Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
File: LxrJ8JTYMY8wiNymgwGGX0YF6do.mft (raw, json)
Hash identifier: UYRT9VM9snDkR84Yn739CBpXGgDKnUG+vhfPFtRc224=
Subject key identifier: E7:CE:1E:E9:DC:FA:01:9E:43:A7:71:43:7A:C4:FE:16:F3:20:5A:17
Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
Certificate issuer: /CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Certificate serial: 019D25840D939C5FE5A6F10BC581FAD66E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
Manifest number: 124D
Signing time: Wed 25 Mar 2026 15:01:44 +0000
Manifest this update: Wed 25 Mar 2026 15:01:44 +0000
Manifest next update: Thu 26 Mar 2026 15:01:44 +0000
Files and hashes: 1: LxrJ8JTYMY8wiNymgwGGX0YF6do.crl (hash: JQRxSEOusBwRAQIFkx4UucsuI7I0S5kjiEAobo1OlPE=)
2: R4EyQfq47lKcSi7lGsbXI4F8tPI.roa (hash: tdmT4SygVfTwG2tATcY87tl2PKsMrLDS/k3VojLg3Q0=)
3: U2Z1XV8o3uSKFqctNf3JUk-H5Ts.roa (hash: FRVvHMEadriOkR83sQ2tDLvX3mVKMsDHHQh/IgHBVFQ=)
4: UYxFngClnykqTHTfuXuiS4afmY0.roa (hash: qhH8eU5uzACUHVTAmy6bDaqx30+kPSiCPRvL6eNWthc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:0d:93:9c:5f:e5:a6:f1:0b:c5:81:fa:d6:6e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Validity
Not Before: Mar 25 15:01:44 2026 GMT
Not After : Mar 26 15:01:44 2026 GMT
Subject: CN=e7ce1ee9dcfa019e43a771437ac4fe16f3205a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:53:48:92:1f:cf:55:b5:59:3b:8e:78:04:d1:
f3:d3:58:1e:d1:aa:a4:d2:dd:b0:b0:f3:9e:8a:9d:
85:b9:68:0d:d1:0f:06:6e:2b:09:24:49:19:df:10:
d6:57:f0:0f:77:ff:9d:61:f6:a7:c3:f2:84:74:4d:
57:d5:fe:66:53:aa:92:4c:67:12:e3:4b:dd:8e:39:
6d:bb:15:27:03:69:1b:62:bb:39:06:04:b8:e5:64:
eb:9a:de:ba:67:85:49:95:79:71:be:26:d3:58:c2:
90:89:eb:78:32:42:c7:84:2c:00:54:47:92:e8:eb:
37:dd:d2:f7:b1:77:14:75:4f:7f:a2:f7:95:f3:b0:
05:f1:f9:dd:47:39:da:42:22:8b:5e:64:04:de:fe:
2a:7e:f4:57:88:2b:15:40:d7:0e:7d:34:d3:f8:8a:
cc:95:ff:22:c4:93:07:5e:c9:a9:db:90:b0:57:85:
3a:03:52:84:c8:e4:50:9a:32:82:4c:db:41:ac:22:
9f:64:03:70:f9:0f:a4:d5:53:01:43:17:82:02:c3:
51:b5:8b:64:be:3d:21:0f:d3:b0:6c:40:f2:25:0e:
29:7e:59:8c:73:54:f1:92:d4:0f:ed:87:58:7c:c3:
7a:79:80:8a:e7:74:27:0a:d5:52:62:3a:d4:46:5b:
4d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CE:1E:E9:DC:FA:01:9E:43:A7:71:43:7A:C4:FE:16:F3:20:5A:17
X509v3 Authority Key Identifier:
keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:fb:db:4e:d7:17:1e:b5:6a:f7:2d:05:f3:5c:f9:03:c5:cc:
ad:c1:e8:fc:8e:24:4b:c1:b6:f8:ae:ce:0e:78:f2:53:41:51:
24:68:5b:a1:2e:27:84:4d:41:38:08:67:51:61:f6:0e:ee:d6:
bd:79:d2:71:9b:6e:42:a5:09:10:3c:6d:12:25:85:6f:8c:fa:
1e:6b:9d:aa:28:90:aa:dc:2f:98:de:3f:b3:04:69:9b:0e:50:
2b:64:50:16:87:c5:b7:d1:09:c2:bf:36:78:94:bf:7f:22:29:
a8:fb:74:23:d8:1c:56:d8:75:db:b1:88:c5:12:e3:ea:2c:ec:
07:3d:db:4f:2c:6b:5c:2a:1d:19:f4:cf:d9:d0:5b:7f:2c:fe:
25:08:87:2d:ea:98:8b:ad:7c:ca:e7:7d:84:e4:ca:c4:06:ee:
f8:26:8c:e5:cd:db:c4:d8:fb:e4:87:f7:49:08:af:7c:4c:c3:
62:47:6e:fb:2d:65:70:34:ce:65:39:fb:95:09:00:ac:fb:15:
ff:81:c7:a4:e0:0e:cc:60:37:56:e9:f1:68:2c:f4:79:b6:b7:
ac:48:c2:73:21:12:1f:9c:b7:73:42:78:75:cd:2e:f7:ad:97:
78:5e:6c:9a:88:3e:c9:7f:1c:3b:5d:67:7d:7f:69:45:3b:c8:
c3:e4:68:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:15 2026 by rpki-client