Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
File: LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json)
Hash identifier: wFWYw6Rk/NlPz5QUXjIyTc+CUywyNy3fYN0Fav3dSlc=
Subject key identifier: 4E:19:5D:DB:FC:49:2F:C3:3E:2D:3C:F7:6C:AF:1C:DA:92:F4:78:2C
Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa
Certificate serial: 019D9B88320BC14949AC6BCB11874D8605D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
Manifest number: 0E9E
Signing time: Fri 17 Apr 2026 13:01:27 +0000
Manifest this update: Fri 17 Apr 2026 13:01:27 +0000
Manifest next update: Sat 18 Apr 2026 13:01:27 +0000
Files and hashes: 1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: C7GsXbf51umdSkmrdqOXYD6selRxd/EyhE7MGGgI1h0=)
2: fR1OIjQ-gaEggW5Bu6WoCSw3-_8.roa (hash: +Q1EnV2TJw70P8F3SyId8vDlQiAvs3dvJ0FDJPliX6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:88:32:0b:c1:49:49:ac:6b:cb:11:87:4d:86:05:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa
Validity
Not Before: Apr 17 13:01:27 2026 GMT
Not After : Apr 18 13:01:27 2026 GMT
Subject: CN=4e195ddbfc492fc33e2d3cf76caf1cda92f4782c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:49:2f:1d:8f:de:d8:10:47:35:ee:75:69:db:
7f:1c:83:bb:9a:98:51:7a:cc:ed:df:74:4d:4a:ff:
ed:06:75:f6:34:3e:48:bc:1e:af:cb:ea:d6:7a:21:
36:de:cc:6f:23:a1:b5:9f:1a:02:a9:ba:b2:2c:6e:
c3:e1:a9:1c:20:3c:74:79:a1:8b:71:79:f5:06:29:
74:8f:9c:c5:9e:8f:6e:b0:9c:14:ee:9c:ee:69:20:
20:9c:c4:c7:c6:c6:61:37:7e:f5:ef:5b:c7:9b:4b:
60:fc:70:3e:7b:e5:22:6b:78:7f:c0:f5:69:8e:08:
fa:86:e3:4d:10:11:95:37:c5:0d:2f:4b:8d:89:08:
21:bc:cc:05:f1:03:3d:12:55:8c:d5:78:df:60:13:
1e:87:10:ea:c8:82:6e:87:71:21:98:95:3a:4c:bf:
e3:6f:85:be:0c:33:2e:64:34:0c:09:b5:bc:ef:07:
e4:a4:7c:46:02:49:57:69:c1:fe:f1:6e:60:1b:16:
48:8a:1b:97:53:34:89:f0:0a:14:67:a5:80:f5:89:
d6:ab:5c:b9:22:78:a2:0a:5f:49:ea:d8:fd:50:e7:
cb:ea:70:43:f7:4b:57:be:b9:0c:af:4c:80:70:be:
ad:c2:54:92:5b:71:c6:65:92:5b:f5:e6:51:a5:81:
75:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:19:5D:DB:FC:49:2F:C3:3E:2D:3C:F7:6C:AF:1C:DA:92:F4:78:2C
X509v3 Authority Key Identifier:
keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ac:92:a4:0f:a5:fc:14:76:20:41:a7:22:f8:91:37:9f:67:
13:71:5e:e7:f0:72:20:62:99:22:f3:54:0c:90:80:b8:b4:da:
ee:f8:55:a9:f5:a1:93:1a:cf:7b:23:1f:9b:57:81:38:d0:82:
68:ab:f3:6b:6d:80:42:7c:8b:8d:86:b3:33:3c:f0:9b:7f:81:
94:fd:d2:e1:d3:84:57:c2:56:f7:39:d0:7b:9c:93:e9:c4:f1:
67:f8:b9:f8:9c:0c:ac:81:a6:c6:f8:bb:57:54:6e:e0:0e:c7:
0b:49:5d:d7:d8:69:b6:54:86:00:da:1c:a3:69:f5:c2:f5:ef:
53:c0:6d:4b:00:2e:5e:62:5a:bb:d4:51:d9:f8:c9:59:d1:5e:
83:ef:13:62:42:0d:cc:93:ce:04:7c:cc:23:7b:d3:02:52:14:
21:ba:e7:8e:29:83:b5:04:ec:8e:c3:64:64:12:e3:bb:d5:cd:
ed:94:66:bb:bc:6e:59:63:c7:a3:42:9d:cf:9d:63:6f:19:5c:
35:2a:a9:03:93:88:b0:07:73:17:6e:f8:a9:8b:a4:0f:ea:41:
08:50:af:1b:57:39:5b:63:b3:a9:5f:04:f9:b9:f8:b8:3f:2b:
b7:2e:05:06:c7:63:a9:65:56:89:b7:88:d2:c9:e5:21:3c:0c:
6f:12:17:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:05:26 2026 by rpki-client