Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
File: LxrJ8JTYMY8wiNymgwGGX0YF6do.mft (raw, json)
Hash identifier: egsYrq657Q7RLP/1RP4PiyN83Xk0nNnhDlzmyWrj7k8=
Subject key identifier: 7F:AA:29:53:AA:9C:A0:A6:97:FC:4D:90:1C:7D:05:41:D1:08:B6:DD
Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
Certificate issuer: /CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Certificate serial: 019E2092472EA642730FE20AD95F5269CDC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
Manifest number: 12CF
Signing time: Wed 13 May 2026 09:01:57 +0000
Manifest this update: Wed 13 May 2026 09:01:57 +0000
Manifest next update: Thu 14 May 2026 09:01:57 +0000
Files and hashes: 1: LxrJ8JTYMY8wiNymgwGGX0YF6do.crl (hash: NQaoXvtPkP5quwryXYpYCW/fQZI/M9pUNBB4tYDClh8=)
2: R4EyQfq47lKcSi7lGsbXI4F8tPI.roa (hash: tdmT4SygVfTwG2tATcY87tl2PKsMrLDS/k3VojLg3Q0=)
3: U2Z1XV8o3uSKFqctNf3JUk-H5Ts.roa (hash: FRVvHMEadriOkR83sQ2tDLvX3mVKMsDHHQh/IgHBVFQ=)
4: UYxFngClnykqTHTfuXuiS4afmY0.roa (hash: qhH8eU5uzACUHVTAmy6bDaqx30+kPSiCPRvL6eNWthc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:47:2e:a6:42:73:0f:e2:0a:d9:5f:52:69:cd:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Validity
Not Before: May 13 09:01:57 2026 GMT
Not After : May 14 09:01:57 2026 GMT
Subject: CN=7faa2953aa9ca0a697fc4d901c7d0541d108b6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d6:6f:54:7b:1c:a0:58:93:d5:77:2d:2f:25:
05:bb:b0:85:c3:49:69:98:4a:78:b6:01:69:27:75:
a6:11:4e:e5:07:1e:50:cb:41:40:ec:57:5a:b8:9c:
a2:7c:26:e8:98:c1:79:af:32:82:af:7a:0a:85:4c:
dd:c8:cc:c3:43:45:94:a7:0f:06:f2:37:8d:4b:9a:
32:4b:3e:9f:25:d7:a3:2c:37:29:51:22:95:5f:85:
49:b2:ae:68:4e:7e:45:b7:ad:d2:1f:9c:85:db:be:
fd:c1:ae:27:6e:bc:2c:71:54:4d:57:e8:4c:8f:a6:
ae:f5:40:49:1e:2f:c7:c2:9a:c9:ef:3c:3a:6c:b1:
c4:0e:51:1b:35:cb:20:ef:1f:9d:cf:c7:e7:12:94:
23:f7:10:7a:24:59:2c:6a:5d:4a:86:30:2e:ac:18:
10:0c:c0:b5:30:cb:28:3d:fc:eb:00:cb:4b:97:1b:
05:0e:77:8b:d9:b9:05:f5:38:b6:5c:66:97:58:de:
16:eb:aa:5e:24:a6:e8:6f:26:98:10:c6:cc:0c:56:
ef:4b:5f:de:82:7f:57:24:32:6f:9d:ae:e8:d0:28:
18:22:22:9b:ea:c7:78:b5:dc:32:25:78:6d:38:0d:
8f:33:5a:f4:21:29:e2:1a:44:b1:70:66:1c:d2:86:
49:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AA:29:53:AA:9C:A0:A6:97:FC:4D:90:1C:7D:05:41:D1:08:B6:DD
X509v3 Authority Key Identifier:
keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:25:17:23:5b:6b:ff:dc:37:03:3a:f3:36:f9:0c:37:78:e1:
a2:e9:58:c6:20:23:21:0a:85:92:7b:cd:c7:83:2d:cd:f8:f9:
3e:6b:15:35:3e:ab:ce:9a:83:fe:10:5b:01:1a:83:be:45:32:
0e:dc:33:22:29:96:d3:e2:ac:1f:d1:6b:69:fd:ce:17:53:0b:
d8:33:dd:fe:2a:24:ac:1c:cc:ea:43:3c:c7:23:c1:92:2f:34:
fa:21:b6:51:79:91:da:58:f9:2c:8f:1c:6e:29:e0:2d:3b:48:
6d:52:ad:00:8d:24:a4:11:9a:df:07:19:47:91:2d:e8:76:82:
34:fd:1e:ad:0a:df:ce:2f:4b:91:20:3d:0a:5c:58:11:15:31:
bb:b3:95:fa:ee:83:21:76:d7:e5:12:88:a5:68:ff:97:3c:65:
14:0f:3d:0b:fc:a9:d4:69:35:fd:51:05:f5:b3:8b:9a:14:47:
d2:a2:05:bd:28:cf:98:5e:2c:57:53:c7:b5:e9:d6:29:e2:58:
f1:c5:c7:a3:d8:4b:65:4a:64:b7:f2:10:12:cf:ed:a1:7f:93:
c2:ad:76:23:b9:ad:d5:53:14:b7:8c:1b:ec:21:7e:a3:fd:14:
df:2f:d2:31:21:4c:9e:e6:47:68:7b:2a:5d:c2:13:55:bc:63:
21:8e:ce:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:34:19 2026 by rpki-client