Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
File: lLHL_0vZcPon_e_Uv2iwLWjSud0.mft (raw, json)
Hash identifier: zixsUciMHCEHk8loiF8ueeiHIRjIVygxmXQ5csPtkEM=
Subject key identifier: B5:F5:5B:C6:45:64:5E:D9:41:D1:13:B9:89:05:5D:2B:41:0E:E4:69
Authority key identifier: 94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
Certificate issuer: /CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Certificate serial: 019CACEB833E52D51CB839914D971F5DA095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
Manifest number: 1803
Signing time: Mon 02 Mar 2026 05:00:41 +0000
Manifest this update: Mon 02 Mar 2026 05:00:41 +0000
Manifest next update: Tue 03 Mar 2026 05:00:41 +0000
Files and hashes: 1: Nmcc09Xt79K0jETaPBL1LxCEW6o.roa (hash: 5YHh9vd/uVykgxuhDt7Fxzyb5DssF7KZ7qdP7IjIZZU=)
2: lLHL_0vZcPon_e_Uv2iwLWjSud0.crl (hash: qsrh0cc7IPNEDu7gNQn98NWh3yR+QtOCdD9eElm4v1U=)
3: mMaNrGQwPlqEufcbOdI_Rb_6RwQ.roa (hash: 1np7IvcHjiOYMR/ORA7UoY/R2p5vVot2cY5J1yx4uw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:83:3e:52:d5:1c:b8:39:91:4d:97:1f:5d:a0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Validity
Not Before: Mar 2 05:00:41 2026 GMT
Not After : Mar 3 05:00:41 2026 GMT
Subject: CN=b5f55bc645645ed941d113b989055d2b410ee469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:06:af:01:5e:0e:20:e9:d0:db:63:c7:58:ea:
b3:be:de:bb:0a:f4:16:59:ca:07:73:2c:5b:b1:b2:
a0:5d:21:5e:99:03:a0:a9:6f:14:db:50:50:d9:68:
29:72:1e:e3:69:2d:2d:67:81:af:4e:f3:71:2a:12:
a5:f3:b5:b0:53:e7:d6:34:ee:f4:85:44:75:01:c1:
14:e1:03:78:da:da:83:7e:73:26:97:0e:95:60:fc:
05:45:f0:1b:74:4d:8a:58:3d:da:e3:b7:a6:96:81:
47:04:03:a4:0f:82:af:4c:fd:16:ca:ca:34:1e:ad:
e2:da:1f:db:5e:0b:c5:60:6c:d9:f9:f1:25:a1:94:
82:b9:cb:9a:f1:93:94:a8:2f:9e:ec:36:0b:e7:5e:
02:ed:39:15:50:fb:69:e8:5a:97:2a:51:98:75:5d:
d6:07:66:ad:38:e4:33:50:f9:21:4e:07:5a:6e:33:
8b:37:14:34:46:08:75:1f:f2:f8:45:76:32:bc:df:
b1:f2:db:9d:a9:a0:3f:3a:9c:1c:64:40:79:27:37:
a8:94:03:f7:9f:28:c9:8e:8c:f4:a3:d1:b2:f5:82:
29:16:4a:88:55:08:ff:99:e2:e1:76:a4:e5:77:e3:
c7:be:69:87:41:ec:43:7e:b7:5c:f3:d8:bb:c0:02:
8f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F5:5B:C6:45:64:5E:D9:41:D1:13:B9:89:05:5D:2B:41:0E:E4:69
X509v3 Authority Key Identifier:
keyid:94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a4:3a:fd:c4:43:19:0f:c0:9e:93:e8:05:3a:59:8c:3a:f9:
40:e3:1a:6f:71:82:3e:7f:b5:ee:5b:5a:2a:18:1a:ed:1d:2e:
32:e8:f6:2f:7f:db:23:23:ef:3c:ed:15:ba:f9:18:a1:81:60:
8e:85:9b:ed:02:22:dd:c3:8d:42:ae:a9:51:f9:a2:32:bf:50:
9b:74:64:d6:39:c3:e8:c7:2c:19:7c:ee:c2:02:82:58:b6:e5:
2a:50:89:a9:3c:1d:99:4d:29:2d:8e:de:00:6a:17:2f:74:cb:
68:3c:66:67:36:ba:59:a2:ab:d7:5f:0d:7e:5b:94:fa:f0:1f:
5c:ed:6b:8f:28:60:cd:c1:b6:f8:72:4c:03:b6:a5:23:aa:56:
ba:6b:33:17:f0:56:f1:89:a9:a5:d7:d2:99:0e:60:81:93:d6:
e5:8e:ca:50:04:26:86:eb:aa:3a:6c:a5:2b:80:d5:fe:9d:28:
a5:ba:b8:b3:22:5c:f4:c0:d4:88:db:d1:84:e5:86:e2:a3:70:
8f:13:d9:e8:3d:a7:51:82:c2:80:df:d7:af:eb:c9:26:3b:04:
17:c3:40:b0:f1:3d:33:8f:96:93:fb:99:d5:48:af:9c:83:4c:
6c:1e:4a:49:36:20:08:ee:1e:15:d2:54:c1:e4:90:1d:1b:d8:
0c:7a:7a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:40:37 2026 by rpki-client