Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
File: lxru6oeY927JpDTnVjfs2IEJLsI.mft (raw, json)
Hash identifier: IPjxOU1gdu4ZX/jp9C59koP70i7WGV3630o2+ycwYHg=
Subject key identifier: 1E:B8:F4:04:85:D0:AD:5A:22:92:90:B7:60:34:82:32:E9:42:04:8F
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 019D258345E0FFA731625D8F59E0AB510422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 15:00:52 +0000
Manifest this update: Wed 25 Mar 2026 15:00:52 +0000
Manifest next update: Thu 26 Mar 2026 15:00:52 +0000
Files and hashes: 1: 9g8xNFb2G40vpUgQ83M1qATo9IM.roa (hash: XlOOaS5ddXCcXrWbzYLtTuliD0nsTkmll8658pyGZu4=)
2: cJ3CSy6b-K7_SvDOoh-SHmO50AI.roa (hash: ima6XXFyVR9RW0ytt/Ct7dNcbu+58VazOZOWGhgX3kc=)
3: jM-7nkDS5qjlb3w33JvghnsyuJw.roa (hash: d7SlxGUeBLsKibMsNC4PiGRQBSGoyvgsjw7sV20/+lM=)
4: lxru6oeY927JpDTnVjfs2IEJLsI.crl (hash: rK+/ZdOF9SvJz6X/wCTXoGcSXhN9Ebli6Gc7ICOHOB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:45:e0:ff:a7:31:62:5d:8f:59:e0:ab:51:04:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Mar 25 15:00:52 2026 GMT
Not After : Mar 26 15:00:52 2026 GMT
Subject: CN=1eb8f40485d0ad5a229290b760348232e942048f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:7d:57:1d:ca:8b:47:e3:49:02:fb:ca:57:
26:21:1b:c1:c4:22:97:4c:03:5d:12:b2:39:6b:a9:
84:da:2d:d9:0d:56:8e:e2:2a:77:80:e7:93:bb:98:
90:ea:06:04:ac:c1:f8:84:30:29:f0:69:3b:b2:ff:
f9:e9:bc:69:6f:d7:ad:d9:9c:c6:72:da:cc:0c:3a:
1f:56:3b:a3:49:f8:17:df:ea:48:fb:a4:f1:5d:0f:
f5:c6:d7:d7:ba:d2:c8:5c:30:52:1b:26:8f:a5:a5:
91:a6:d6:3b:7d:fb:65:59:2d:19:92:2c:02:02:98:
21:17:b7:b8:72:33:fc:6b:8e:b0:6b:be:b5:26:80:
67:2e:a4:b2:26:52:c4:9d:72:15:fa:d3:63:f3:81:
59:8e:7c:8c:47:47:51:91:4a:2a:03:e8:2d:e3:30:
d4:fc:9b:37:c3:70:65:27:c5:34:79:fe:62:a3:02:
a8:21:87:ec:d0:23:32:b3:31:6c:15:8d:58:1d:60:
68:6c:d1:ee:40:3a:d3:77:a0:4b:84:8b:86:48:5b:
2e:e0:fb:b3:94:6d:d6:4d:2d:2a:31:51:08:ce:da:
ef:21:68:33:6e:02:55:ac:6d:4b:39:ff:1d:6e:f9:
b5:3d:97:29:4a:ec:be:f5:50:de:4e:e0:1d:9d:10:
85:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B8:F4:04:85:D0:AD:5A:22:92:90:B7:60:34:82:32:E9:42:04:8F
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e5:64:25:88:9e:35:eb:c4:34:04:e0:b2:a3:2e:c0:7b:4e:
07:14:0e:8b:ef:df:15:a6:72:e1:b0:50:21:43:db:ab:67:16:
88:89:ec:f1:41:c2:9d:4b:f8:c7:d6:eb:25:1e:f5:92:a4:c9:
7a:f5:e1:ce:00:ee:bd:f0:43:d9:af:f5:a5:2b:6d:d6:af:29:
89:1a:93:13:27:7b:b1:2b:36:38:89:f0:9b:03:5a:1e:d5:fe:
f6:8a:db:3b:88:a7:27:62:ff:02:67:fe:bf:0e:26:bb:15:f1:
7d:99:fe:8c:49:70:d4:6f:76:06:79:91:22:4b:3b:cd:72:b9:
98:5c:87:a3:65:91:34:f7:67:6d:3a:71:dc:4c:45:26:4d:7a:
12:8e:56:af:e7:37:a7:67:30:45:74:f6:34:bd:f1:25:8f:6b:
c7:e1:96:ce:09:ad:d2:a4:be:86:f2:84:5e:71:1b:1b:e2:37:
25:15:7b:98:ff:09:26:e1:9d:22:53:79:fd:3e:3e:fa:70:ee:
fb:19:66:0a:72:a6:a3:44:52:16:f4:96:cc:c3:0f:80:43:24:
7d:da:e8:fb:28:f8:ec:a7:04:8c:74:c9:4d:e6:9b:4c:61:61:
48:3b:ef:ff:61:2f:59:87:61:69:57:b8:60:89:ff:bf:8f:e7:
49:55:79:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg0Xg/6cxYl2PWeCrUQQiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MWFlZWVhODc5OGY3NmVjOWE0MzRlNzU2MzdlY2Q4ODEw
OTJlYzIwHhcNMjYwMzI1MTUwMDUyWhcNMjYwMzI2MTUwMDUyWjAzMTEwLwYDVQQD
EygxZWI4ZjQwNDg1ZDBhZDVhMjI5MjkwYjc2MDM0ODIzMmU5NDIwNDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxB9Vx3Ki0fjSQL7ylcmIRvBxCKX
TANdErI5a6mE2i3ZDVaO4ip3gOeTu5iQ6gYErMH4hDAp8Gk7sv/56bxpb9et2ZzG
ctrMDDofVjujSfgX3+pI+6TxXQ/1xtfXutLIXDBSGyaPpaWRptY7fftlWS0ZkiwC
ApghF7e4cjP8a46wa761JoBnLqSyJlLEnXIV+tNj84FZjnyMR0dRkUoqA+gt4zDU
/Js3w3BlJ8U0ef5iowKoIYfs0CMyszFsFY1YHWBobNHuQDrTd6BLhIuGSFsu4Puz
lG3WTS0qMVEIztrvIWgzbgJVrG1LOf8dbvm1PZcpSuy+9VDeTuAdnRCFiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB649ASF0K1aIpKQt2A0gjLpQgSPMB8GA1UdIwQY
MBaAFJca7uqHmPduyaQ051Y37NiBCS7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhydTZvZVk5MjdKcERUblZqZnMySUVKTHNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8xNjY5MzMtZjY4Yy00OWEwLTg4Njkt
YmRmNTVkYjRhOTBhLzEvbHhydTZvZVk5MjdKcERUblZqZnMySUVKTHNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8xNjY5MzMtZjY4Yy00OWEwLTg4NjktYmRmNTVkYjRhOTBh
LzEvbHhydTZvZVk5MjdKcERUblZqZnMySUVKTHNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJOVkJYie
NevENATgsqMuwHtOBxQOi+/fFaZy4bBQIUPbq2cWiIns8UHCnUv4x9brJR71kqTJ
evXhzgDuvfBD2a/1pStt1q8piRqTEyd7sSs2OInwmwNaHtX+9orbO4inJ2L/Amf+
vw4muxXxfZn+jElw1G92BnmRIks7zXK5mFyHo2WRNPdnbTpx3ExFJk16Eo5Wr+c3
p2cwRXT2NL3xJY9rx+GWzgmt0qS+hvKEXnEbG+I3JRV7mP8JJuGdIlN5/T4++nDu
+xlmCnKmo0RSFvSWzMMPgEMkfdro+yj47KcEjHTJTeabTGFhSDvv/2EvWYdhaVe4
YIn/v4/nSVV52Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:26 2026 by rpki-client