Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.mft
File: lhzPqdAsvwWWDjovkHmFnM1urW0.mft (raw, json)
Hash identifier: qe2umsVORtYN5F7BXQw5NfeFT5PieUgi2KaZPYt4vrU=
Subject key identifier: D6:ED:F4:BC:58:C2:24:83:51:91:21:E3:58:A4:3A:24:D7:27:89:2B
Authority key identifier: 96:1C:CF:A9:D0:2C:BF:05:96:0E:3A:2F:90:79:85:9C:CD:6E:AD:6D
Certificate issuer: /CN=961ccfa9d02cbf05960e3a2f9079859ccd6ead6d
Certificate serial: 019D99991A85F532B636A6654646D82675F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhzPqdAsvwWWDjovkHmFnM1urW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 04:00:40 +0000
Manifest this update: Fri 17 Apr 2026 04:00:40 +0000
Manifest next update: Sat 18 Apr 2026 04:00:40 +0000
Files and hashes: 1: lhzPqdAsvwWWDjovkHmFnM1urW0.crl (hash: l/j32m97r+A1gHVmj6Iq5v8Om1N/3UCnUJwY1eHrYvw=)
2: w0kB1zEMHJSO_FqxY-PIC1zhJaM.roa (hash: Jo7kfxvYvl4YezCWXB8JTsC1u0CS/mCRNmsNeTUMvRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhzPqdAsvwWWDjovkHmFnM1urW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:1a:85:f5:32:b6:36:a6:65:46:46:d8:26:75:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961ccfa9d02cbf05960e3a2f9079859ccd6ead6d
Validity
Not Before: Apr 17 04:00:40 2026 GMT
Not After : Apr 18 04:00:40 2026 GMT
Subject: CN=d6edf4bc58c22483519121e358a43a24d727892b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:20:fe:b5:a3:d1:2c:85:92:b3:d9:89:e2:05:
35:0a:90:1f:63:17:89:3a:fe:e5:39:e6:05:ea:ce:
5f:70:1c:54:d4:67:45:37:54:d1:33:f1:23:e2:62:
13:b9:9f:db:bd:9f:84:e2:c7:03:8e:87:02:70:8e:
c4:d5:48:3c:e7:59:75:4b:78:16:84:1a:36:cd:75:
ab:66:41:f2:f8:f8:3e:53:e0:14:71:06:db:89:7f:
d3:4c:46:36:39:3e:e7:58:f0:44:a9:a1:64:55:dc:
da:63:e3:42:97:4f:88:23:b6:a5:ee:af:b4:a1:0e:
98:2c:6f:b8:25:eb:62:37:aa:60:e2:97:20:a1:d4:
9e:66:f9:2e:4f:5c:f3:c9:7c:b6:86:bf:29:5f:c2:
ac:8e:06:c1:79:c3:81:4c:b8:44:a5:10:b6:ce:1e:
55:46:4e:70:f4:4b:ae:bf:a1:6a:b7:7e:91:bd:0f:
03:c4:76:87:7d:80:5a:88:8a:cd:db:bb:73:98:b0:
40:1c:59:11:61:d4:81:e4:56:5f:89:ed:ef:cf:82:
9e:60:60:59:b2:1c:af:a8:2c:de:37:f8:ff:7b:f7:
28:99:ee:d6:df:5e:e4:d3:8c:ef:00:4f:f8:ef:97:
c1:64:14:f6:e7:81:c5:70:11:73:4e:6c:25:ae:e1:
d6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:ED:F4:BC:58:C2:24:83:51:91:21:E3:58:A4:3A:24:D7:27:89:2B
X509v3 Authority Key Identifier:
keyid:96:1C:CF:A9:D0:2C:BF:05:96:0E:3A:2F:90:79:85:9C:CD:6E:AD:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhzPqdAsvwWWDjovkHmFnM1urW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:be:e4:31:fe:39:45:92:ae:4a:a0:f3:3d:e0:62:03:8f:c5:
dd:bd:20:bf:b2:ea:93:88:80:26:33:71:e4:26:64:fe:c0:82:
9a:3e:e0:6d:dc:b1:cc:23:d5:03:33:70:2e:b8:ac:dc:85:c7:
de:8a:7a:77:d6:c7:f9:43:b4:66:6a:c7:0b:ed:0d:db:5e:42:
db:fa:45:4e:df:67:53:18:5d:7f:ca:5f:c4:26:05:40:6f:2a:
7b:72:82:4c:36:1f:72:f3:10:47:a1:3d:6b:99:7a:53:d4:0a:
b0:9f:ef:aa:9e:9c:08:00:2b:da:fd:46:b4:46:21:6b:bb:61:
6c:fa:ad:c5:5b:39:1c:d4:b7:98:b7:7c:80:00:50:ca:f6:49:
f9:ce:9b:3f:f1:8b:67:c0:c3:aa:f8:8b:f1:c8:a0:09:a1:48:
df:68:5f:71:0a:39:6a:27:f5:db:4a:4c:14:82:9f:45:75:03:
8a:70:9d:90:1b:71:16:2a:7d:65:67:5b:b0:8a:45:cb:43:9b:
36:88:72:51:98:d4:d0:11:be:67:9c:45:12:e5:90:02:41:07:
39:6c:42:e8:3a:d4:77:5c:c0:b1:e7:cd:04:c8:37:ad:f0:7d:
47:bb:f9:79:52:c8:02:dc:81:ed:2e:67:f1:08:5c:c2:86:b7:
32:48:df:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmRqF9TK2NqZlRkbYJnXxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MWNjZmE5ZDAyY2JmMDU5NjBlM2EyZjkwNzk4NTljY2Q2
ZWFkNmQwHhcNMjYwNDE3MDQwMDQwWhcNMjYwNDE4MDQwMDQwWjAzMTEwLwYDVQQD
EyhkNmVkZjRiYzU4YzIyNDgzNTE5MTIxZTM1OGE0M2EyNGQ3Mjc4OTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyD+taPRLIWSs9mJ4gU1CpAfYxeJ
Ov7lOeYF6s5fcBxU1GdFN1TRM/Ej4mITuZ/bvZ+E4scDjocCcI7E1Ug851l1S3gW
hBo2zXWrZkHy+Pg+U+AUcQbbiX/TTEY2OT7nWPBEqaFkVdzaY+NCl0+II7al7q+0
oQ6YLG+4JetiN6pg4pcgodSeZvkuT1zzyXy2hr8pX8KsjgbBecOBTLhEpRC2zh5V
Rk5w9Euuv6Fqt36RvQ8DxHaHfYBaiIrN27tzmLBAHFkRYdSB5FZfie3vz4KeYGBZ
shyvqCzeN/j/e/come7W317k04zvAE/475fBZBT254HFcBFzTmwlruHWQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbt9LxYwiSDUZEh41ikOiTXJ4krMB8GA1UdIwQY
MBaAFJYcz6nQLL8Flg46L5B5hZzNbq1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGh6UHFkQXN2d1dXRGpvdmtIbUZuTTF1clcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81NTU3ZmMtNzY1My00MGE5LTk5YzMt
N2VhOTkwNWMzZmJkLzEvbGh6UHFkQXN2d1dXRGpvdmtIbUZuTTF1clcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi81NTU3ZmMtNzY1My00MGE5LTk5YzMtN2VhOTkwNWMzZmJk
LzEvbGh6UHFkQXN2d1dXRGpvdmtIbUZuTTF1clcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnb7kMf45
RZKuSqDzPeBiA4/F3b0gv7Lqk4iAJjNx5CZk/sCCmj7gbdyxzCPVAzNwLris3IXH
3op6d9bH+UO0ZmrHC+0N215C2/pFTt9nUxhdf8pfxCYFQG8qe3KCTDYfcvMQR6E9
a5l6U9QKsJ/vqp6cCAAr2v1GtEYha7thbPqtxVs5HNS3mLd8gABQyvZJ+c6bP/GL
Z8DDqviL8cigCaFI32hfcQo5aif120pMFIKfRXUDinCdkBtxFip9ZWdbsIpFy0Ob
NohyUZjU0BG+Z5xFEuWQAkEHOWxC6DrUd1zAsefNBMg3rfB9R7v5eVLIAtyB7S5n
8Qhcwoa3MkjfEA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:57:12 2026 by rpki-client