Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.mft
File: lhzPqdAsvwWWDjovkHmFnM1urW0.mft (raw, json)
Hash identifier: Qa4kKio6XFwX37NPvLTDMYt+B9dCAJjKzl11PrRfRvk=
Subject key identifier: CE:CB:65:A7:50:EC:9C:11:C8:21:91:BC:C7:C3:35:B4:16:19:06:D4
Authority key identifier: 96:1C:CF:A9:D0:2C:BF:05:96:0E:3A:2F:90:79:85:9C:CD:6E:AD:6D
Certificate issuer: /CN=961ccfa9d02cbf05960e3a2f9079859ccd6ead6d
Certificate serial: 019CADFE2049ACEB8B8B68B076B8AE917FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhzPqdAsvwWWDjovkHmFnM1urW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 10:00:38 +0000
Manifest this update: Mon 02 Mar 2026 10:00:38 +0000
Manifest next update: Tue 03 Mar 2026 10:00:38 +0000
Files and hashes: 1: lhzPqdAsvwWWDjovkHmFnM1urW0.crl (hash: ah8q3s95IW4pziUkzl38AXXXyWd8q/e39HDy2Ez3lVs=)
2: w0kB1zEMHJSO_FqxY-PIC1zhJaM.roa (hash: Jo7kfxvYvl4YezCWXB8JTsC1u0CS/mCRNmsNeTUMvRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhzPqdAsvwWWDjovkHmFnM1urW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:20:49:ac:eb:8b:8b:68:b0:76:b8:ae:91:7f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961ccfa9d02cbf05960e3a2f9079859ccd6ead6d
Validity
Not Before: Mar 2 10:00:38 2026 GMT
Not After : Mar 3 10:00:38 2026 GMT
Subject: CN=cecb65a750ec9c11c82191bcc7c335b4161906d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b8:f4:9a:5c:d4:25:93:56:3d:0f:68:74:e4:
6a:81:d3:4f:41:f7:f9:f9:ed:8c:22:2b:4a:49:8b:
92:2d:f3:37:df:f4:c1:82:6a:08:82:2e:24:82:0b:
ad:30:8c:cc:7b:a3:a0:25:0c:ff:5a:76:47:60:8e:
54:f0:0b:19:5f:5e:46:4e:dc:86:fa:6a:5d:10:ac:
cf:a0:b2:59:91:76:0c:a8:4b:07:6f:00:ee:3a:5f:
7a:d3:1b:e3:a9:8f:12:3d:56:06:58:75:c3:04:ac:
32:ff:76:62:ad:e8:08:5b:a1:6f:d1:75:bf:ba:ce:
da:26:c1:a7:ea:e6:d2:ce:5a:ed:a2:b8:37:82:70:
34:e5:04:20:de:98:e5:a8:55:1b:1d:14:15:33:ef:
2d:92:48:89:2c:bd:3d:8b:2e:51:9e:8e:f2:03:23:
df:22:ee:bb:c4:e2:4d:81:a5:e6:69:3f:b8:22:17:
bb:3d:e3:fd:4d:ca:03:12:25:a1:e4:c7:68:e8:3c:
c5:dc:9a:94:a9:46:3f:a9:64:a8:cf:da:91:8c:7b:
f1:96:e5:62:ef:51:80:78:55:b5:5d:15:54:4f:c6:
d7:49:db:8c:80:9e:5f:7f:86:f0:5a:59:60:04:f5:
d5:34:d4:59:41:fb:90:b3:ef:b3:4f:af:84:cd:88:
b8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CB:65:A7:50:EC:9C:11:C8:21:91:BC:C7:C3:35:B4:16:19:06:D4
X509v3 Authority Key Identifier:
keyid:96:1C:CF:A9:D0:2C:BF:05:96:0E:3A:2F:90:79:85:9C:CD:6E:AD:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhzPqdAsvwWWDjovkHmFnM1urW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:99:c3:6e:12:74:fe:66:0f:c4:99:11:fd:f6:cc:7d:81:e5:
b4:dd:10:ea:07:fd:60:f1:ef:c7:74:33:af:09:dd:ce:77:86:
ff:24:78:39:17:7e:d1:82:92:62:2a:c1:10:a6:8b:af:a6:86:
f9:7e:6f:c4:6d:ad:b1:36:b1:88:fb:29:7c:a7:90:b8:6f:a0:
29:0e:c1:10:43:84:ec:1a:2d:4a:ac:12:ae:3c:26:45:7d:fc:
85:79:48:14:20:8c:21:81:1d:79:e6:a0:c0:f8:7e:55:ed:c3:
79:3b:32:fa:29:6f:0c:a2:27:1b:0d:d0:4b:34:1b:95:74:2e:
d7:77:de:2d:80:ff:db:98:98:03:94:6e:17:65:c8:e4:e6:3c:
58:7e:6a:ad:63:38:f7:92:25:69:53:28:95:47:ad:57:72:82:
00:87:97:18:ea:83:b0:ec:b5:7c:31:b8:6d:f2:56:af:32:b8:
12:fb:d9:07:4d:47:73:18:2b:45:8b:f7:40:b8:92:bf:11:73:
48:4f:20:10:4b:14:02:72:dc:12:2d:ec:07:55:b1:b6:5c:20:
00:05:ab:6c:68:18:a4:97:71:3b:26:68:96:cd:45:08:ea:75:
53:ca:87:21:f4:93:42:c1:73:6e:58:93:33:a7:dc:d9:03:ca:
cc:b9:b6:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/iBJrOuLi2iwdriukX/bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MWNjZmE5ZDAyY2JmMDU5NjBlM2EyZjkwNzk4NTljY2Q2
ZWFkNmQwHhcNMjYwMzAyMTAwMDM4WhcNMjYwMzAzMTAwMDM4WjAzMTEwLwYDVQQD
EyhjZWNiNjVhNzUwZWM5YzExYzgyMTkxYmNjN2MzMzViNDE2MTkwNmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrj0mlzUJZNWPQ9odORqgdNPQff5
+e2MIitKSYuSLfM33/TBgmoIgi4kggutMIzMe6OgJQz/WnZHYI5U8AsZX15GTtyG
+mpdEKzPoLJZkXYMqEsHbwDuOl960xvjqY8SPVYGWHXDBKwy/3ZiregIW6Fv0XW/
us7aJsGn6ubSzlrtorg3gnA05QQg3pjlqFUbHRQVM+8tkkiJLL09iy5Rno7yAyPf
Iu67xOJNgaXmaT+4Ihe7PeP9TcoDEiWh5Mdo6DzF3JqUqUY/qWSoz9qRjHvxluVi
71GAeFW1XRVUT8bXSduMgJ5ff4bwWllgBPXVNNRZQfuQs++zT6+EzYi4+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7LZadQ7JwRyCGRvMfDNbQWGQbUMB8GA1UdIwQY
MBaAFJYcz6nQLL8Flg46L5B5hZzNbq1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGh6UHFkQXN2d1dXRGpvdmtIbUZuTTF1clcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81NTU3ZmMtNzY1My00MGE5LTk5YzMt
N2VhOTkwNWMzZmJkLzEvbGh6UHFkQXN2d1dXRGpvdmtIbUZuTTF1clcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi81NTU3ZmMtNzY1My00MGE5LTk5YzMtN2VhOTkwNWMzZmJk
LzEvbGh6UHFkQXN2d1dXRGpvdmtIbUZuTTF1clcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5nDbhJ0
/mYPxJkR/fbMfYHltN0Q6gf9YPHvx3QzrwndzneG/yR4ORd+0YKSYirBEKaLr6aG
+X5vxG2tsTaxiPspfKeQuG+gKQ7BEEOE7BotSqwSrjwmRX38hXlIFCCMIYEdeeag
wPh+Ve3DeTsy+ilvDKInGw3QSzQblXQu13feLYD/25iYA5RuF2XI5OY8WH5qrWM4
95IlaVMolUetV3KCAIeXGOqDsOy1fDG4bfJWrzK4EvvZB01HcxgrRYv3QLiSvxFz
SE8gEEsUAnLcEi3sB1WxtlwgAAWrbGgYpJdxOyZols1FCOp1U8qHIfSTQsFzbliT
M6fc2QPKzLm2mQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:51:18 2026 by rpki-client