Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft
File: lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft (raw, json)
Hash identifier: VT1av6hxI6z0aRIyvyS5SzUSu6IqPQZUnX1M2eDweXo=
Subject key identifier: 4D:5C:3F:2C:0C:4A:46:0C:1B:1B:D1:26:1B:AC:71:24:33:E4:21:01
Authority key identifier: 96:17:27:13:0C:25:99:90:B0:05:EA:94:33:B5:7E:07:92:F1:AF:15
Certificate issuer: /CN=961727130c259990b005ea9433b57e0792f1af15
Certificate serial: 01A0F568A81B5AF7A27E9B7FB47F6741996E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhcnEwwlmZCwBeqUM7V-B5LxrxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft
Manifest number: 0214
Signing time: Thu 01 Oct 2026 03:01:11 +0000
Manifest this update: Thu 01 Oct 2026 03:01:11 +0000
Manifest next update: Fri 02 Oct 2026 03:01:11 +0000
Files and hashes: 1: IBxQMw202wI9H-2El0dEcabarmQ.roa (hash: nV5yVbote6ZsQPTplfUETazD8sVRzYP39kvT+GSB85A=)
2: lhcnEwwlmZCwBeqUM7V-B5LxrxU.crl (hash: w6LSME4tNq0yy1rvfixeEoAJkS2pgN2V7mIrlEz/H1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhcnEwwlmZCwBeqUM7V-B5LxrxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:68:a8:1b:5a:f7:a2:7e:9b:7f:b4:7f:67:41:99:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961727130c259990b005ea9433b57e0792f1af15
Validity
Not Before: Oct 1 03:01:11 2026 GMT
Not After : Oct 2 03:01:11 2026 GMT
Subject: CN=4d5c3f2c0c4a460c1b1bd1261bac712433e42101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:be:2b:8c:d4:18:ed:b7:88:2c:38:d1:98:b0:
bd:a1:bc:ac:32:1f:9f:39:82:04:c7:8a:23:36:00:
58:33:7c:b9:34:87:9d:24:92:ca:18:cc:b5:92:1e:
63:17:d1:20:7f:d9:e2:d5:63:88:48:65:a7:9d:4a:
78:5b:e0:75:32:5f:01:dc:44:c0:36:d6:66:ff:7b:
2e:07:78:c3:78:2e:7c:59:96:50:b0:e7:0f:f3:cf:
94:60:01:85:e9:1d:30:c9:9a:7c:fd:bb:89:fe:18:
a8:59:76:89:0c:89:d1:48:17:80:fd:45:56:4d:f1:
27:3b:97:da:37:e4:48:c8:45:98:8d:05:44:56:a3:
cf:c3:21:4b:68:c6:3d:17:be:f2:a0:aa:64:bd:b7:
01:00:72:da:b9:03:60:84:cc:d7:98:45:0d:42:f2:
99:87:31:e6:41:aa:47:fd:03:0b:cd:49:c7:a9:80:
23:53:03:00:f8:12:c2:51:b6:a1:3f:b5:c4:6b:c6:
aa:ec:e7:b7:c2:97:a7:dd:78:9c:f5:71:d9:bf:c6:
74:9e:58:95:7e:09:a5:30:d3:81:5c:61:5b:a2:33:
54:5a:d6:d9:a8:b6:ec:87:14:ea:9d:c5:d1:74:a3:
5e:7e:ff:a4:28:40:f5:7d:e1:4a:44:95:6f:76:cb:
75:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5C:3F:2C:0C:4A:46:0C:1B:1B:D1:26:1B:AC:71:24:33:E4:21:01
X509v3 Authority Key Identifier:
keyid:96:17:27:13:0C:25:99:90:B0:05:EA:94:33:B5:7E:07:92:F1:AF:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhcnEwwlmZCwBeqUM7V-B5LxrxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:92:6a:6e:6d:b8:1b:08:4d:00:36:9b:44:4a:b4:fc:c3:95:
26:4d:96:4d:4b:34:34:08:31:9a:19:29:77:e7:3f:d9:80:fd:
52:7c:fa:8f:5e:24:67:23:71:b0:58:97:0b:da:f4:27:02:7f:
4c:1b:aa:d7:f0:ff:ee:b9:fe:90:01:47:39:38:27:01:b3:bd:
4d:d0:90:57:ae:a7:20:1c:8d:47:e1:9a:9a:db:02:0b:80:fe:
00:06:38:09:e0:64:a0:a5:55:0d:bf:5f:55:76:c1:c0:ce:46:
b9:60:a8:01:6a:ca:0a:bb:97:70:5b:bd:09:da:4f:69:7a:2c:
dc:a2:33:74:f8:6c:b8:a9:ec:6c:90:fc:6e:9c:3a:4e:27:b2:
b2:de:be:3e:6d:ac:39:91:22:f6:ec:23:71:61:1f:b1:34:0f:
73:a6:0b:8c:c6:0c:52:75:40:1f:f3:26:52:a3:89:de:d5:7e:
5f:5f:de:d6:cf:76:2b:cd:bd:2e:da:93:ad:d7:05:d2:02:80:
b1:ab:1c:00:83:20:34:ff:26:c0:ea:20:45:76:b4:36:22:23:
5a:7f:a0:ce:25:2d:03:06:6e:7a:2a:c4:0c:d2:05:b2:0f:73:
58:95:2e:8b:fa:d4:de:fc:47:9c:3f:b3:51:a9:a4:12:34:88:
54:a7:61:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 06:11:51 2026 by rpki-client