Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
File: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft (raw, json)
Hash identifier: aKYhp61D6h1cste5lqN27lFTLzjiLk+RiHqzhRrgWhU=
Subject key identifier: 7B:9F:AA:D5:1B:0C:B8:B8:23:14:3D:23:82:EB:70:AE:7B:E8:90:1B
Authority key identifier: 97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
Certificate issuer: /CN=971a799c6a663439d74450dfb38993571f98e15d
Certificate serial: 01A0D048DEFE740C0D165A7AFBF8071A2A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
Manifest number: 1A6F
Signing time: Wed 23 Sep 2026 22:00:31 +0000
Manifest this update: Wed 23 Sep 2026 22:00:31 +0000
Manifest next update: Thu 24 Sep 2026 22:00:31 +0000
Files and hashes: 1: FsdxCBsSPhgrqj2DSICdPcHdelg.asa (hash: eEvqQgi+lzyKHFjO4TryDYnkbMBQ3ARIXRQH0ITgfu4=)
2: dZ_v3Mc_jaWXuBe3BXvQFPLEuQU.roa (hash: QKHkKHHTIdqqahwWOaIvsm5JVVVXqX2D3ZMdSwEaAZk=)
3: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl (hash: M1AACBJqoZ9h5EmDUg3r2UQEhb7c/VcQaaPss+b3yQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:de:fe:74:0c:0d:16:5a:7a:fb:f8:07:1a:2a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a799c6a663439d74450dfb38993571f98e15d
Validity
Not Before: Sep 23 22:00:31 2026 GMT
Not After : Sep 24 22:00:31 2026 GMT
Subject: CN=7b9faad51b0cb8b823143d2382eb70ae7be8901b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:97:6b:2e:e7:36:07:5a:b1:6b:45:3c:0e:ff:
e2:c9:00:e7:6d:03:02:6b:3b:d3:1b:5e:d5:b7:fb:
06:74:20:13:76:7e:b1:58:d7:85:bd:2b:85:ba:65:
3c:77:a3:88:af:ad:d9:77:7e:cf:78:52:d0:05:10:
d9:c2:7b:c0:d3:e7:7c:fe:69:4e:a2:42:6d:92:33:
1a:19:df:65:8f:8c:87:e3:1c:1d:0d:2b:db:e2:6d:
80:22:0a:25:1f:53:50:4e:6c:96:ef:6e:4c:b1:5d:
bc:13:28:f8:16:da:a2:15:53:54:ac:c4:70:bc:03:
50:0a:c1:9b:cc:04:9f:8f:a7:bb:4a:2e:0f:f2:6b:
82:50:c2:06:9a:99:36:06:eb:5b:c2:4a:91:bb:3c:
56:9e:73:d0:12:5d:43:d9:49:5b:6f:df:3d:22:c5:
25:43:e6:5e:1d:93:73:b9:f5:a8:4d:6e:e8:0e:97:
ed:b5:c6:c1:5a:5a:38:1b:81:ac:35:12:37:e8:ad:
7c:ea:d6:df:51:7e:95:ab:9b:6a:32:0f:4d:23:36:
4f:f9:b1:5d:13:48:9f:e7:6d:c8:37:55:5c:89:72:
0e:45:2e:0b:5e:c3:09:8b:5a:23:2b:0e:6c:0a:c8:
02:6e:04:cf:1f:06:38:99:7d:69:4e:55:c4:e2:3f:
dd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9F:AA:D5:1B:0C:B8:B8:23:14:3D:23:82:EB:70:AE:7B:E8:90:1B
X509v3 Authority Key Identifier:
keyid:97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:52:f5:35:3c:e2:02:cd:f1:8d:ef:2e:04:85:33:a8:47:e3:
51:5c:0c:32:15:31:e7:d3:4f:db:91:c3:9d:3a:3d:27:89:0e:
36:66:6d:a3:7b:45:a4:1b:f5:cf:19:13:ef:93:61:fb:82:66:
e3:57:0d:d3:dc:cb:78:c5:a4:be:4f:cf:bd:fa:be:f4:60:5b:
7a:f6:e6:96:39:6c:71:f0:53:a3:13:d9:eb:ec:32:e2:c3:e7:
b3:aa:8a:95:da:70:c7:a3:7e:ad:46:61:54:c4:83:c6:96:88:
d7:eb:21:a7:f3:ea:db:7c:29:ae:a6:bc:9a:77:5b:09:46:06:
a5:11:e9:c6:9c:e3:26:fa:ad:e2:99:1d:77:1c:a8:5d:f9:77:
a0:2e:b9:70:07:37:7e:85:a2:89:f4:b0:86:e7:7b:e9:99:09:
32:6b:49:eb:85:e1:e6:0c:f8:14:9d:78:88:11:7c:97:c7:90:
2e:c4:07:9e:65:c3:c3:df:5b:d5:e0:05:d2:08:f2:49:d7:67:
d0:68:ec:d0:39:96:c0:53:ba:b0:56:4b:d1:00:d7:2b:34:72:
ff:4a:8a:68:39:05:19:bb:3a:27:e5:fc:af:3b:26:1b:64:0f:
d7:62:ff:12:a1:3d:a0:b2:2c:7e:15:3c:6b:80:71:f5:0f:35:
54:6e:05:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:38:44 2026 by rpki-client