6:4f:c3:3d:2a:21:7d:c2:a2:f9:d4:6a:40:06:
b8:27:d6:d1:4e:2e:ff:0e:c9:8a:ce:73:af:d7:36:
ce:d5:8b:60:6d:07:a3:a7:89:a6:49:2f:60:80:59:
1a:23:3c:9f:cd:58:80:b6:b8:b9:27:e4:81:b8:36:
24:bc:66:78:03:ba:60:ef:de:2c:f9:24:c9:1a:82:
51:3f:d2:f9:89:69:39:ce:4d:16:f1:fe:f5:10:2c:
95:c1:c5:09:13:f6:f4:c7:e1:5e:c8:ac:09:02:0c:
c8:4a:a6:fe:54:6b:c0:20:8f:3c:a7:ae:68:b6:db:
7d:58:72:1d:37:16:aa:a3:b0:96:a8:47:7d:8e:76:
db:d2:cd:4d:16:b6:1d:db:43:ce:ef:00:b6:a3:15:
b9:9e:e0:90:44:55:36:1e:09:09:ca:43:8d:d7:90:
da:d6:5a:e2:1e:b2:86:72:89:82:6f:5e:cb:bd:b8:
e6:36:bc:bf:69:e5:3d:ff:f3:fe:69:36:b7:61:5e:
00:dc:2d:52:43:cb:c2:5a:73:16:70:c8:40:0e:d3:
6a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:61:B9:F8:7E:CA:05:E8:79:98:72:5F:A1:FF:48:D3:DC:B0:AB:5F
X509v3 Authority Key Identifier:
keyid:2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f4:00:ff:56:d0:f4:43:28:a4:3e:20:38:47:b6:24:21:55:
a9:5d:76:c4:6d:6c:34:24:b8:c5:6c:88:09:60:7d:0e:cf:3e:
b7:2d:3d:b0:10:e0:23:2a:8e:f2:9c:af:3d:dc:8b:e8:3e:c2:
82:54:51:4b:4f:9e:c8:5b:b5:9d:1e:b3:82:30:5f:3c:bf:96:
61:f3:5d:8a:0a:f3:2d:ad:0b:ac:75:0c:62:a6:40:e9:ec:b8:
7c:a9:38:e0:ad:82:bc:a2:8b:88:51:17:c5:0d:3a:6f:a4:c7:
50:4e:a2:00:41:c0:35:35:c6:6a:ba:45:b1:27:31:e0:0b:6a:
31:bb:fc:0b:02:9d:e9:e6:ca:c2:fb:e6:45:05:02:a7:f5:25:
38:68:c6:28:51:39:ed:3b:ac:33:5f:d4:1b:e5:e3:8e:f7:47:
a6:28:1a:90:b2:90:6d:11:f2:6d:b3:96:7f:d4:6b:75:52:e8:
b4:f8:d4:29:bd:7f:9f:ca:de:43:4f:86:6a:6d:2b:3d:49:c3:
59:1d:34:64:02:81:e2:e7:ee:6e:36:e1:7b:a0:90:03:f6:37:
e2:17:23:d1:65:96:88:ec:cc:40:e9:09:db:8a:06:9a:25:64:
9e:48:a9:d7:ff:84:26:14:d3:f6:ef:a9:3f:b1:b8:6b:e6:88:
23:e7:ae:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxg0xqxkGQqW7boj9V7qkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNzI3ZDA5ZmJiMTlhN2Y5ODVkNzUxYTIwMzExYzFiYWQ0
YjA3MWYwHhcNMjYwMzAxMTkwMDMyWhcNMjYwMzAyMTkwMDMyWjAzMTEwLwYDVQQD
Eyg0YjYxYjlmODdlY2EwNWU4Nzk5ODcyNWZhMWZmNDhkM2RjYjBhYjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjfXgjU2BCvmgVH+asJ1QjD2kYB5
X7zfy0nrDKGLyiypyP6/Fi3CCck/BPFl9k/DPSohfcKi+dRqQAa4J9bRTi7/DsmK
znOv1zbO1YtgbQejp4mmSS9ggFkaIzyfzViAtri5J+SBuDYkvGZ4A7pg794s+STJ
GoJRP9L5iWk5zk0W8f71ECyVwcUJE/b0x+FeyKwJAgzISqb+VGvAII88p65ottt9
WHIdNxaqo7CWqEd9jnbb0s1NFrYd20PO7wC2oxW5nuCQRFU2HgkJykON15Da1lri
HrKGcomCb17LvbjmNry/aeU9//P+aTa3YV4A3C1SQ8vCWnMWcMhADtNq5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEthufh+ygXoeZhyX6H/SNPcsKtfMB8GA1UdIwQY
MBaAFCxyfQn7sZp/mF11GiAxHButSwcfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEhKOUNmdXhtbi1ZWFhVYUlERWNHNjFMQng4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9iZjNlY2EtMTcxZi00MDFjLTliNWQt
Y2NjNGYxZTAwOTkwLzEvTEhKOUNmdXhtbi1ZWFhVYUlERWNHNjFMQng4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9iZjNlY2EtMTcxZi00MDFjLTliNWQtY2NjNGYxZTAwOTkw
LzEvTEhKOUNmdXhtbi1ZWFhVYUlERWNHNjFMQng4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/QA/1bQ
9EMopD4gOEe2JCFVqV12xG1sNCS4xWyICWB9Ds8+ty09sBDgIyqO8pyvPdyL6D7C
glRRS0+eyFu1nR6zgjBfPL+WYfNdigrzLa0LrHUMYqZA6ey4fKk44K2CvKKLiFEX
xQ06b6THUE6iAEHANTXGarpFsScx4AtqMbv8CwKd6ebKwvvmRQUCp/UlOGjGKFE5
7TusM1/UG+XjjvdHpigakLKQbRHybbOWf9RrdVLotPjUKb1/n8reQ0+Gam0rPUnD
WR00ZAKB4ufubjbhe6CQA/Y34hcj0WWWiOzMQOkJ24oGmiVknkip1/+EJhTT9u+p
P7G4a+aII+euCw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:59 2026 by rpki-client