Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft
File: Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft (raw, json)
Hash identifier: p/NKo1OZpUbRXxlmSuzE/9MvCLCKnS85pRSNqQtCJmo=
Subject key identifier: 74:5C:72:2A:2F:B2:2A:5C:12:93:68:0E:22:B0:52:02:C0:11:58:32
Authority key identifier: 2F:1B:39:F7:F0:A9:E6:2A:A0:60:49:B8:CC:A3:0D:22:F5:2D:04:35
Certificate issuer: /CN=2f1b39f7f0a9e62aa06049b8cca30d22f52d0435
Certificate serial: 019D2AE02422F9CE891624124CCD97971AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft
Manifest number: 0CE7
Signing time: Thu 26 Mar 2026 16:00:25 +0000
Manifest this update: Thu 26 Mar 2026 16:00:25 +0000
Manifest next update: Fri 27 Mar 2026 16:00:25 +0000
Files and hashes: 1: Lxs59_Cp5iqgYEm4zKMNIvUtBDU.crl (hash: VN4hjctPPwGL/EZ93vg07sk1tTszCtNdA2rdVfHUt14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:24:22:f9:ce:89:16:24:12:4c:cd:97:97:1a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1b39f7f0a9e62aa06049b8cca30d22f52d0435
Validity
Not Before: Mar 26 16:00:25 2026 GMT
Not After : Mar 27 16:00:25 2026 GMT
Subject: CN=745c722a2fb22a5c1293680e22b05202c0115832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:ba:ac:ef:c0:d6:d0:65:70:ef:1b:fa:82:
1f:ee:36:34:04:ac:d1:0f:90:22:4b:9a:26:5b:44:
2a:ef:f3:b6:ca:9d:a2:3c:40:b5:99:f9:6f:0b:e0:
eb:02:c7:d7:60:a9:aa:d9:97:55:21:5f:b9:7e:56:
65:60:06:b4:74:d6:c0:b0:9b:66:b1:a2:80:20:1e:
f5:9d:da:1b:19:7a:0e:ed:ba:da:6d:c3:20:e2:2f:
ba:a0:83:6f:af:26:52:a7:3e:ae:9a:a0:20:5d:2e:
d9:ce:ab:c7:3c:98:e8:83:45:f6:50:6e:3a:ff:68:
78:3e:1e:74:18:c6:ca:66:99:db:d4:fa:88:b1:8a:
96:c1:2f:e5:47:da:2b:39:07:87:73:57:39:07:22:
c9:4d:f7:90:84:b9:b1:ea:b9:d3:30:1c:a7:3e:44:
67:69:d3:a5:5b:73:51:a2:64:0c:ec:7f:fe:a4:f8:
f5:3d:e8:93:73:fc:97:d3:c0:1a:e9:ba:7d:ba:be:
13:2e:52:f0:70:b3:47:91:38:84:20:08:0b:d6:63:
af:5e:5a:99:25:d9:2e:cf:31:d9:72:c8:83:03:fb:
2b:57:05:4e:36:90:ab:f1:67:53:4e:5b:41:9f:9e:
94:0a:0b:46:35:86:2e:e6:91:6e:5a:47:fd:2a:25:
03:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5C:72:2A:2F:B2:2A:5C:12:93:68:0E:22:B0:52:02:C0:11:58:32
X509v3 Authority Key Identifier:
keyid:2F:1B:39:F7:F0:A9:E6:2A:A0:60:49:B8:CC:A3:0D:22:F5:2D:04:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:12:80:36:20:cb:43:7f:8e:f9:18:71:22:dc:59:39:93:52:
d6:cc:bb:6d:8b:31:2d:e0:43:68:c0:c4:14:34:97:72:99:5f:
d0:e9:0d:97:a4:dd:89:cc:1b:60:e7:7d:8b:11:fe:4e:0a:90:
f8:53:91:6d:d1:42:9c:6d:cc:ec:91:60:95:14:74:7d:30:5f:
fa:6c:0b:41:24:70:0d:6f:1c:3a:9b:6a:7c:e3:44:de:26:de:
fd:e2:9e:c7:7a:ac:f0:c4:9d:12:37:15:03:48:53:92:6d:19:
f4:2a:ac:9e:e4:1c:31:b2:79:f6:0b:29:ac:af:40:f8:5a:f0:
e1:70:6f:da:04:9d:bd:35:f0:eb:5d:98:5a:99:3f:60:e2:0b:
33:ce:12:38:d4:20:05:9f:e1:fd:5b:78:34:91:63:5f:da:6e:
16:fd:97:e6:9e:e4:3e:ae:a4:03:69:a0:7a:69:05:a2:2d:8e:
d8:1f:90:f1:c4:74:64:71:06:97:f9:ce:94:f1:99:5b:e1:0a:
5a:9e:50:38:84:4d:6d:47:3e:8e:3c:a8:0c:57:26:ea:f0:c4:
9e:b8:2f:48:0c:d5:ae:90:4a:b7:bc:ce:5b:30:2d:50:e7:a8:
5e:6f:25:dc:8c:d2:3f:18:dc:33:2d:b9:54:c4:0a:a4:a0:fb:
8f:03:66:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:12:14 2026 by rpki-client