Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
File: lxkrZdZTQfNy8GdjTxH_PJbESrM.mft (raw, json)
Hash identifier: coVgXpGl1Uj7SUIWufyw1i35AkPtfgULBtxiYujl5us=
Subject key identifier: B7:41:A3:A1:E3:07:98:DC:22:34:68:C2:95:B0:3E:E9:7B:6D:0E:4F
Authority key identifier: 97:19:2B:65:D6:53:41:F3:72:F0:67:63:4F:11:FF:3C:96:C4:4A:B3
Certificate issuer: /CN=97192b65d65341f372f067634f11ff3c96c44ab3
Certificate serial: 01A0EBF9F19C97BAF369D6543271B94A9DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
Manifest number: 01AC
Signing time: Tue 29 Sep 2026 07:03:40 +0000
Manifest this update: Tue 29 Sep 2026 07:03:40 +0000
Manifest next update: Wed 30 Sep 2026 07:03:40 +0000
Files and hashes: 1: lxkrZdZTQfNy8GdjTxH_PJbESrM.crl (hash: q0DmAiy3jjB6da66WDIPo1gpz8SynCenMgvNY8vFJjU=)
2: wn0IY0Am8dbWKWFYL-XocK9wI1M.roa (hash: f5YL150E3HRR/Y+EFdyKEJdNywzJxXemEPh++b/gfAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:03:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f9:f1:9c:97:ba:f3:69:d6:54:32:71:b9:4a:9d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97192b65d65341f372f067634f11ff3c96c44ab3
Validity
Not Before: Sep 29 07:03:40 2026 GMT
Not After : Sep 30 07:03:40 2026 GMT
Subject: CN=b741a3a1e30798dc223468c295b03ee97b6d0e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:fc:35:8f:6d:aa:bc:05:90:60:fc:42:a8:
13:a5:57:6b:ef:16:3a:45:56:c5:6a:7f:b9:8e:79:
2f:d3:98:fc:b1:94:c4:2d:ae:8e:0c:e9:e1:2d:fc:
11:5e:bf:69:ad:1d:ff:63:14:78:d3:09:41:f6:d2:
79:3a:6f:d1:5f:08:80:0b:17:0e:f9:7f:a7:4b:a2:
1b:a2:5c:91:44:be:de:49:aa:08:bf:cd:85:98:90:
57:96:30:42:89:c9:ce:b3:19:f4:b2:9b:ea:9c:fa:
03:4f:ab:c0:2d:4f:a1:be:39:22:70:bc:89:3f:ef:
04:2c:90:e3:c4:22:a2:d0:aa:48:50:cb:92:e9:28:
c2:63:55:e2:20:74:c5:2b:6e:a5:e0:01:c4:3c:f2:
24:d2:8b:76:9f:0e:28:78:3a:58:fa:00:80:7a:3e:
f8:2f:b2:a3:a9:32:d4:47:ff:6e:dc:d9:c2:e9:ec:
b3:9a:e4:60:6a:eb:cd:2b:bb:07:5f:62:e0:ed:2b:
e2:f8:52:9a:7b:97:42:f2:95:2a:23:06:36:bd:0b:
f8:2f:5e:57:c3:20:3d:b5:42:b0:62:d2:68:a2:74:
64:06:8c:09:ef:06:77:42:4f:a0:8d:3d:dc:05:1d:
6d:f3:8b:88:39:27:41:45:7e:1b:54:58:93:df:87:
03:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:41:A3:A1:E3:07:98:DC:22:34:68:C2:95:B0:3E:E9:7B:6D:0E:4F
X509v3 Authority Key Identifier:
keyid:97:19:2B:65:D6:53:41:F3:72:F0:67:63:4F:11:FF:3C:96:C4:4A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:89:c6:f4:ec:49:72:35:6e:21:e0:e1:9d:ec:5e:37:67:21:
c6:d4:3c:a8:a1:51:4e:ee:9e:5e:26:2d:81:3d:85:c4:3f:b8:
c9:e0:b1:fe:4e:8b:79:bb:c1:04:55:2f:14:61:c7:02:a6:e6:
dd:d1:c9:ed:99:52:68:a2:72:99:b4:40:4c:d6:37:ef:7b:98:
8b:0c:f6:44:69:04:cd:84:93:eb:98:c4:35:76:a5:f8:5f:be:
54:97:5d:22:90:6d:1f:85:86:a6:35:e1:f6:4a:85:ed:42:92:
f4:f3:83:5f:39:32:fe:33:24:15:75:74:79:ef:fe:04:8a:b6:
1f:92:11:5a:b8:38:f5:4c:cc:8a:d8:b8:ec:a5:3b:a5:6f:a4:
c3:58:0f:d0:f8:9e:3c:fe:c7:2c:77:64:ae:2f:4b:eb:21:b0:
3d:65:d3:dd:80:ff:f8:b3:bc:15:71:f3:8b:13:a0:fb:e1:15:
9f:c2:a5:17:95:8a:95:b5:27:63:a6:34:8e:5d:6c:8c:85:68:
fc:fc:6d:c6:0f:b2:9d:fc:6b:75:27:eb:b4:71:73:4b:0c:91:
8c:9e:60:59:16:5a:78:6f:96:87:cd:ae:4c:1b:ef:2d:ef:a8:
bd:db:71:8e:11:7b:95:88:18:27:86:8b:ad:6f:31:e3:24:d9:
aa:01:67:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:51:41 2026 by rpki-client