Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
File: LPHkHOfCQk-d-I65hGTJsIJr6cE.mft (raw, json)
Hash identifier: 03Av9pShZhi200Wd256s36NQWMASvpOkoONVx6Ewo+k=
Subject key identifier: 56:C9:50:39:A5:52:51:E3:20:9E:16:1E:89:E7:21:35:33:AC:8F:C1
Authority key identifier: 2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1
Certificate issuer: /CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1
Certificate serial: 019CABD919934E37D697618BAE4BD9EB1609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
Manifest number: 11D8
Signing time: Mon 02 Mar 2026 00:00:57 +0000
Manifest this update: Mon 02 Mar 2026 00:00:57 +0000
Manifest next update: Tue 03 Mar 2026 00:00:57 +0000
Files and hashes: 1: LPHkHOfCQk-d-I65hGTJsIJr6cE.crl (hash: UgeRQ/xdV7o4ZRcJNkJm5Tc/y8tQuwYM+FQwCkJDFps=)
2: fw1SDYSXE9cgRLT_kxEv40Y1xOA.roa (hash: 4PBJSUI9OV3LsVylzkdL7XQDDeBXfBAJ+sgkJ0lBBeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:19:93:4e:37:d6:97:61:8b:ae:4b:d9:eb:16:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1
Validity
Not Before: Mar 2 00:00:57 2026 GMT
Not After : Mar 3 00:00:57 2026 GMT
Subject: CN=56c95039a55251e3209e161e89e7213533ac8fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:de:3e:f3:d5:6a:80:32:86:d0:11:48:fd:fe:
cf:48:eb:82:a8:db:32:26:a3:c5:25:1f:40:46:0b:
22:1b:89:4b:84:80:81:bd:13:a7:41:e2:dd:a8:56:
b4:c3:3f:ba:e9:aa:ed:28:14:dd:6b:e1:3e:bd:f9:
b9:1f:a2:8f:b6:e4:a5:03:89:48:7d:a5:a2:f6:2a:
ce:e4:c1:19:70:de:f1:b1:b9:b3:3a:f9:16:cd:de:
6f:13:de:26:8d:20:8e:18:61:df:46:c1:81:66:4f:
41:6f:69:f8:dd:bd:e6:9c:bd:46:24:01:96:f1:c2:
7c:02:b3:1a:8e:9c:ec:12:51:a8:a5:a7:8d:7b:6b:
cd:07:c1:94:39:f5:4d:b7:39:40:c7:61:29:24:2b:
cc:90:3c:d8:53:b5:bf:97:c9:2d:d8:bc:9d:81:d3:
11:74:fc:8a:d4:0d:14:e6:3c:7b:b5:b7:0c:53:73:
4a:92:b9:5d:35:fe:94:b9:02:48:28:6e:1e:73:8b:
4d:a6:38:4c:55:9b:9f:c9:ad:e9:b0:82:46:a3:6e:
2c:25:b7:f3:40:89:cf:c4:63:80:22:aa:2c:0b:e6:
fe:e1:3b:29:d4:03:76:ea:08:68:41:c3:54:c3:c8:
0e:e3:57:95:b8:3a:66:6b:fc:41:1b:30:b9:a5:47:
ba:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C9:50:39:A5:52:51:E3:20:9E:16:1E:89:E7:21:35:33:AC:8F:C1
X509v3 Authority Key Identifier:
keyid:2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:13:6e:32:97:d0:85:cf:b9:b2:4d:cb:24:92:89:11:ea:46:
87:2a:93:a6:84:9d:0f:a8:47:99:27:38:e3:ff:df:88:e9:61:
00:99:48:30:1a:87:b2:03:7e:3e:84:59:60:3a:6c:cc:75:f8:
47:92:62:76:d3:7d:e6:cc:d5:45:46:f5:e6:3e:eb:5b:79:e7:
70:ed:39:07:f7:4f:35:bf:1b:ed:59:a9:1d:2f:ab:9f:9f:e1:
b8:1a:d8:7c:da:c1:ba:81:fc:d4:ea:12:c0:ed:cc:75:8a:e9:
7f:e1:4a:21:6d:f3:0e:e7:3d:6e:5a:9b:ec:40:53:f9:7d:35:
c5:c5:fd:8e:80:07:d6:2a:6d:14:ed:53:1b:c1:53:e5:e2:d7:
5a:b7:ee:fa:40:72:95:9b:bd:9c:15:60:df:d1:4a:11:67:9c:
d9:ca:b0:eb:e8:f4:e1:e2:10:94:19:f3:52:e5:20:3b:72:69:
60:bb:64:b3:b7:76:58:8b:c5:a6:79:c6:cb:91:d9:e8:ff:95:
c4:3c:90:a0:e4:5b:4f:2f:f9:dc:65:ce:c4:cd:a2:1a:e3:db:
9b:54:58:3e:d0:ca:a9:99:5d:2d:1d:c6:f5:ac:48:68:f1:5c:
d8:ea:5c:bf:f8:13:e7:61:00:ba:23:e3:c0:74:d0:06:c7:ec:
6f:19:80:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:21 2026 by rpki-client