Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
File: LxiqH1XWNcliBMp5qCmT-87BUSw.mft (raw, json)
Hash identifier: CIf3nIsgT9iEOgS99qfO43x/Vros42XJyJ2Yi4qkOXc=
Subject key identifier: 41:ED:80:E1:FE:85:5E:47:BD:5A:B9:12:C5:E0:77:67:73:A3:A3:0B
Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Certificate serial: 019D2BF3362F74570ACA8A0E58E9849DFD48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 21:00:52 +0000
Manifest this update: Thu 26 Mar 2026 21:00:52 +0000
Manifest next update: Fri 27 Mar 2026 21:00:52 +0000
Files and hashes: 1: LgLEIgozDh6ZtieL7JWKGQ61yzE.roa (hash: BgRl5tIbVsSwLTDHr7kVBjnhqq09mtoEkAcyM+VA2Ws=)
2: LxiqH1XWNcliBMp5qCmT-87BUSw.crl (hash: 9aEVllpSNv9tWKz7Cnzv0z2pRwEFwc6P95+Fu56KZG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f3:36:2f:74:57:0a:ca:8a:0e:58:e9:84:9d:fd:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Validity
Not Before: Mar 26 21:00:52 2026 GMT
Not After : Mar 27 21:00:52 2026 GMT
Subject: CN=41ed80e1fe855e47bd5ab912c5e0776773a3a30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b5:e6:d7:6c:89:45:1b:b8:be:a3:5c:d3:c9:
10:d3:f2:ed:cb:ee:ec:99:ce:2a:59:c4:79:80:48:
68:3b:a5:c4:c9:bc:b5:9c:b8:82:da:9b:f4:7c:ec:
f0:a0:b2:f7:cc:16:2c:9a:10:89:40:90:72:95:df:
19:9a:79:25:2a:45:c2:8c:1b:8d:f4:3c:02:80:81:
2b:b9:37:23:30:af:47:6e:8a:c3:a5:2b:07:88:d5:
de:e5:cc:83:1b:ba:e6:9b:6c:58:61:f2:45:db:e1:
0b:7a:a0:fe:92:df:7c:b1:55:72:40:6c:11:63:8f:
42:86:24:2e:e1:4c:65:92:dd:9e:bd:b7:54:27:0f:
cb:66:df:fc:5d:fc:17:f3:4b:99:3a:8d:71:9e:32:
fc:f3:4e:d3:3c:ec:1b:54:00:ac:3b:2e:78:9e:18:
ec:8b:bd:63:4e:cd:fc:2a:ff:04:30:d2:95:b6:b5:
ea:10:db:52:af:6d:c4:d8:41:7f:a0:c0:66:b7:ed:
a6:df:bf:c3:49:15:1d:e4:4a:c0:69:54:ce:56:60:
ce:7d:94:7a:b8:36:7f:c8:de:18:2d:8c:bf:f1:43:
97:c1:fd:e7:f9:41:32:48:dd:60:58:a4:df:f6:15:
b5:40:ff:c7:ff:b8:6a:2e:f3:4c:22:e4:6e:39:43:
a6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:ED:80:E1:FE:85:5E:47:BD:5A:B9:12:C5:E0:77:67:73:A3:A3:0B
X509v3 Authority Key Identifier:
keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b7:d2:6f:14:d7:77:0b:36:92:a7:2d:bd:c9:19:51:6d:99:
84:b1:fc:28:6b:4b:df:86:84:53:c4:ac:67:ea:ad:61:8c:12:
c8:63:08:74:c5:d2:70:bf:02:87:ec:2e:c2:3c:ee:21:dc:09:
3f:7b:e3:65:cf:44:67:26:c4:03:d8:02:cd:e8:8b:8a:ea:a6:
e1:12:3f:0e:a6:15:d2:06:e2:47:29:5b:44:cd:8d:9f:e5:76:
07:cd:0f:c1:a2:c9:56:9a:49:db:14:d0:93:16:25:18:3a:fc:
b0:59:aa:fd:f5:1c:96:1f:72:d3:c0:cf:64:22:01:be:8d:af:
05:e4:e6:1d:21:3a:83:e4:4a:28:cd:78:22:7d:1b:90:09:33:
8f:8e:2f:65:f7:40:e5:3e:3d:c0:5e:bd:bc:66:83:b5:4f:40:
cd:af:a1:5a:f8:17:94:ec:e3:cc:95:13:a2:09:9d:a3:99:15:
a0:07:7c:52:66:27:45:a9:9b:35:e0:a2:16:76:52:83:29:7d:
bb:c2:b6:b4:e4:f6:9b:9b:11:dc:a8:da:db:60:fc:2f:e9:d8:
c8:d2:45:e2:fe:2d:98:29:ec:9a:e5:72:88:95:d4:70:bf:22:
d3:fb:9b:c3:1b:8d:62:1f:d8:d8:06:c9:6e:c9:f1:2d:b1:7b:
1d:4a:ab:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:03:08 2026 by rpki-client