Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
File: LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json)
Hash identifier: zqS6t7PDJP3SIgEnpuZIyqanuQUUJWKRCbOBGBRWy4c=
Subject key identifier: 56:BF:28:1F:6B:65:07:E8:DC:DF:C4:0E:61:6A:C9:93:F1:29:26:08
Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa
Certificate serial: 019CADFE3AB7906CEBCCF183A5512E928CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
Manifest number: 0E23
Signing time: Mon 02 Mar 2026 10:00:45 +0000
Manifest this update: Mon 02 Mar 2026 10:00:45 +0000
Manifest next update: Tue 03 Mar 2026 10:00:45 +0000
Files and hashes: 1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: n2NVIcQnHa8KUmdROPJZa9iQVm5lDH4g5JnTSyKuntk=)
2: fR1OIjQ-gaEggW5Bu6WoCSw3-_8.roa (hash: +Q1EnV2TJw70P8F3SyId8vDlQiAvs3dvJ0FDJPliX6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:3a:b7:90:6c:eb:cc:f1:83:a5:51:2e:92:8c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa
Validity
Not Before: Mar 2 10:00:45 2026 GMT
Not After : Mar 3 10:00:45 2026 GMT
Subject: CN=56bf281f6b6507e8dcdfc40e616ac993f1292608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:61:d2:ca:40:76:d8:a7:f9:8c:90:b8:9a:84:
f3:89:36:97:4f:15:db:20:60:1b:a6:49:76:51:5a:
78:fb:4f:b0:65:3d:97:7e:79:8c:04:0d:ff:e6:42:
0f:f0:29:97:e0:40:a6:fe:57:8e:64:01:ad:8a:f6:
11:4a:57:33:11:ab:3c:43:57:3e:aa:2a:81:74:c3:
14:ca:9c:59:e7:aa:8f:78:13:f5:23:ae:0b:f0:97:
2a:46:34:c9:ce:26:89:82:a9:2f:88:e0:e0:0b:15:
91:b3:b6:cd:a4:85:fa:78:e1:1a:41:e7:b2:7b:a6:
40:2b:e3:97:e4:17:2d:17:26:5d:a0:6f:61:07:41:
c6:7a:89:76:de:0f:b2:3e:50:1e:d4:5c:e6:dd:15:
b2:27:bf:ff:b0:69:04:fe:7c:55:a7:4e:54:9f:59:
98:8e:59:db:06:76:94:8d:7e:cb:e9:8a:6a:1c:fa:
bd:f8:77:fa:cf:74:7c:97:02:4b:99:e1:1d:a6:98:
a6:75:da:a5:a5:67:39:60:f0:79:ff:4e:e5:4b:dd:
05:8e:5a:6f:f1:d2:dd:c3:9d:3e:8f:79:1f:d7:e6:
d8:f8:c2:5c:1a:d6:0a:0c:eb:64:43:13:ef:5f:9c:
51:9d:67:1c:fd:57:31:41:16:47:6b:97:32:31:4c:
14:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BF:28:1F:6B:65:07:E8:DC:DF:C4:0E:61:6A:C9:93:F1:29:26:08
X509v3 Authority Key Identifier:
keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ef:dc:e0:d5:dd:80:06:40:50:50:98:a0:c0:1d:77:67:64:
54:7b:ce:56:85:30:f6:c4:fb:d7:a0:4a:87:87:64:2a:2c:bd:
15:20:67:48:a6:0a:24:db:a3:49:27:32:42:39:8f:13:ff:25:
92:fc:6f:63:f2:5d:3c:10:c5:4c:a6:26:c4:59:14:d9:68:43:
ad:09:4f:19:9b:36:1b:6e:ff:5b:d7:50:f5:82:15:7a:08:ed:
ca:34:8b:95:00:13:0e:a2:18:d3:84:48:42:76:c6:b8:2a:5c:
03:f1:63:c0:ab:cf:59:34:0b:3c:a8:63:6e:c2:63:49:64:a5:
87:8e:e0:e1:29:c7:f2:56:b9:d6:e9:1b:31:3d:b5:9c:4e:9f:
70:6d:a3:2a:e2:75:d3:f1:46:fb:f8:09:13:1b:bb:52:fe:3f:
6a:12:02:cb:15:20:4f:c8:ea:76:22:6f:62:f9:c7:44:f7:17:
df:fc:af:cd:e5:32:71:05:25:75:40:86:37:04:62:b6:a5:ab:
5d:10:2c:2b:31:57:d8:fe:f5:8e:8f:52:1a:ac:a5:b3:f0:1b:
ec:db:81:32:68:29:84:dc:67:20:9e:27:fa:72:0a:aa:46:40:
f7:0b:78:34:40:d3:18:fd:37:ca:5e:04:dc:25:8b:50:9d:b0:
73:79:7c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:58:10 2026 by rpki-client