Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
File: LxiqH1XWNcliBMp5qCmT-87BUSw.mft (raw, json)
Hash identifier: 8N9O0ZKHaOUHiVJxymiumR8LVqMccVTnTpvnWQX01ns=
Subject key identifier: 6D:F8:D3:88:D9:CC:6E:63:B9:D0:14:DF:F0:69:79:0B:09:FC:59:C1
Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Certificate serial: 01A0E02AC673C7655BA3EAC79F259A559386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
Manifest number: 1A75
Signing time: Sun 27 Sep 2026 00:01:34 +0000
Manifest this update: Sun 27 Sep 2026 00:01:34 +0000
Manifest next update: Mon 28 Sep 2026 00:01:34 +0000
Files and hashes: 1: LgLEIgozDh6ZtieL7JWKGQ61yzE.roa (hash: BgRl5tIbVsSwLTDHr7kVBjnhqq09mtoEkAcyM+VA2Ws=)
2: LxiqH1XWNcliBMp5qCmT-87BUSw.crl (hash: olBEib4bhzhJFTyswRK0W/CUs10NQaLrcX4WdokIGHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:c6:73:c7:65:5b:a3:ea:c7:9f:25:9a:55:93:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Validity
Not Before: Sep 27 00:01:34 2026 GMT
Not After : Sep 28 00:01:34 2026 GMT
Subject: CN=6df8d388d9cc6e63b9d014dff069790b09fc59c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8d:7b:fe:a7:0d:fa:85:cd:69:a6:30:09:c4:
3b:5f:91:25:f2:fe:59:87:96:10:67:5b:9a:e1:74:
fc:f8:43:43:35:de:db:40:5b:9d:8b:e8:cf:67:e3:
1a:d0:ef:95:9c:3c:ab:b3:3f:22:e0:31:e5:8a:9c:
6f:0c:ab:dc:54:7a:30:e0:49:80:d1:b1:22:c6:a4:
c2:ba:1c:60:1a:7c:e4:5a:1c:81:12:37:3e:c6:ab:
bc:07:fe:da:7a:b8:ed:6b:3e:f1:d8:01:fc:16:9b:
a4:33:38:94:c1:e3:e9:3f:89:ee:7d:9f:e0:cd:46:
cd:39:a0:f3:14:db:32:87:07:2d:49:e3:dd:96:a5:
9b:4f:30:48:6d:ee:29:18:11:4f:37:f9:11:c5:bf:
c0:74:ac:7a:71:50:3b:2d:c5:0d:ee:7d:2e:5f:31:
b3:03:fd:d1:b2:6b:ab:4c:cc:e9:88:b3:b4:76:1c:
cb:d2:83:47:5b:a7:bb:45:07:99:4d:2c:2e:3d:bd:
72:66:28:5e:70:ae:85:cf:de:62:16:3c:0c:10:c6:
0e:17:57:b2:1b:e5:b1:2f:12:b5:76:a6:b8:81:04:
f6:8c:37:57:b0:cf:45:01:38:b0:38:b9:9f:60:ce:
79:63:f5:49:8c:ec:c2:7d:fc:42:6f:75:e5:2f:08:
55:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F8:D3:88:D9:CC:6E:63:B9:D0:14:DF:F0:69:79:0B:09:FC:59:C1
X509v3 Authority Key Identifier:
keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b4:d4:fb:b5:58:e6:2d:23:a9:87:60:a4:8e:b7:bd:ca:50:
63:0d:d5:42:a3:4c:6a:92:58:6c:a7:df:7d:da:c2:d8:06:4f:
00:5d:80:2b:64:cf:c8:81:e1:1e:7e:28:b0:7e:f2:70:d4:4e:
80:17:c5:a5:11:fd:04:9d:fb:f6:89:f6:4f:35:79:29:bc:a4:
18:f0:e4:ec:cd:1e:47:12:ae:47:a2:82:89:86:34:d7:40:98:
7e:ba:22:db:5d:e5:c8:a4:da:98:83:7f:ee:0a:b9:cd:f7:b7:
9f:76:74:3f:2d:f0:ba:f8:82:c5:a3:12:0c:53:fa:16:9b:b8:
f5:49:1e:54:c9:3a:23:ec:0a:70:cf:f1:6d:11:74:f6:af:5d:
1e:e8:a9:37:0c:0d:ff:c1:1a:ae:fc:21:1f:6b:36:a7:4e:3f:
2f:a5:f3:fa:e6:42:c7:85:51:64:1b:03:82:70:a7:64:49:94:
94:65:e5:7e:8e:78:7c:0b:41:ea:8c:34:a6:bf:eb:d0:f9:1a:
7b:e4:43:18:9d:e8:db:fd:a8:f4:8b:4a:7b:d2:44:1b:cf:19:
bd:99:e1:a1:87:40:bc:e9:88:1a:8b:3c:d8:b2:a2:db:a6:d4:
95:e0:c6:32:bf:1d:9a:c0:12:be:24:da:c3:3a:ac:37:4e:86:
62:1c:41:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:30:14 2026 by rpki-client