Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
File: lxkrZdZTQfNy8GdjTxH_PJbESrM.mft (raw, json)
Hash identifier: mYq7yc1vwnLkAK+5B9gedv7UAyHqV1DvRNQzjfvwl94=
Subject key identifier: 51:6E:B9:F9:38:78:1E:A3:3C:2B:24:30:14:7F:6D:8D:CF:F2:B4:8E
Authority key identifier: 97:19:2B:65:D6:53:41:F3:72:F0:67:63:4F:11:FF:3C:96:C4:4A:B3
Certificate issuer: /CN=97192b65d65341f372f067634f11ff3c96c44ab3
Certificate serial: 019F9436AB3BB0B95CE32981DC1D9B99C96A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
Manifest number: FA
Signing time: Fri 24 Jul 2026 13:00:38 +0000
Manifest this update: Fri 24 Jul 2026 13:00:38 +0000
Manifest next update: Sat 25 Jul 2026 13:00:38 +0000
Files and hashes: 1: lxkrZdZTQfNy8GdjTxH_PJbESrM.crl (hash: cpHtAXKnKcZb29TnwT+/ZH/reVbpjMMGc2xnPcWE8ZI=)
2: wn0IY0Am8dbWKWFYL-XocK9wI1M.roa (hash: f5YL150E3HRR/Y+EFdyKEJdNywzJxXemEPh++b/gfAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:ab:3b:b0:b9:5c:e3:29:81:dc:1d:9b:99:c9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97192b65d65341f372f067634f11ff3c96c44ab3
Validity
Not Before: Jul 24 13:00:38 2026 GMT
Not After : Jul 25 13:00:38 2026 GMT
Subject: CN=516eb9f938781ea33c2b2430147f6d8dcff2b48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:4e:1c:9d:f2:b4:6a:42:a9:80:10:0e:9f:
19:0e:d7:e6:db:e4:9b:96:8b:81:74:c6:3d:40:0c:
99:65:2a:2a:54:7b:b9:39:0e:e6:00:92:49:ac:9e:
a4:c5:03:fc:cc:c0:17:67:c3:d9:19:a7:77:d7:e7:
30:63:b3:61:ad:3a:3c:f6:be:56:28:0a:56:56:a2:
73:fd:0b:9f:57:dc:f5:c2:06:53:ec:71:0c:dd:dd:
11:0d:b3:09:19:89:b9:9c:3b:c8:e4:3a:8b:75:b4:
a4:aa:6d:3f:86:dd:89:91:5e:f3:8a:40:3b:8b:06:
b5:5f:04:39:b2:36:9e:bf:b9:3d:12:82:d5:0a:da:
36:14:90:16:19:c6:5a:33:68:bc:0e:be:97:eb:7f:
ea:b8:f1:a2:a2:7c:20:dd:f9:01:42:58:10:13:40:
dd:79:2c:ba:93:0a:1c:45:48:42:3e:4e:a4:1d:34:
2f:fa:05:be:63:76:1d:20:cb:77:cb:92:3b:17:49:
08:2f:bb:b1:e9:f3:cb:ff:19:af:96:ad:4b:24:de:
2c:38:64:e8:66:8e:46:3e:cf:6e:6a:fe:cc:5f:c8:
72:b7:2b:cf:16:2c:8a:31:f5:d1:fc:7b:0b:5c:2d:
a6:b0:d7:d9:fc:fc:99:c4:07:e2:79:f5:d2:89:9f:
d0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6E:B9:F9:38:78:1E:A3:3C:2B:24:30:14:7F:6D:8D:CF:F2:B4:8E
X509v3 Authority Key Identifier:
keyid:97:19:2B:65:D6:53:41:F3:72:F0:67:63:4F:11:FF:3C:96:C4:4A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:95:c4:92:61:94:a0:a4:87:06:a6:80:2f:89:d3:9b:7c:37:
23:c1:f4:ea:d1:77:e2:5c:96:13:ec:1c:a7:f9:ce:66:f7:a6:
d7:f9:54:db:b1:9f:59:41:8c:00:9d:6b:0f:af:6d:d2:d1:ed:
5f:cb:82:8b:91:59:da:f4:45:75:d8:ee:eb:ee:a1:49:68:e6:
ab:fe:61:32:b7:2a:80:59:14:a3:40:47:28:42:61:85:eb:79:
0e:ac:f2:04:48:db:71:ee:97:d3:2e:e3:8a:55:67:f1:0d:4f:
b6:21:95:2d:37:15:94:53:8e:82:fb:c3:eb:70:d2:6d:2c:40:
9d:e4:0f:a0:e1:ed:cc:a4:4f:88:9c:e8:07:7b:f7:0d:45:a6:
35:88:bb:06:a2:f3:ac:f9:7a:42:85:d6:83:ca:0b:c0:b5:c6:
85:e8:3d:43:e0:b0:bc:d0:ab:00:dd:fa:5c:58:7f:ae:b2:f7:
1b:14:d5:9a:f1:b5:da:54:b8:1f:6a:bf:d9:88:4b:4e:8d:36:
52:fa:c9:9c:d3:02:e7:60:33:f6:0c:fe:1a:3a:5a:2b:75:7c:
14:10:ce:22:61:f1:df:e7:90:cf:af:e0:2c:30:91:8e:08:5e:
bd:7b:33:bf:d8:72:23:04:0c:5f:d8:12:04:d4:a5:83:9c:19:
e5:28:2d:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UNqs7sLlc4ymB3B2bmclqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MTkyYjY1ZDY1MzQxZjM3MmYwNjc2MzRmMTFmZjNjOTZj
NDRhYjMwHhcNMjYwNzI0MTMwMDM4WhcNMjYwNzI1MTMwMDM4WjAzMTEwLwYDVQQD
Eyg1MTZlYjlmOTM4NzgxZWEzM2MyYjI0MzAxNDdmNmQ4ZGNmZjJiNDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArodOHJ3ytGpCqYAQDp8ZDtfm2+Sb
louBdMY9QAyZZSoqVHu5OQ7mAJJJrJ6kxQP8zMAXZ8PZGad31+cwY7NhrTo89r5W
KApWVqJz/QufV9z1wgZT7HEM3d0RDbMJGYm5nDvI5DqLdbSkqm0/ht2JkV7zikA7
iwa1XwQ5sjaev7k9EoLVCto2FJAWGcZaM2i8Dr6X63/quPGionwg3fkBQlgQE0Dd
eSy6kwocRUhCPk6kHTQv+gW+Y3YdIMt3y5I7F0kIL7ux6fPL/xmvlq1LJN4sOGTo
Zo5GPs9uav7MX8hytyvPFiyKMfXR/HsLXC2msNfZ/PyZxAfiefXSiZ/QbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFuufk4eB6jPCskMBR/bY3P8rSOMB8GA1UdIwQY
MBaAFJcZK2XWU0HzcvBnY08R/zyWxEqzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhrclpkWlRRZk55OEdkalR4SF9QSmJFU3JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81MTJmNjQtMjBhNS00YzM3LTliNmIt
ODExMDQ3NThjOTNjLzEvbHhrclpkWlRRZk55OEdkalR4SF9QSmJFU3JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81MTJmNjQtMjBhNS00YzM3LTliNmItODExMDQ3NThjOTNj
LzEvbHhrclpkWlRRZk55OEdkalR4SF9QSmJFU3JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJXEkmGU
oKSHBqaAL4nTm3w3I8H06tF34lyWE+wcp/nOZvem1/lU27GfWUGMAJ1rD69t0tHt
X8uCi5FZ2vRFddju6+6hSWjmq/5hMrcqgFkUo0BHKEJhhet5DqzyBEjbce6X0y7j
ilVn8Q1PtiGVLTcVlFOOgvvD63DSbSxAneQPoOHtzKRPiJzoB3v3DUWmNYi7BqLz
rPl6QoXWg8oLwLXGheg9Q+CwvNCrAN36XFh/rrL3GxTVmvG12lS4H2q/2YhLTo02
UvrJnNMC52Az9gz+GjpaK3V8FBDOImHx3+eQz6/gLDCRjghevXszv9hyIwQMX9gS
BNSlg5wZ5SgtQA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:04:29 2026 by rpki-client