Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
File: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft (raw, json)
Hash identifier: YAodPS8148tEKRS4p/P849NUIDRGfEffiB+erRedRLw=
Subject key identifier: 7F:A8:E5:68:B8:0E:C8:76:E4:D6:EB:97:86:B4:E2:B2:1E:22:E8:8D
Authority key identifier: 97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4
Certificate issuer: /CN=971533cb7a6796ac5c382b38dcf459f9176931f4
Certificate serial: 019D27A8A18D61DD861F6EEB1A8BE9B195D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
Manifest number: 0933
Signing time: Thu 26 Mar 2026 01:00:55 +0000
Manifest this update: Thu 26 Mar 2026 01:00:55 +0000
Manifest next update: Fri 27 Mar 2026 01:00:55 +0000
Files and hashes: 1: JmkFCABPoX7SZe-QwBD6PChOSGk.roa (hash: xzMASuZ9G8RWkd86x5BZTykE+oySkmLx0mmIPA2Mdbo=)
2: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl (hash: +botnZFCpwCGCeLyX8VfxRo52xJzyxmEoTM0DJ6FT38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a1:8d:61:dd:86:1f:6e:eb:1a:8b:e9:b1:95:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971533cb7a6796ac5c382b38dcf459f9176931f4
Validity
Not Before: Mar 26 01:00:55 2026 GMT
Not After : Mar 27 01:00:55 2026 GMT
Subject: CN=7fa8e568b80ec876e4d6eb9786b4e2b21e22e88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8a:a5:0c:02:22:8d:f4:a7:83:d9:4d:a1:94:
40:aa:3d:6c:41:d0:3f:aa:11:dc:fc:87:fc:3c:21:
c7:52:64:9d:36:70:49:ea:cb:2d:00:46:c7:fb:e7:
c7:88:bd:68:d6:72:6c:86:89:da:c9:a4:0d:ba:35:
29:9a:34:2d:ed:6a:48:02:5b:fa:9b:ad:e2:e2:e1:
d6:b3:d4:70:0c:91:a7:89:97:54:67:ff:5f:a7:bf:
a8:9e:a7:18:3c:fa:b0:4a:9d:38:6c:bd:90:07:aa:
53:c6:08:40:f9:b2:2a:8f:f3:ec:9d:99:10:02:8b:
77:65:1d:79:02:40:7d:51:de:93:5e:e5:51:85:c2:
41:fd:a0:54:df:ef:cd:67:9f:22:31:a0:f9:a8:6b:
c9:dd:e5:9f:74:64:49:60:ff:2c:0d:df:3b:30:d2:
68:18:75:6b:4d:8d:02:ad:09:2c:b9:a5:59:4c:68:
51:00:cd:2e:67:d1:7d:61:dc:78:b3:f1:24:7b:c9:
f0:55:21:e4:fa:46:32:b8:58:05:0c:05:6f:5e:69:
0b:2f:bd:44:89:5f:74:0f:d3:35:af:6a:e5:e0:4e:
d6:5e:2c:26:f5:db:51:d7:f0:c6:11:19:4a:9c:b4:
a5:6a:ce:e3:bc:0e:59:a6:00:af:ea:6d:ba:75:ce:
8a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A8:E5:68:B8:0E:C8:76:E4:D6:EB:97:86:B4:E2:B2:1E:22:E8:8D
X509v3 Authority Key Identifier:
keyid:97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:eb:fa:b6:de:21:a1:fc:1d:e3:89:bb:90:eb:93:aa:1e:f9:
a3:bd:21:66:64:51:45:8d:ff:91:b4:a8:d2:ee:ba:26:3f:11:
55:51:aa:29:dd:9d:9b:ae:4a:93:8e:3b:91:52:9f:b7:45:fa:
ef:b5:5f:4c:f7:c5:36:3b:1a:fe:23:eb:b4:db:69:c7:b9:5c:
6b:48:09:66:5b:b2:7d:33:d9:60:df:cc:23:db:d4:67:ab:aa:
0c:f8:26:cd:00:8d:82:a3:52:c1:be:46:75:24:49:0e:cc:71:
d0:9f:94:47:95:bb:d1:52:44:1f:3d:ac:fc:0d:39:cb:12:25:
48:7a:70:b3:73:fc:67:39:21:36:d5:cc:13:0e:04:85:0b:11:
27:3e:8a:ce:5e:d0:cb:bf:5a:07:a0:66:7c:7a:14:04:1c:8a:
f7:49:40:3f:da:73:ef:69:e4:ab:b2:09:d4:62:60:d1:00:d2:
54:83:ec:65:bb:e9:80:9d:81:40:90:bd:16:83:c8:6b:9f:41:
2b:08:83:f6:f4:94:a9:4a:c2:55:33:d8:bb:55:21:bf:c8:22:
2e:fa:57:18:89:22:60:68:2d:c0:da:78:88:e0:bf:a1:e9:f3:
bc:74:e2:aa:73:fd:6d:48:12:de:2d:02:5e:ea:6e:9d:06:e8:
a6:c5:bc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:07 2026 by rpki-client