Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
File: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft (raw, json)
Hash identifier: IuaKlgDCYUuY/i0FnQVm/jSSqiLqUikMTKkQISOqLmo=
Subject key identifier: 2B:89:23:21:9E:9C:88:76:54:E1:88:C2:17:B9:C9:0F:33:A8:5D:70
Authority key identifier: 97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12
Certificate issuer: /CN=97102c693af3a090f8f94ba1fd082db0924eaf12
Certificate serial: 019D281679C5471257766A9D2B0C9D527BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 03:00:54 +0000
Manifest this update: Thu 26 Mar 2026 03:00:54 +0000
Manifest next update: Fri 27 Mar 2026 03:00:54 +0000
Files and hashes: 1: Gv_wNpXfpWq-q_UPRh3AwBy396o.roa (hash: mb+6Z361/RYrR2bM4P/XCXIcCPG1uTGsxi5EGv9l1NI=)
2: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl (hash: N1wvTroHecqoS+POzo0yL72iNsFi+iJR7nL9ZwuX1Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:79:c5:47:12:57:76:6a:9d:2b:0c:9d:52:7b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97102c693af3a090f8f94ba1fd082db0924eaf12
Validity
Not Before: Mar 26 03:00:54 2026 GMT
Not After : Mar 27 03:00:54 2026 GMT
Subject: CN=2b8923219e9c887654e188c217b9c90f33a85d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:21:10:99:14:73:e3:c2:2b:e3:79:30:9d:
07:43:5e:95:96:6c:d4:c9:95:53:5d:d8:73:68:28:
d5:22:b7:00:b6:04:be:b7:0e:3c:de:26:f2:41:47:
de:6a:f8:04:12:55:38:18:08:9c:f0:0e:7d:b7:de:
90:42:c3:36:72:26:3b:8f:29:1f:3d:0f:9c:f5:21:
48:d9:8f:4c:91:ef:3f:6a:c5:ff:19:d7:84:85:56:
0d:f9:d8:38:0b:0c:2f:ad:b0:04:c2:63:b1:01:c9:
73:55:c8:84:3e:f4:d4:60:8b:e9:0c:fb:56:a7:83:
39:4a:d3:5f:4d:c9:28:98:be:db:b8:47:04:32:27:
6e:7a:b4:d7:d4:16:89:c7:4b:c3:6c:11:76:70:51:
7c:f9:60:1f:7f:72:03:42:fe:bc:fa:9b:04:6e:f8:
34:41:69:9a:15:4b:fe:77:f9:4a:a9:80:6b:f5:55:
72:b9:4e:5d:f2:4e:4d:c3:de:63:d6:d1:e6:99:d3:
b6:e1:2d:a0:e8:82:08:4b:9d:b9:af:da:ac:3b:23:
2c:2b:73:b4:14:02:86:90:bc:b8:c6:63:dd:f9:0f:
d0:1d:bb:2b:78:23:3c:57:73:e5:ec:d6:d8:80:a4:
0c:c0:86:81:b6:de:d3:74:fb:db:90:86:db:e3:5a:
e8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:89:23:21:9E:9C:88:76:54:E1:88:C2:17:B9:C9:0F:33:A8:5D:70
X509v3 Authority Key Identifier:
keyid:97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:83:4c:a4:80:90:99:08:78:7e:26:21:c0:c0:c8:c4:2a:46:
78:51:6b:9a:a2:c8:b0:5d:91:5d:d7:28:00:43:de:9b:a0:32:
e6:07:e3:27:ca:bd:90:e1:1f:65:8e:c8:35:43:9e:44:35:7b:
97:33:3f:17:b7:1b:47:59:4d:10:dc:3f:90:98:5f:5c:0f:0e:
b5:dc:9d:5f:ba:71:c5:71:f7:54:0e:33:f7:c2:06:57:7a:a5:
32:9f:97:67:db:d3:58:5a:36:24:a1:ac:c9:57:34:e1:b5:c8:
06:1a:d7:53:db:05:fe:fb:bd:b0:c2:43:97:08:10:0f:77:f4:
57:25:94:35:a5:98:71:9c:8b:b2:05:3f:db:54:8b:20:ab:fa:
24:fa:bf:d6:16:bc:3f:29:e9:a6:ad:af:ec:7a:58:85:a1:07:
c7:eb:d0:46:5c:88:6a:14:b0:e8:36:8f:89:46:fa:54:a4:97:
b7:d3:6e:11:9d:eb:9a:24:f6:00:fd:c4:2e:51:a5:f3:0c:7b:
7e:06:9a:6e:7f:a6:76:67:77:66:4e:3d:de:65:bc:3f:87:5c:
ac:85:b7:99:4c:2b:ea:d0:a5:71:37:f9:40:5b:92:32:13:37:
fa:42:cb:bb:8f:e9:04:95:8e:96:20:02:a3:a6:da:e4:7e:52:
54:7c:47:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFnnFRxJXdmqdKwydUnv+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MTAyYzY5M2FmM2EwOTBmOGY5NGJhMWZkMDgyZGIwOTI0
ZWFmMTIwHhcNMjYwMzI2MDMwMDU0WhcNMjYwMzI3MDMwMDU0WjAzMTEwLwYDVQQD
EygyYjg5MjMyMTllOWM4ODc2NTRlMTg4YzIxN2I5YzkwZjMzYTg1ZDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzchEJkUc+PCK+N5MJ0HQ16VlmzU
yZVTXdhzaCjVIrcAtgS+tw483ibyQUfeavgEElU4GAic8A59t96QQsM2ciY7jykf
PQ+c9SFI2Y9Mke8/asX/GdeEhVYN+dg4CwwvrbAEwmOxAclzVciEPvTUYIvpDPtW
p4M5StNfTckomL7buEcEMiduerTX1BaJx0vDbBF2cFF8+WAff3IDQv68+psEbvg0
QWmaFUv+d/lKqYBr9VVyuU5d8k5Nw95j1tHmmdO24S2g6IIIS525r9qsOyMsK3O0
FAKGkLy4xmPd+Q/QHbsreCM8V3Pl7NbYgKQMwIaBtt7TdPvbkIbb41rohwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuJIyGenIh2VOGIwhe5yQ8zqF1wMB8GA1UdIwQY
MBaAFJcQLGk686CQ+PlLof0ILbCSTq8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84ZGRhNDgtZTg0Yi00Y2E3LWFhZjQt
ZjUzZWY1MjFkYmUwLzEvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS84ZGRhNDgtZTg0Yi00Y2E3LWFhZjQtZjUzZWY1MjFkYmUw
LzEvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADINMpICQ
mQh4fiYhwMDIxCpGeFFrmqLIsF2RXdcoAEPem6Ay5gfjJ8q9kOEfZY7INUOeRDV7
lzM/F7cbR1lNENw/kJhfXA8OtdydX7pxxXH3VA4z98IGV3qlMp+XZ9vTWFo2JKGs
yVc04bXIBhrXU9sF/vu9sMJDlwgQD3f0VyWUNaWYcZyLsgU/21SLIKv6JPq/1ha8
Pynppq2v7HpYhaEHx+vQRlyIahSw6DaPiUb6VKSXt9NuEZ3rmiT2AP3ELlGl8wx7
fgaabn+mdmd3Zk493mW8P4dcrIW3mUwr6tClcTf5QFuSMhM3+kLLu4/pBJWOliAC
o6ba5H5SVHxHsA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:39 2026 by rpki-client