Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
File: lxru6oeY927JpDTnVjfs2IEJLsI.mft (raw, json)
Hash identifier: 68I2hbslD0ovMd/asAK6+OL36EeB5/BMHpV+KaAA5JU=
Subject key identifier: D7:C2:C4:4E:1B:66:82:CB:3D:D6:25:23:72:6F:0D:CE:1C:0F:A8:5B
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 01A111BBC473D8E0CD450FB64BBE646C97FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
Manifest number: 1A90
Signing time: Tue 06 Oct 2026 15:01:20 +0000
Manifest this update: Tue 06 Oct 2026 15:01:20 +0000
Manifest next update: Wed 07 Oct 2026 15:01:20 +0000
Files and hashes: 1: 9g8xNFb2G40vpUgQ83M1qATo9IM.roa (hash: XlOOaS5ddXCcXrWbzYLtTuliD0nsTkmll8658pyGZu4=)
2: cJ3CSy6b-K7_SvDOoh-SHmO50AI.roa (hash: ima6XXFyVR9RW0ytt/Ct7dNcbu+58VazOZOWGhgX3kc=)
3: jM-7nkDS5qjlb3w33JvghnsyuJw.roa (hash: d7SlxGUeBLsKibMsNC4PiGRQBSGoyvgsjw7sV20/+lM=)
4: lxru6oeY927JpDTnVjfs2IEJLsI.crl (hash: ICPsQQ0QT9WF0yz4ySfrroHdxvbuY3Fm5orBTItpfZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:bb:c4:73:d8:e0:cd:45:0f:b6:4b:be:64:6c:97:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Oct 6 15:01:20 2026 GMT
Not After : Oct 7 15:01:20 2026 GMT
Subject: CN=d7c2c44e1b6682cb3dd62523726f0dce1c0fa85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:73:f0:bb:00:62:21:fe:fe:75:74:ef:72:cf:
8f:82:6c:f9:92:b1:26:e2:6d:eb:89:2f:cf:e0:10:
20:c3:34:e7:c6:79:81:5d:b8:f4:90:e2:5e:90:89:
c8:4e:38:37:4b:9d:f7:60:c0:ea:ff:12:12:d1:36:
6e:93:bb:f8:c1:d1:98:4e:54:dd:6e:6d:70:cf:15:
5d:6d:5f:1b:93:5e:98:70:d5:c1:f7:15:78:a0:1b:
25:12:33:54:de:86:d2:85:fc:45:a9:03:64:b3:09:
5e:6a:df:2d:f7:56:be:86:e8:47:ba:c7:e9:37:1a:
14:f1:28:9c:d0:33:93:da:ad:d5:01:47:79:ad:4e:
16:39:1c:07:e6:2b:ff:e4:91:cc:70:11:2c:eb:28:
cd:68:bb:57:c9:67:70:e3:f9:d9:73:a3:b3:2f:3b:
e8:fc:ba:5f:d8:a5:a0:16:de:9b:d7:c4:88:43:27:
1e:7e:66:c9:72:64:03:b6:9c:c6:ee:2a:a4:1e:30:
8a:2f:03:a1:99:29:e1:a3:5f:03:b9:6e:96:74:22:
66:96:42:6b:2a:1f:9a:44:c5:f3:ab:2b:77:d4:fe:
cb:cc:3e:1b:86:99:3b:99:6e:18:a6:8a:b1:74:37:
48:ec:92:0f:94:3b:af:bc:d1:ba:33:be:cb:c2:b2:
8e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C2:C4:4E:1B:66:82:CB:3D:D6:25:23:72:6F:0D:CE:1C:0F:A8:5B
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:3f:ef:a7:34:7f:a1:2d:04:5d:9e:d1:22:04:6f:5b:cf:04:
0c:5a:fe:2a:1c:80:9c:88:13:68:0b:eb:f5:99:43:b9:30:f8:
8f:55:6e:fa:8d:8d:34:e2:78:a7:b7:b0:bc:62:60:ed:3c:97:
13:4a:1f:ad:2a:50:e4:2a:c4:55:a8:3d:c0:c9:90:6f:b9:8b:
64:48:a3:0a:51:16:6a:c6:a0:5b:13:30:79:eb:b0:70:20:9b:
d9:d6:89:d4:75:76:b3:59:07:07:5f:a1:39:b9:0e:d8:be:db:
bd:9b:03:7d:2e:cf:02:87:a5:07:14:5c:fd:c4:fd:f1:ca:f9:
d6:ce:de:56:c6:f2:1e:8a:f1:be:78:6e:5a:96:55:0a:ba:38:
f2:5c:ae:7d:3a:43:07:e8:ee:1b:04:7f:4a:95:32:cd:8f:8b:
8d:94:32:3d:eb:c8:e5:a0:12:16:7e:88:75:f3:d4:52:9a:b1:
76:62:5d:1c:89:b3:d4:72:c9:4a:b0:e2:a5:aa:4b:ea:72:28:
8c:8c:70:88:53:24:ad:70:14:c9:00:2c:0b:67:d8:fb:b7:24:
18:cc:ec:48:9b:e4:31:74:09:c9:ad:e2:1d:20:8c:35:3c:65:
9f:72:97:fe:ad:9a:c0:8f:30:89:93:e5:65:f1:b4:89:c5:58:
be:b8:64:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:23:07 2026 by rpki-client