Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
File: lhud90XDLfJ98z68_VNvGeE0dP4.mft (raw, json)
Hash identifier: RGgL/qoU4UDnml+HmU12IlP0GzEsX0hhugCC2SWHQN4=
Subject key identifier: 01:FC:38:8F:01:31:BC:C0:64:2C:AE:77:64:23:2A:36:B4:40:9F:8A
Authority key identifier: 96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
Certificate issuer: /CN=961b9df745c32df27df33ebcfd536f19e13474fe
Certificate serial: 019CAC4680C8B5E1C1FC0B7A9DFE143B3D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
Manifest number: 1161
Signing time: Mon 02 Mar 2026 02:00:27 +0000
Manifest this update: Mon 02 Mar 2026 02:00:27 +0000
Manifest next update: Tue 03 Mar 2026 02:00:27 +0000
Files and hashes: 1: Rf4ua2gShCgNnsbPUQ6ubuJBV1k.roa (hash: tSFC9dWk5W60HWYLlM+PiN1UjypysKUpyAViK3s11Fw=)
2: Uxtr-atmnNBITnladLThcv7huIU.roa (hash: n7M6NPbamAy18kfeXWpn06XaPUvf5LbKfUxiapVP6+w=)
3: cd4PR_7Zwc-Jv_h3ekBVWiw0K-0.roa (hash: HpbyUUXySxZasQuBBURj008LhTbNYYQxJ+uuJec1F1s=)
4: lhud90XDLfJ98z68_VNvGeE0dP4.crl (hash: XW6KdQmA5vR9oCGKXP8HKIlmGWqO9mK1c4nKdiThDII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:80:c8:b5:e1:c1:fc:0b:7a:9d:fe:14:3b:3d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961b9df745c32df27df33ebcfd536f19e13474fe
Validity
Not Before: Mar 2 02:00:27 2026 GMT
Not After : Mar 3 02:00:27 2026 GMT
Subject: CN=01fc388f0131bcc0642cae7764232a36b4409f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:e2:32:b0:e1:6f:bf:fd:1e:32:dc:22:92:
32:cd:0a:a1:d4:72:62:f0:bc:19:cc:ea:17:3d:0d:
8d:21:3c:e9:72:c8:66:3b:0c:a4:e2:b5:48:d0:6d:
ce:d0:a3:cf:7b:ef:ca:0d:b1:74:df:e8:b6:fe:40:
d2:ca:7d:84:b2:65:01:d7:3f:ae:f0:e9:78:89:85:
dd:c4:06:26:98:81:29:91:c9:74:6b:40:7b:d4:de:
52:53:80:91:e5:17:a7:05:f5:73:bb:72:eb:4e:c5:
20:dd:3f:ac:0c:a9:80:e4:d5:cf:b6:bb:ad:de:8a:
bd:38:4d:7e:21:62:67:46:04:1f:06:8c:70:85:fa:
c4:82:c2:65:f4:56:d6:d6:3f:a3:0f:6c:f5:15:d5:
18:00:bf:66:8a:65:ba:fd:c0:05:ec:53:27:d0:c1:
ae:78:fb:e6:ff:be:96:87:90:44:a8:18:d9:a4:6a:
1f:ec:a1:0e:93:d4:97:23:34:dc:32:1b:de:07:e1:
de:0c:6a:62:34:72:ef:3b:74:1f:75:52:90:bf:2c:
df:3e:ab:fe:77:7d:2e:86:53:f7:f6:33:72:34:3e:
bb:04:6c:11:4e:b7:7f:60:30:fe:f0:34:8f:8f:97:
2e:b0:65:b3:76:40:fe:85:a9:1c:d5:fa:73:0c:55:
8b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FC:38:8F:01:31:BC:C0:64:2C:AE:77:64:23:2A:36:B4:40:9F:8A
X509v3 Authority Key Identifier:
keyid:96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:9f:5b:18:44:5a:af:d2:6c:b3:af:ad:d0:5e:bb:56:e1:87:
1c:e3:08:89:43:a4:d3:a8:f4:ce:3c:a8:73:e8:6a:a9:88:e5:
f9:6e:6b:e0:ba:1f:a3:b9:be:0d:5b:19:35:25:39:ff:a2:c5:
74:4f:94:61:ee:7e:5c:67:bd:4f:bb:a1:9f:0d:b1:5a:8d:2c:
82:00:eb:71:27:fe:c6:2b:6e:08:91:5a:e5:d6:f9:52:02:5e:
99:ec:7a:1e:db:6f:32:c7:b8:3c:0b:0c:e4:1b:b3:b6:36:3b:
20:cf:be:30:33:e4:a4:54:d7:1f:74:7f:4d:c0:6a:9b:92:f9:
d3:75:c3:f8:67:0e:f6:0d:44:04:d9:db:f6:15:de:6a:1c:42:
a5:0a:e9:2e:36:fb:81:3c:3a:00:2d:42:25:33:ef:c7:b6:bb:
39:a1:23:93:1a:e0:22:bf:d9:50:8f:5f:5a:04:34:75:b3:b5:
43:76:7d:28:b6:8b:e7:dc:bc:e8:09:86:d7:7e:db:85:81:e5:
0b:10:49:3e:39:36:d5:86:04:6b:4b:74:93:39:40:65:de:49:
cd:85:80:2f:8e:d9:61:b2:86:e8:a7:c6:55:26:7d:23:3d:88:
5f:5d:bb:bb:36:8b:9d:19:34:94:b5:5a:83:3f:a4:c6:87:7a:
f8:0f:eb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:47 2026 by rpki-client