Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
File: LPHkHOfCQk-d-I65hGTJsIJr6cE.mft (raw, json)
Hash identifier: 4iq4XfgzaD7r0tIjNagc7dEC/dny0MYrXqZqVsi0rck=
Subject key identifier: F5:C8:D1:79:6D:CB:CF:4A:FB:F1:54:6F:F2:A8:4C:A2:73:4C:33:8E
Authority key identifier: 2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1
Certificate issuer: /CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1
Certificate serial: 019D99629EFB99E62DE559ED48C5CA5F8076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
Manifest number: 1253
Signing time: Fri 17 Apr 2026 03:01:10 +0000
Manifest this update: Fri 17 Apr 2026 03:01:10 +0000
Manifest next update: Sat 18 Apr 2026 03:01:10 +0000
Files and hashes: 1: LPHkHOfCQk-d-I65hGTJsIJr6cE.crl (hash: ICFHZ8jHnjs+CqMrEGNZT2gFzZm5CgKr1Vq5gKgArCQ=)
2: fw1SDYSXE9cgRLT_kxEv40Y1xOA.roa (hash: 4PBJSUI9OV3LsVylzkdL7XQDDeBXfBAJ+sgkJ0lBBeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:9e:fb:99:e6:2d:e5:59:ed:48:c5:ca:5f:80:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1
Validity
Not Before: Apr 17 03:01:10 2026 GMT
Not After : Apr 18 03:01:10 2026 GMT
Subject: CN=f5c8d1796dcbcf4afbf1546ff2a84ca2734c338e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:a6:24:8a:3f:84:98:76:73:fd:d3:81:e5:
47:92:17:59:ae:ad:48:07:c3:aa:75:10:22:20:3f:
c3:77:6c:03:63:b7:07:07:e4:4d:bd:14:fc:f0:46:
0c:4c:85:32:65:fa:19:68:e7:07:8e:57:f1:2c:96:
dc:c9:81:90:e4:32:1a:a9:f2:fc:3c:af:0f:57:68:
f0:77:6e:81:34:07:55:89:18:6e:b2:4c:3b:a3:1d:
d9:95:b3:7c:ac:3d:5b:9d:59:0f:d9:ba:6a:6b:ba:
4d:2c:56:2a:0b:aa:35:db:99:c8:d6:78:74:61:56:
e2:3f:f0:b5:ca:03:1f:5c:c1:26:49:6f:1e:1a:74:
9f:b7:79:16:e0:76:12:9f:b3:ce:b2:01:a5:85:89:
34:7e:34:65:40:ab:a3:a2:44:e5:91:e0:4b:ea:c4:
cd:25:f4:64:19:d5:b3:2a:07:71:06:6d:b6:d7:49:
ca:50:63:02:ad:74:72:a0:01:45:8e:1d:f7:e0:fc:
dc:45:07:07:75:22:7f:83:67:48:7d:c0:a8:96:c6:
19:f6:cb:06:70:54:83:05:f8:62:76:2b:31:5a:54:
87:d7:2f:97:7a:bb:e9:e0:ae:02:f9:9c:43:97:b3:
0b:18:d8:7c:62:bd:11:ea:14:2d:48:29:68:01:fa:
64:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C8:D1:79:6D:CB:CF:4A:FB:F1:54:6F:F2:A8:4C:A2:73:4C:33:8E
X509v3 Authority Key Identifier:
keyid:2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3f:f2:ef:42:3a:d3:74:7b:4e:d2:ce:0a:6d:66:ba:7b:80:
46:a9:cf:f9:80:ec:a5:ee:1b:0f:d8:4b:51:a9:05:f7:23:54:
f5:0f:b9:1c:63:b0:62:f3:b0:43:da:9f:87:89:84:05:40:8f:
97:d7:58:fa:44:5e:c0:f6:b8:fa:8d:34:cd:2c:a5:c0:6e:c9:
1a:41:ed:fb:d4:46:d0:89:0c:25:10:68:90:0a:89:59:71:e8:
00:7a:8f:2b:1b:9b:7d:a5:15:ad:48:36:30:3f:1d:63:b0:19:
0d:65:f4:8d:81:93:d5:d4:d7:88:37:4d:a0:5d:50:c3:12:15:
bf:47:5d:ff:e6:36:52:b3:68:4b:24:d5:37:84:2e:ac:88:06:
f5:15:ea:c8:72:ee:e3:e5:41:90:83:c1:90:4c:d2:80:a0:37:
cb:b2:0e:5f:e8:6d:1a:9c:0a:03:57:2e:69:b8:fd:b8:2f:5e:
0e:d2:60:91:63:1f:c0:65:80:0d:ba:28:d4:af:2d:a2:07:3b:
c4:03:fc:fe:4e:10:6e:36:de:fd:f0:1d:26:79:08:64:d9:cd:
e2:2c:77:62:b3:28:bc:df:ee:ad:a6:38:a4:58:07:49:9b:8e:
e4:6c:91:1d:e7:bc:74:dc:c7:bf:43:6a:1b:8c:5d:9c:21:86:
36:53:5a:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYp77meYt5VntSMXKX4B2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZjFlNDFjZTdjMjQyNGY5ZGY4OGViOTg0NjRjOWIwODI2
YmU5YzEwHhcNMjYwNDE3MDMwMTEwWhcNMjYwNDE4MDMwMTEwWjAzMTEwLwYDVQQD
EyhmNWM4ZDE3OTZkY2JjZjRhZmJmMTU0NmZmMmE4NGNhMjczNGMzMzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzSmJIo/hJh2c/3TgeVHkhdZrq1I
B8OqdRAiID/Dd2wDY7cHB+RNvRT88EYMTIUyZfoZaOcHjlfxLJbcyYGQ5DIaqfL8
PK8PV2jwd26BNAdViRhuskw7ox3ZlbN8rD1bnVkP2bpqa7pNLFYqC6o125nI1nh0
YVbiP/C1ygMfXMEmSW8eGnSft3kW4HYSn7POsgGlhYk0fjRlQKujokTlkeBL6sTN
JfRkGdWzKgdxBm2210nKUGMCrXRyoAFFjh334PzcRQcHdSJ/g2dIfcColsYZ9ssG
cFSDBfhidisxWlSH1y+Xervp4K4C+ZxDl7MLGNh8Yr0R6hQtSCloAfpkZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXI0Xlty89K+/FUb/KoTKJzTDOOMB8GA1UdIwQY
MBaAFCzx5BznwkJPnfiOuYRkybCCa+nBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFBIa0hPZkNRay1kLUk2NWhHVEpzSUpyNmNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9lZWIwYzAtOTRmNS00NDFhLThkZDkt
OTdiODljNDdkNTBhLzEvTFBIa0hPZkNRay1kLUk2NWhHVEpzSUpyNmNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9lZWIwYzAtOTRmNS00NDFhLThkZDktOTdiODljNDdkNTBh
LzEvTFBIa0hPZkNRay1kLUk2NWhHVEpzSUpyNmNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfT/y70I6
03R7TtLOCm1munuARqnP+YDspe4bD9hLUakF9yNU9Q+5HGOwYvOwQ9qfh4mEBUCP
l9dY+kRewPa4+o00zSylwG7JGkHt+9RG0IkMJRBokAqJWXHoAHqPKxubfaUVrUg2
MD8dY7AZDWX0jYGT1dTXiDdNoF1QwxIVv0dd/+Y2UrNoSyTVN4QurIgG9RXqyHLu
4+VBkIPBkEzSgKA3y7IOX+htGpwKA1cuabj9uC9eDtJgkWMfwGWADboo1K8togc7
xAP8/k4Qbjbe/fAdJnkIZNnN4ix3YrMovN/uraY4pFgHSZuO5GyRHee8dNzHv0Nq
G4xdnCGGNlNahA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:03 2026 by rpki-client