Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
File: LxiqH1XWNcliBMp5qCmT-87BUSw.mft (raw, json)
Hash identifier: CPFhuWsHRbQtrN6veBtFLgd7kujTk24NFJ+OJvqleLU=
Subject key identifier: 70:F0:68:E2:25:95:60:DE:AE:B8:6F:18:BD:D0:05:AF:8A:4D:58:35
Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Certificate serial: 019F92112CBA73DC1C0266A6F430AC602921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 03:00:26 +0000
Manifest this update: Fri 24 Jul 2026 03:00:26 +0000
Manifest next update: Sat 25 Jul 2026 03:00:26 +0000
Files and hashes: 1: LgLEIgozDh6ZtieL7JWKGQ61yzE.roa (hash: BgRl5tIbVsSwLTDHr7kVBjnhqq09mtoEkAcyM+VA2Ws=)
2: LxiqH1XWNcliBMp5qCmT-87BUSw.crl (hash: GjuKSSqb5dIpoAMECHxDMkh2zBzrGES9WUlc2ry4xfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:2c:ba:73:dc:1c:02:66:a6:f4:30:ac:60:29:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Validity
Not Before: Jul 24 03:00:26 2026 GMT
Not After : Jul 25 03:00:26 2026 GMT
Subject: CN=70f068e2259560deaeb86f18bdd005af8a4d5835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9b:bf:35:ca:8a:aa:e4:32:7a:ca:b5:8a:6d:
e2:b8:4d:f1:81:41:bb:10:37:df:1b:19:c7:97:93:
b8:4c:b7:91:91:78:15:37:53:7b:cd:d3:a8:bd:ba:
fd:b0:dc:62:6e:5e:cc:d0:06:52:24:99:ca:41:af:
e7:71:6a:31:07:1c:f7:17:60:82:d0:2a:90:7e:71:
24:9e:11:b1:ff:c9:a3:bd:43:21:e2:b3:a6:60:9d:
94:0d:e7:67:b0:08:ce:cc:f0:04:a7:fd:4e:34:52:
4f:a1:62:16:4b:6f:8f:d5:80:d2:fe:16:2d:28:07:
24:28:bf:9e:cb:5c:95:fd:54:1a:13:3f:02:2c:88:
69:a4:30:07:44:6f:12:89:01:8e:a6:ce:ce:5b:75:
fa:db:62:e5:a3:60:fb:78:b4:8c:19:c9:6c:13:1c:
6c:ad:c7:0b:d3:81:15:32:97:c9:19:43:0d:c0:99:
42:c2:44:8b:da:87:a6:92:b5:3f:08:6c:53:da:8e:
d8:07:b4:3b:9e:be:22:71:89:fd:61:71:b3:e1:1b:
d4:a5:54:2c:34:11:e6:32:c5:6a:e3:f0:13:c6:f0:
78:91:f0:ab:59:57:89:47:cd:77:b4:6c:94:d6:82:
2e:cc:08:88:89:24:31:cc:bd:36:6b:63:4c:3d:bb:
95:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F0:68:E2:25:95:60:DE:AE:B8:6F:18:BD:D0:05:AF:8A:4D:58:35
X509v3 Authority Key Identifier:
keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:0b:7c:c4:fe:3d:55:db:4a:1c:37:11:a9:57:61:4c:58:ce:
b8:bf:3c:4b:f9:62:37:72:81:54:4d:d6:ef:f5:4a:e2:e6:b3:
6b:cf:62:50:7a:86:33:d7:87:00:09:89:df:2d:7e:b0:b5:78:
e5:d8:25:49:2b:15:4f:e0:a8:64:d7:d6:3b:17:88:f9:20:43:
4b:35:6c:53:61:ed:2a:04:d4:e8:72:2d:48:74:1c:46:de:60:
ae:07:a9:dd:42:d4:99:48:2c:50:7b:6b:37:1c:0c:e9:b7:55:
50:3f:7a:ff:36:21:bd:05:a1:9a:55:c3:e1:9f:b4:59:46:8e:
00:ac:41:bb:67:19:ed:c4:cd:12:f0:30:e4:a0:1b:68:07:14:
57:56:fc:5d:ad:11:91:75:04:4a:6e:e9:de:4f:2b:b8:14:53:
fc:16:af:67:28:ef:0b:8e:45:02:f7:f1:56:1a:c9:17:4e:a6:
f4:50:d0:1e:8f:ad:49:a1:1c:c0:5b:00:fe:32:98:a4:d1:70:
09:70:bf:cf:e8:7b:30:ca:a2:51:3e:f8:ee:13:94:10:7e:e2:
1b:a7:5e:2e:b8:61:d7:9d:71:6e:3d:ea:b3:23:a0:3b:97:c6:
9c:bd:09:e0:74:10:db:c3:22:60:91:65:b8:0f:c5:07:ab:bb:
02:e9:30:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:13:38 2026 by rpki-client