Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
File: lxkrZdZTQfNy8GdjTxH_PJbESrM.mft (raw, json)
Hash identifier: SuOyRluuXM8IRoCVK/RXlhC8CswD24qfK9rEF1VT38s=
Subject key identifier: 01:C2:42:77:00:2C:CE:5C:76:F2:00:A0:39:18:A9:79:F2:BF:DB:B7
Authority key identifier: 97:19:2B:65:D6:53:41:F3:72:F0:67:63:4F:11:FF:3C:96:C4:4A:B3
Certificate issuer: /CN=97192b65d65341f372f067634f11ff3c96c44ab3
Certificate serial: 019E1F7ED7B89D1A8F60B5C3C9D5EE3FE498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
Manifest number: 39
Signing time: Wed 13 May 2026 04:01:06 +0000
Manifest this update: Wed 13 May 2026 04:01:06 +0000
Manifest next update: Thu 14 May 2026 04:01:06 +0000
Files and hashes: 1: lxkrZdZTQfNy8GdjTxH_PJbESrM.crl (hash: JyYFegO+ffCaYaI0B1+xxZfxBFXEd8L383kSY561pW0=)
2: wn0IY0Am8dbWKWFYL-XocK9wI1M.roa (hash: f5YL150E3HRR/Y+EFdyKEJdNywzJxXemEPh++b/gfAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:d7:b8:9d:1a:8f:60:b5:c3:c9:d5:ee:3f:e4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97192b65d65341f372f067634f11ff3c96c44ab3
Validity
Not Before: May 13 04:01:06 2026 GMT
Not After : May 14 04:01:06 2026 GMT
Subject: CN=01c24277002cce5c76f200a03918a979f2bfdbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d3:2b:51:0b:ea:b4:f0:28:1a:2e:df:e2:08:
85:1e:ef:ee:97:12:d4:d3:b9:d2:5d:21:21:89:e9:
61:45:94:46:85:39:8c:7b:59:9e:d3:dd:ff:4b:1a:
44:41:ab:b0:7d:42:49:d0:33:11:b0:ac:dd:83:a0:
60:b8:af:3e:a1:95:49:42:32:6a:d0:16:27:3f:69:
72:d5:ad:b3:9d:22:31:73:de:49:fd:85:b3:c2:b4:
da:a5:74:7d:20:4a:5c:2b:64:56:fa:7d:1b:da:91:
1d:45:1a:0f:fd:59:b4:c4:d3:cc:5e:1f:ec:6e:25:
60:b4:50:7e:23:a8:b8:df:2b:56:06:5c:06:48:23:
87:ad:fc:3d:e6:59:39:52:f3:3e:2d:db:00:d1:90:
be:92:39:c4:20:4a:42:08:74:cc:10:1f:f4:25:4d:
cd:81:1e:4a:7f:3c:82:e6:40:a7:3b:d1:57:ca:6d:
bf:dc:7e:b7:22:16:f7:0c:80:04:25:3f:5c:e8:6b:
17:2d:d7:5d:cc:46:ca:59:1b:6a:8d:3e:61:82:18:
ab:ee:8d:4e:ff:ce:c2:50:ab:d6:d9:bb:a7:41:87:
1d:f9:2e:3e:1c:bc:c9:89:76:84:9d:2f:50:81:f9:
27:a4:a7:a5:1a:2c:b1:cf:52:f8:fa:f5:33:59:73:
58:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C2:42:77:00:2C:CE:5C:76:F2:00:A0:39:18:A9:79:F2:BF:DB:B7
X509v3 Authority Key Identifier:
keyid:97:19:2B:65:D6:53:41:F3:72:F0:67:63:4F:11:FF:3C:96:C4:4A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f7:fd:e5:5a:87:60:07:40:a7:45:69:d6:a2:4f:ba:69:15:
f2:6f:e9:4c:bd:4d:40:d8:a9:23:85:ad:2c:1f:1d:22:47:88:
de:03:ad:7e:0e:0b:7d:8a:da:54:9b:35:d7:db:f9:f9:df:b7:
94:cf:72:a2:6e:84:b9:91:a0:59:3d:48:2f:ec:b8:e2:77:55:
ea:32:fe:9f:c4:65:44:30:18:b6:c4:88:5f:e9:44:f0:a0:53:
f0:25:63:83:2c:37:df:60:ed:5a:f3:f4:08:0d:a9:66:df:e8:
44:ef:78:5a:de:61:c7:28:64:70:f2:01:57:55:d1:43:ff:33:
16:6e:ee:4f:1b:4a:f6:18:94:9a:6c:a6:35:df:5a:37:97:ff:
12:d9:ea:40:98:54:ac:83:18:cd:1d:07:fc:f1:52:21:04:5e:
2a:1e:7e:0d:8c:2b:a2:05:7f:ec:dd:05:64:14:88:b2:ab:77:
61:5a:43:d0:94:74:a2:74:48:90:5f:ff:ba:7e:2b:ff:0b:a6:
84:fd:c6:91:9c:36:aa:69:b6:bf:e1:0b:cd:68:45:1f:ed:8a:
83:f5:11:20:0d:28:b4:19:f0:50:39:33:76:ca:49:5b:f9:d4:
9e:35:db:3f:24:ca:28:de:79:b5:be:3e:2a:ca:1e:e4:6f:e0:
e0:f9:27:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffte4nRqPYLXDydXuP+SYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MTkyYjY1ZDY1MzQxZjM3MmYwNjc2MzRmMTFmZjNjOTZj
NDRhYjMwHhcNMjYwNTEzMDQwMTA2WhcNMjYwNTE0MDQwMTA2WjAzMTEwLwYDVQQD
EygwMWMyNDI3NzAwMmNjZTVjNzZmMjAwYTAzOTE4YTk3OWYyYmZkYmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNMrUQvqtPAoGi7f4giFHu/ulxLU
07nSXSEhielhRZRGhTmMe1me093/SxpEQauwfUJJ0DMRsKzdg6BguK8+oZVJQjJq
0BYnP2ly1a2znSIxc95J/YWzwrTapXR9IEpcK2RW+n0b2pEdRRoP/Vm0xNPMXh/s
biVgtFB+I6i43ytWBlwGSCOHrfw95lk5UvM+LdsA0ZC+kjnEIEpCCHTMEB/0JU3N
gR5KfzyC5kCnO9FXym2/3H63Ihb3DIAEJT9c6GsXLdddzEbKWRtqjT5hghir7o1O
/87CUKvW2bunQYcd+S4+HLzJiXaEnS9QgfknpKelGiyxz1L4+vUzWXNYpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHCQncALM5cdvIAoDkYqXnyv9u3MB8GA1UdIwQY
MBaAFJcZK2XWU0HzcvBnY08R/zyWxEqzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhrclpkWlRRZk55OEdkalR4SF9QSmJFU3JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81MTJmNjQtMjBhNS00YzM3LTliNmIt
ODExMDQ3NThjOTNjLzEvbHhrclpkWlRRZk55OEdkalR4SF9QSmJFU3JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81MTJmNjQtMjBhNS00YzM3LTliNmItODExMDQ3NThjOTNj
LzEvbHhrclpkWlRRZk55OEdkalR4SF9QSmJFU3JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvf95VqH
YAdAp0Vp1qJPumkV8m/pTL1NQNipI4WtLB8dIkeI3gOtfg4LfYraVJs119v5+d+3
lM9yom6EuZGgWT1IL+y44ndV6jL+n8RlRDAYtsSIX+lE8KBT8CVjgyw332DtWvP0
CA2pZt/oRO94Wt5hxyhkcPIBV1XRQ/8zFm7uTxtK9hiUmmymNd9aN5f/EtnqQJhU
rIMYzR0H/PFSIQReKh5+DYwrogV/7N0FZBSIsqt3YVpD0JR0onRIkF//un4r/wum
hP3GkZw2qmm2v+ELzWhFH+2Kg/URIA0otBnwUDkzdspJW/nUnjXbPyTKKN55tb4+
Ksoe5G/g4PknyQ==
-----END CERTIFICATE-----
Generated at Wed May 13 12:40:00 2026 by rpki-client