Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
File: LxiqH1XWNcliBMp5qCmT-87BUSw.mft (raw, json)
Hash identifier: vVyAonfSxC4gHh3BXN+SDmPN8klPO04Lba59QzDeeAQ=
Subject key identifier: 9B:33:67:9A:87:14:1D:F2:31:04:95:A7:AC:01:4C:BF:84:09:7D:DA
Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Certificate serial: 019D28168B3CE19796523980279D12E0AB93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 03:00:59 +0000
Manifest this update: Thu 26 Mar 2026 03:00:59 +0000
Manifest next update: Fri 27 Mar 2026 03:00:59 +0000
Files and hashes: 1: LgLEIgozDh6ZtieL7JWKGQ61yzE.roa (hash: BgRl5tIbVsSwLTDHr7kVBjnhqq09mtoEkAcyM+VA2Ws=)
2: LxiqH1XWNcliBMp5qCmT-87BUSw.crl (hash: 349i35T3GdrVd72W+amsqXDP3V44LH3ArNoQauKKcWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:8b:3c:e1:97:96:52:39:80:27:9d:12:e0:ab:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Validity
Not Before: Mar 26 03:00:59 2026 GMT
Not After : Mar 27 03:00:59 2026 GMT
Subject: CN=9b33679a87141df2310495a7ac014cbf84097dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4a:6c:aa:2d:6e:e5:8b:27:cb:ea:5d:e8:70:
df:9d:38:59:db:66:b8:46:3a:20:af:08:3c:e6:a3:
77:dc:d4:ab:ec:63:41:19:68:b0:50:7b:c4:5b:47:
64:c7:47:69:83:5b:67:ea:57:34:3d:78:52:78:69:
9d:01:79:8c:f5:c8:25:f3:aa:c3:4d:26:23:04:40:
8d:0f:b4:25:16:6f:7d:92:7a:6c:39:56:36:5e:75:
e6:66:cd:9b:81:82:49:35:66:56:1a:86:53:4d:2f:
6f:e3:ef:59:6e:08:f8:8b:7a:9a:10:73:be:9c:9f:
c9:d9:52:fa:ef:6c:5f:bd:42:a4:f2:6a:cb:91:d1:
1d:71:7e:d1:c8:29:43:f7:cf:24:4f:1c:1f:a9:ca:
d3:12:d9:83:f4:fb:7f:5b:d6:86:28:6b:99:4b:15:
d9:d6:49:c2:56:e1:0b:34:04:cc:ec:65:4d:0e:21:
87:f1:f6:44:a0:81:3c:0d:88:86:40:51:6b:b1:78:
2f:c1:42:79:15:ac:c1:1e:ba:ee:29:1b:c8:49:28:
47:10:0f:9b:83:5e:14:22:ff:c1:3a:d1:d8:6c:2a:
41:1b:ff:cb:1c:20:54:df:81:5a:13:a2:4f:38:8d:
de:b3:a3:60:98:dd:19:f9:55:7f:16:c0:e4:82:80:
57:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:33:67:9A:87:14:1D:F2:31:04:95:A7:AC:01:4C:BF:84:09:7D:DA
X509v3 Authority Key Identifier:
keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9d:cb:8c:a3:44:15:1c:4a:f8:1c:ed:cc:ad:fc:83:e6:7f:
68:0d:32:4f:9a:ec:af:fe:08:f1:9d:85:9a:36:02:54:02:8d:
ad:cb:a4:94:0f:9d:b4:59:69:94:2a:92:7b:c2:7f:0a:6f:f7:
47:f7:fd:55:f6:23:46:59:cc:c8:e1:f8:6b:62:fb:cf:1f:08:
fd:3c:da:91:33:1d:6b:ca:95:0e:1b:0f:73:e2:90:3c:77:9b:
07:d4:bb:21:39:a1:b9:3c:58:89:b9:91:91:0c:53:20:08:d7:
9c:56:e9:56:f8:66:e2:35:c7:d8:45:f7:c8:24:2d:fc:e0:c8:
bb:bd:0b:6c:d0:69:95:60:4f:93:80:44:7e:17:f3:d2:23:32:
b5:70:24:91:51:0f:fe:ed:7f:02:dc:7d:30:5a:19:91:df:77:
52:a8:4e:d9:ae:c1:02:45:6b:ff:57:79:09:1a:09:e6:43:e2:
43:bb:30:49:17:34:a2:9a:3b:cd:02:ff:5b:27:0f:ec:ee:c1:
30:78:67:11:87:56:20:65:d7:51:88:b8:61:4d:7a:d5:3c:a3:
5c:ba:63:e5:c8:15:33:65:f7:dd:f0:64:ed:a7:10:04:15:5e:
fe:30:45:d0:74:51:6c:b8:66:4a:b0:db:76:ea:42:ee:50:d7:
58:6e:9b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:23 2026 by rpki-client