Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
File: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft (raw, json)
Hash identifier: MV8LrGyDq5forA6txJpT+VSa4cHXzUgoKNkZsF63VvU=
Subject key identifier: 27:BC:53:ED:F5:7F:0F:BD:2C:E6:92:E1:2E:38:5C:6D:F7:AA:32:AD
Authority key identifier: 2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
Certificate issuer: /CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Certificate serial: 019D27A8EC166EC0BACD5F80A6231055E06A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
Manifest number: 0D04
Signing time: Thu 26 Mar 2026 01:01:14 +0000
Manifest this update: Thu 26 Mar 2026 01:01:14 +0000
Manifest next update: Fri 27 Mar 2026 01:01:14 +0000
Files and hashes: 1: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl (hash: WYtV+2tTVb+xG6i0iaXvbBYm1ySq+Pl6QDNxPOqVptk=)
2: kV7AwnkXYKEJUo_QQveMLFjR1Q0.roa (hash: SX4oJ6iuf50pvLJFbaFInsRNowHDyi5Eu+2bcodIAMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:ec:16:6e:c0:ba:cd:5f:80:a6:23:10:55:e0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Validity
Not Before: Mar 26 01:01:14 2026 GMT
Not After : Mar 27 01:01:14 2026 GMT
Subject: CN=27bc53edf57f0fbd2ce692e12e385c6df7aa32ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:77:dc:19:80:68:b4:3f:1b:8b:92:b9:1e:0f:
11:be:5a:c6:d0:f7:26:36:52:ad:02:fa:dc:7b:0c:
1b:49:70:4d:73:54:7e:0e:4c:e8:07:10:f9:2c:02:
50:2e:ef:56:a5:b0:84:c6:f3:af:c9:9e:e1:70:2d:
b2:b7:76:4d:68:29:23:cc:1e:81:66:89:43:31:20:
5d:f6:35:8c:95:87:74:a9:f3:86:15:17:d3:49:ad:
49:62:6d:e5:0e:04:96:9e:5a:99:37:82:74:70:ff:
c8:59:c8:fb:43:e1:52:b1:e0:28:d4:b4:d5:39:1f:
26:c6:f3:0e:f0:55:8a:42:91:8c:da:65:a6:0b:99:
ad:fc:79:78:70:c9:78:47:32:81:bb:b6:d2:27:84:
84:47:a2:39:8d:4b:46:22:d9:13:d3:f7:a1:29:59:
5e:e9:a0:e6:88:b2:19:97:34:66:5c:17:22:f9:96:
d2:3b:bb:cc:12:32:cc:d0:77:e3:cf:35:a7:f6:36:
50:fe:1a:dc:ff:ee:01:65:1d:5d:e4:7b:14:bb:96:
43:ed:01:ed:3a:74:4c:63:0f:39:b8:47:d2:72:52:
2c:93:37:f8:66:5a:62:c4:d2:30:dd:94:11:51:53:
a8:ee:42:87:31:99:69:ed:6b:0d:89:c1:02:b0:72:
e1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BC:53:ED:F5:7F:0F:BD:2C:E6:92:E1:2E:38:5C:6D:F7:AA:32:AD
X509v3 Authority Key Identifier:
keyid:2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d1:e3:0a:dc:17:8a:24:8a:91:9d:0d:19:72:8c:4b:02:d9:
04:d4:ac:5a:f5:13:63:d8:f2:10:73:0d:5b:d0:3b:d0:cd:b8:
63:a6:e5:bf:6b:0e:00:25:fa:1a:fe:66:20:d1:44:35:1c:9a:
9e:7b:17:01:65:72:b7:ad:07:1c:3b:84:66:4d:07:0f:39:44:
b2:39:ce:fa:57:04:77:61:7e:04:0f:84:30:1a:e8:b5:98:6a:
2b:8c:67:4f:dc:36:5c:f4:ae:dd:81:58:9c:33:b5:3a:db:5e:
35:eb:8b:35:fb:97:e7:db:ee:53:46:0e:c8:98:fc:8f:85:44:
e2:5b:67:0b:f0:e2:8b:5b:39:be:85:a8:f3:fc:6f:dd:c0:cc:
07:f1:21:7f:1c:6c:f7:40:96:e8:e2:77:eb:f0:7c:fe:66:77:
f7:af:6f:29:5d:e2:13:f0:06:f9:7d:96:94:eb:d5:50:2a:1e:
69:ef:c8:29:9b:4d:77:c5:07:e3:46:a1:9e:12:fd:95:ea:3f:
09:fa:6b:33:bc:71:1d:e6:7f:98:f3:9d:17:4b:61:c2:fc:27:
42:77:88:ea:32:0e:ad:95:cf:51:37:b0:2f:ac:61:62:45:d9:
76:92:41:87:9b:59:19:d1:56:31:d1:b7:db:52:ce:10:0c:ae:
cb:82:77:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:09 2026 by rpki-client