Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
File: LHPvCB4tVzHERXQ5c6lqv96xQss.mft (raw, json)
Hash identifier: KfiWMmgAs8F//keMkjWmonvoMy9Yqe4CgEn9oD6UNI8=
Subject key identifier: F6:24:38:AE:4E:7D:4B:DB:1B:CF:96:61:7C:7C:FA:90:2C:0C:FA:96
Authority key identifier: 2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
Certificate issuer: /CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Certificate serial: 019D9AAC0112547440C141FC5A138BFD5E97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
Manifest number: 09BC
Signing time: Fri 17 Apr 2026 09:00:56 +0000
Manifest this update: Fri 17 Apr 2026 09:00:56 +0000
Manifest next update: Sat 18 Apr 2026 09:00:56 +0000
Files and hashes: 1: CvtOzQgg0yU5uNiDJv9sRE54F7w.roa (hash: /RWVX+MB4g62z+EInyoLc3Ee/IcQswcuywMSa8ZRlSI=)
2: LHPvCB4tVzHERXQ5c6lqv96xQss.crl (hash: eGCzNr4P3aWXwpMH6Aum0RlDldu+Obinsefql2WnqFo=)
3: elqT59ZWrAInz7TAGHCfesbdKLo.roa (hash: MtloAfg5PV+ZmF39WN4IskuqHMHTWwP8zag9ZXLDmqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:01:12:54:74:40:c1:41:fc:5a:13:8b:fd:5e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Validity
Not Before: Apr 17 09:00:56 2026 GMT
Not After : Apr 18 09:00:56 2026 GMT
Subject: CN=f62438ae4e7d4bdb1bcf96617c7cfa902c0cfa96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:58:b8:69:b5:87:6c:51:16:db:e0:5f:a4:cf:
b7:ba:0b:c0:6b:8a:f5:8e:ad:05:85:d0:e4:b5:0b:
71:ce:77:19:b4:ee:22:9f:88:d2:37:3e:51:68:94:
a6:d8:17:9f:eb:30:bd:64:39:9e:5d:02:bf:ed:26:
b2:72:ec:b6:03:eb:50:19:66:ac:0a:4f:58:cd:c5:
0a:df:bf:53:2e:df:ee:83:04:6e:49:1e:89:8b:1c:
0b:84:79:9f:64:bb:d3:a8:80:75:8d:87:88:4c:de:
c0:8f:9e:5d:c4:15:43:83:bc:dc:6a:ac:07:42:ce:
1d:60:9b:af:e5:98:e1:21:de:99:0e:c3:38:35:cd:
ba:d8:06:8e:e9:69:dc:d2:d8:a1:9c:87:02:9d:1d:
45:84:70:83:58:5c:0f:70:8f:4f:eb:c6:e4:05:59:
aa:af:b9:bb:9b:47:c1:5c:de:07:37:3f:9b:70:c5:
7b:3d:80:13:a3:8a:95:cc:48:27:ed:a4:43:ab:d0:
38:50:25:15:f0:d7:e7:e3:cf:21:3f:f2:4d:d8:18:
56:de:b7:9f:42:e4:92:14:39:09:6a:8f:3e:d9:4c:
67:92:7c:61:26:7d:72:1d:ab:d3:59:1e:17:4b:42:
93:d4:9f:58:75:06:57:43:6f:5e:b0:98:01:b8:ea:
e7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:24:38:AE:4E:7D:4B:DB:1B:CF:96:61:7C:7C:FA:90:2C:0C:FA:96
X509v3 Authority Key Identifier:
keyid:2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ab:d1:38:30:01:23:4d:0e:ed:de:e9:0f:ad:0c:6a:da:c4:
49:95:40:47:7b:06:db:73:fa:af:f8:41:62:e5:4e:e0:26:ff:
29:92:85:3b:a9:f9:35:30:4d:0f:b3:e8:38:c8:f9:7c:25:a2:
71:f2:ff:a9:80:45:4a:38:a1:4d:61:ed:9b:24:01:2b:f7:7a:
33:f5:4d:5a:bb:aa:1d:13:f5:3f:30:84:1e:e7:10:41:3f:36:
17:0f:3a:29:92:2b:4c:c0:92:e5:f2:67:e6:c5:2a:b6:b0:b8:
d8:37:ab:bc:21:98:d8:e5:1e:de:34:99:74:d0:e9:c2:77:ab:
50:3b:73:bf:88:97:84:ac:1d:b2:c4:72:a5:89:90:0b:4f:9e:
a7:7c:ba:a6:29:54:01:c6:bc:2f:14:5d:2a:97:b6:b7:4c:24:
96:aa:ce:6d:a5:3b:52:9a:7d:b6:db:89:96:86:35:ee:6b:86:
de:9a:7f:04:36:3c:a5:e7:33:22:8d:cf:e7:8e:c2:13:94:5c:
fd:ae:bb:f6:67:46:2f:0d:12:3a:86:b2:6f:1b:be:73:e5:4b:
5d:38:83:33:fd:68:4e:80:fe:c2:b6:1f:57:ff:27:0f:dd:fc:
4d:57:50:17:74:f8:8c:93:1a:d1:fd:72:0a:be:78:87:8f:ea:
e5:4c:bf:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:30:32 2026 by rpki-client