Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
File: LXR59FZDorguENq_c-_vdwOx4tI.mft (raw, json)
Hash identifier: 88iu3iF4hma/yBdooYb/GIt3RtrzA/e4UyWXQMTSFvM=
Subject key identifier: 95:FC:15:42:34:7F:6D:CB:21:D1:1A:91:D3:BF:65:EA:84:DA:C1:70
Authority key identifier: 2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2
Certificate issuer: /CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2
Certificate serial: 019D284D8CBF526777947A80465ADD58027F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 04:01:03 +0000
Manifest this update: Thu 26 Mar 2026 04:01:03 +0000
Manifest next update: Fri 27 Mar 2026 04:01:03 +0000
Files and hashes: 1: 7GKSUsC2-EZN7XkuEfWum4yKSTg.roa (hash: 0/D0ft4/Akr9FC1mkgoFrsHQKcBzONWj8zopSzgBrVU=)
2: LXR59FZDorguENq_c-_vdwOx4tI.crl (hash: sK4px+UwgucxWa2u9bSEgtSGl8Cjxy3Eg+RpjTqWAQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:8c:bf:52:67:77:94:7a:80:46:5a:dd:58:02:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2
Validity
Not Before: Mar 26 04:01:03 2026 GMT
Not After : Mar 27 04:01:03 2026 GMT
Subject: CN=95fc1542347f6dcb21d11a91d3bf65ea84dac170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ea:6f:34:5b:3c:e8:ae:8f:93:59:6d:b4:62:
34:c8:46:e6:68:7d:5e:ce:88:60:12:60:c1:ee:4c:
ef:fd:db:fc:de:a2:e8:93:23:ba:3d:50:dc:23:e4:
0f:5d:25:2b:ee:f0:98:8b:7f:dc:b4:4c:f2:f5:5d:
c2:21:6d:82:ec:90:ea:1e:93:32:ab:6a:0e:dd:db:
0c:4b:13:1b:5f:68:3d:e3:9e:93:32:7f:0c:a6:31:
92:73:b2:b8:42:dd:cb:88:ee:6b:0c:fa:0d:0c:f0:
24:e8:23:76:37:1c:6f:31:65:3b:0d:60:ec:e5:4a:
d2:15:a4:8d:36:71:54:b4:4b:86:27:a0:c9:38:98:
b7:bc:00:54:15:ff:17:03:22:ff:0e:0b:ff:74:ec:
e5:9c:5c:af:77:33:b6:ef:eb:be:b4:dd:a6:2d:84:
05:47:58:a4:1a:c9:67:9c:07:01:cb:30:e8:1e:a0:
d2:6a:79:83:31:73:95:16:0b:b4:2c:ba:50:9a:e8:
f6:a2:67:23:03:45:97:bc:a5:44:da:5b:5c:40:20:
ee:03:09:76:cb:19:ea:cd:bb:ed:2f:9d:9e:f4:dc:
93:2a:b4:52:72:cf:0c:10:ef:0e:56:59:b8:e9:d1:
51:12:05:72:4d:f7:2c:c2:1e:58:f6:5b:3b:48:3b:
c0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FC:15:42:34:7F:6D:CB:21:D1:1A:91:D3:BF:65:EA:84:DA:C1:70
X509v3 Authority Key Identifier:
keyid:2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:01:ea:f4:ac:80:13:2f:7c:65:ea:15:de:5c:21:23:87:03:
fa:fd:28:03:16:15:02:23:27:ae:e0:19:cb:1d:63:82:d3:08:
de:c6:a7:29:b0:97:bc:85:1c:69:99:70:32:0e:02:e3:22:ad:
9c:d0:0b:49:1a:53:6e:37:d9:9d:52:9e:58:cb:a7:d8:87:ed:
13:7e:89:00:a1:a4:b6:1f:6d:75:ed:ba:1d:83:cd:34:f9:e2:
70:87:49:d6:4c:b5:23:5a:af:05:29:a7:05:1d:e8:19:03:f9:
a2:90:72:01:75:4e:f5:a4:c4:86:93:73:1a:a2:6d:1d:fa:5c:
c9:89:9f:3f:ba:f5:dc:e4:1d:65:da:39:2a:81:78:5d:63:cf:
5a:b8:89:d6:55:68:c6:f7:51:6c:3f:76:1c:27:58:a8:a4:f1:
ca:46:4b:7b:56:f6:61:da:9d:6e:03:cb:26:6a:30:38:ca:f9:
9c:57:2e:d6:bc:da:bd:0d:fd:e2:f8:ec:2e:d6:a5:b2:df:e1:
6e:72:1d:3f:a7:96:dc:cc:83:04:3f:98:55:4e:65:2f:a3:a5:
62:d0:66:77:c2:81:ce:a0:f8:bd:be:09:5c:0c:6e:ab:f8:f1:
d8:79:07:3b:0e:17:16:2f:f5:05:d3:55:1b:64:c6:e5:e2:d1:
95:b0:c0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:12:24 2026 by rpki-client