Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft
File: lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft (raw, json)
Hash identifier: HDvbrMoyToyKrvrwkFNor3osNajRmLLhP7RGdifncZg=
Subject key identifier: 57:20:67:A3:84:31:85:0F:DF:E1:3B:3D:89:56:36:80:EA:CA:1A:F7
Authority key identifier: 96:17:27:13:0C:25:99:90:B0:05:EA:94:33:B5:7E:07:92:F1:AF:15
Certificate issuer: /CN=961727130c259990b005ea9433b57e0792f1af15
Certificate serial: 019D9A074D1DFDA1DB64DA138C993F533930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhcnEwwlmZCwBeqUM7V-B5LxrxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft
Manifest number: 57
Signing time: Fri 17 Apr 2026 06:01:02 +0000
Manifest this update: Fri 17 Apr 2026 06:01:02 +0000
Manifest next update: Sat 18 Apr 2026 06:01:02 +0000
Files and hashes: 1: IBxQMw202wI9H-2El0dEcabarmQ.roa (hash: nV5yVbote6ZsQPTplfUETazD8sVRzYP39kvT+GSB85A=)
2: lhcnEwwlmZCwBeqUM7V-B5LxrxU.crl (hash: 18PeIwOP10CdQGPoa9dLy3DmJVwXeZuxLOlQqoE18+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhcnEwwlmZCwBeqUM7V-B5LxrxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:4d:1d:fd:a1:db:64:da:13:8c:99:3f:53:39:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961727130c259990b005ea9433b57e0792f1af15
Validity
Not Before: Apr 17 06:01:02 2026 GMT
Not After : Apr 18 06:01:02 2026 GMT
Subject: CN=572067a38431850fdfe13b3d89563680eaca1af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:3a:f8:14:4d:a2:09:3f:ce:86:4b:80:ae:
37:62:e7:12:41:fb:c3:f4:6b:11:f0:dd:42:ce:c7:
10:77:cb:fc:08:1c:fa:44:d9:af:f4:b1:df:7e:c7:
52:5b:cf:78:07:17:46:4e:7e:e8:5e:0e:2e:0f:9b:
fb:7e:aa:a0:b7:1f:6f:14:dc:80:63:f4:f9:d6:4d:
30:b5:07:da:f5:2f:c3:f2:0b:61:ca:ec:20:87:45:
2f:d7:5e:70:77:ae:8e:6d:b8:7d:cb:7a:47:71:e1:
ec:41:e2:fd:e2:69:7d:b6:d4:dc:38:7e:9f:bf:a5:
dd:67:58:aa:c7:2d:6a:47:91:a7:a8:f6:9d:02:af:
82:e6:c3:f8:ac:dd:35:ed:90:d8:d4:df:6a:00:80:
24:fe:2c:50:76:e6:9d:b6:78:59:66:0a:5a:1e:54:
c4:99:a3:53:43:e3:ca:0b:35:8b:dd:e0:64:80:32:
e9:fb:09:f1:4e:eb:08:6d:8e:a6:aa:6e:fa:59:59:
f5:7f:41:95:e9:92:9a:bb:fa:67:4b:96:09:e0:f8:
ef:79:9d:d2:55:c8:c4:a5:cc:8f:a3:ed:35:5e:3b:
d8:9b:f6:80:2d:33:4f:0a:1c:56:b7:ab:54:85:36:
eb:59:98:62:ea:70:8c:f3:92:b3:70:56:65:ab:a6:
01:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:20:67:A3:84:31:85:0F:DF:E1:3B:3D:89:56:36:80:EA:CA:1A:F7
X509v3 Authority Key Identifier:
keyid:96:17:27:13:0C:25:99:90:B0:05:EA:94:33:B5:7E:07:92:F1:AF:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhcnEwwlmZCwBeqUM7V-B5LxrxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58df00-9ddb-4fd5-b65c-6cfdc2877518/1/lhcnEwwlmZCwBeqUM7V-B5LxrxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7c:50:53:76:5f:c6:c8:2d:db:ca:b6:87:63:4e:47:2c:34:
8e:b2:64:7b:ea:0b:f9:e1:bf:69:85:4e:f2:6e:84:92:c8:65:
7a:3c:ec:d4:a1:74:5f:9f:fb:ff:17:14:d4:fc:e0:58:39:65:
04:9f:32:74:3e:1b:64:ee:b1:2b:be:52:39:c2:e9:99:de:73:
c1:59:f9:8f:29:e5:a3:5a:60:ef:9c:70:04:5b:6c:3b:9f:10:
20:1d:83:10:4e:36:23:f6:19:23:df:2d:b3:5e:71:4b:d6:89:
9a:43:6f:1e:f3:32:84:b2:05:6e:27:e3:56:da:e7:50:22:bf:
9d:49:11:91:e3:f4:26:7d:20:bb:5d:2a:0f:65:40:8f:2c:08:
1f:c7:0b:05:36:8d:71:0c:3b:96:c8:c6:82:f9:45:e5:a0:49:
8d:aa:27:7d:75:b9:36:4f:8c:b4:3b:e3:79:b8:6d:e1:99:8c:
6d:65:c2:84:dc:6b:d1:3f:1f:cf:d2:a3:73:d2:db:e6:ba:14:
9a:cb:28:4b:6a:29:9c:bc:f0:81:c7:89:da:76:a4:7d:3d:ca:
c1:0f:74:cf:39:41:e1:1e:40:97:0f:c5:00:90:4f:18:7a:65:
e5:7a:b1:25:63:11:b5:40:da:4a:f2:83:d6:9f:77:cc:32:1c:
5d:e3:66:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:35:18 2026 by rpki-client