Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
File: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft (raw, json)
Hash identifier: rpj7floKdcy5z/dIgGl3hnoUdybDH4tQGS7GVGpWfOY=
Subject key identifier: F0:30:AC:26:B7:50:4F:1C:63:14:98:3B:CA:D6:DC:F4:D7:F9:1C:0B
Authority key identifier: 97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
Certificate issuer: /CN=971a799c6a663439d74450dfb38993571f98e15d
Certificate serial: 019E1C7DA992CB4D36CEF6825B59BBC5383E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 14:00:57 +0000
Manifest this update: Tue 12 May 2026 14:00:57 +0000
Manifest next update: Wed 13 May 2026 14:00:57 +0000
Files and hashes: 1: ElmE07kq9LxUDEmmTyOo1MIpVtU.roa (hash: IMhS3Hg31zsSt4C+dpnb7kVneJ7jUTvLYNSo6j8gQwI=)
2: FsdxCBsSPhgrqj2DSICdPcHdelg.asa (hash: eEvqQgi+lzyKHFjO4TryDYnkbMBQ3ARIXRQH0ITgfu4=)
3: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl (hash: Vi73Zp8WH4Z3z80Vzx68HPfaV/5o0XFq+4dRTFKoM7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:a9:92:cb:4d:36:ce:f6:82:5b:59:bb:c5:38:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a799c6a663439d74450dfb38993571f98e15d
Validity
Not Before: May 12 14:00:57 2026 GMT
Not After : May 13 14:00:57 2026 GMT
Subject: CN=f030ac26b7504f1c6314983bcad6dcf4d7f91c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:38:ff:db:11:72:5a:7a:c2:47:6d:86:8c:
d9:e0:76:b5:d9:f2:a6:0c:82:87:d9:99:4a:ad:c4:
fd:a0:ec:57:16:da:fc:a6:51:4f:2a:0d:18:a2:9c:
d3:f5:6c:58:94:26:ee:a2:c0:ab:31:d3:e6:95:d4:
86:6c:10:bb:72:87:3c:7f:ee:de:33:13:f7:b4:c3:
95:d4:f8:1d:fb:87:de:a8:a0:d6:37:a8:ff:34:84:
1c:33:15:f8:48:2d:8b:2b:f6:b8:db:8b:ff:9f:00:
a5:16:b6:71:d2:0b:e1:a1:48:e0:73:2e:c9:3d:40:
c9:e2:ce:d3:22:be:28:f2:cd:b3:1a:48:18:e1:85:
1b:31:92:d6:2b:e9:05:e4:30:ad:97:ec:0c:45:09:
2a:a5:6d:fb:49:18:ec:b2:76:ab:95:24:aa:67:24:
d6:e9:69:63:a3:50:12:4c:d8:2c:24:1b:b3:fe:3e:
0e:2e:f8:68:56:fd:80:33:54:e0:da:8e:03:ff:32:
bd:75:a6:42:21:6b:7c:0c:2b:8e:3b:5a:f1:ec:d0:
7a:10:81:01:2f:d0:ad:55:03:1c:f0:20:93:9d:8e:
12:99:f1:c3:74:99:a3:12:8e:e6:3e:d1:8c:4e:a8:
3c:0c:bd:77:54:b8:d7:68:1c:75:81:69:80:b8:2d:
bc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:30:AC:26:B7:50:4F:1C:63:14:98:3B:CA:D6:DC:F4:D7:F9:1C:0B
X509v3 Authority Key Identifier:
keyid:97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d0:1b:9c:aa:b6:9d:1e:b9:f3:eb:e2:3c:0e:d7:db:40:db:
13:a1:98:86:59:15:b8:01:b7:22:70:fb:73:68:30:d9:5d:5f:
f7:b4:d5:82:f8:b6:9f:94:ad:9e:23:26:0d:0e:a7:a4:6e:79:
32:dd:ea:33:ad:d6:ea:42:a0:da:d3:65:4c:6f:b9:3d:59:9a:
db:aa:84:17:73:06:1c:df:e6:15:18:a7:ba:01:ed:5d:f9:eb:
00:3c:05:11:a9:90:d1:60:fb:e6:33:36:5f:98:d1:65:ba:e0:
7f:b7:94:54:fc:4e:30:93:95:10:33:d4:72:4d:94:e4:32:8b:
3a:a6:f2:73:d8:64:8d:43:de:5b:45:72:e3:f7:72:36:89:a0:
e1:01:ad:fb:f3:5b:eb:86:85:6a:14:ef:0e:76:10:e1:5f:f9:
94:9e:39:79:ab:49:59:4c:03:05:e1:60:b0:fb:4e:8d:92:92:
2b:98:34:34:47:e0:16:45:60:5a:88:4c:ee:53:68:9d:80:85:
47:ee:f3:f6:1b:eb:69:69:b8:73:c0:ad:2d:45:a0:fa:db:bd:
75:6b:55:ee:45:7a:6e:4c:75:c5:f8:fc:33:36:8a:dc:35:39:
8f:37:db:50:ac:6c:a7:98:da:16:27:ba:60:c2:ad:cb:e3:e5:
54:95:cc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:15:41 2026 by rpki-client