Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
File: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft (raw, json)
Hash identifier: AtpZKXYG9027RyXSTjzkmcQDZXHHb2Z2+Gjwk1LXVFk=
Subject key identifier: 66:82:21:32:92:31:B2:82:F2:1D:14:66:9D:BB:46:D2:5F:7A:4D:AC
Authority key identifier: 97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
Certificate issuer: /CN=971a799c6a663439d74450dfb38993571f98e15d
Certificate serial: 01A0CE5ABA869D621C327E105A6525733062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
Manifest number: 1A6E
Signing time: Wed 23 Sep 2026 13:00:47 +0000
Manifest this update: Wed 23 Sep 2026 13:00:47 +0000
Manifest next update: Thu 24 Sep 2026 13:00:47 +0000
Files and hashes: 1: FsdxCBsSPhgrqj2DSICdPcHdelg.asa (hash: eEvqQgi+lzyKHFjO4TryDYnkbMBQ3ARIXRQH0ITgfu4=)
2: dZ_v3Mc_jaWXuBe3BXvQFPLEuQU.roa (hash: QKHkKHHTIdqqahwWOaIvsm5JVVVXqX2D3ZMdSwEaAZk=)
3: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl (hash: fmLFLNIz1MyhQjsXcbJlSAylwsFCzs9GVE3C3ewmbfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:ba:86:9d:62:1c:32:7e:10:5a:65:25:73:30:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a799c6a663439d74450dfb38993571f98e15d
Validity
Not Before: Sep 23 13:00:47 2026 GMT
Not After : Sep 24 13:00:47 2026 GMT
Subject: CN=668221329231b282f21d14669dbb46d25f7a4dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9f:d2:a3:b4:fc:ea:53:91:88:69:e6:9e:3e:
92:8c:6f:5a:e6:03:85:c9:27:bc:d9:6a:dd:3c:13:
98:d3:24:98:b7:19:45:e2:bf:d6:50:38:27:93:85:
34:38:1b:71:55:2c:53:0e:18:fd:4c:6b:83:88:d7:
9f:fe:d1:76:8f:f8:f7:e0:a8:33:b3:00:69:e8:72:
31:0a:c4:6d:cf:1a:ed:9e:b6:3f:df:e3:6c:4a:68:
f0:75:80:d2:5b:ce:da:0c:0b:be:63:a3:5f:08:6f:
fd:02:f4:cd:0c:3d:1b:48:bf:b1:db:75:c0:5c:5b:
84:b0:6f:7f:a4:b0:a9:9c:8e:7e:83:31:3b:1e:08:
0b:dc:a0:d0:bd:b9:15:ce:07:58:9c:a8:52:8d:ca:
05:24:68:66:f9:f3:6c:3d:9b:52:93:ee:61:8b:67:
8c:5c:8f:3a:1a:00:1b:b8:17:1e:bb:49:59:c1:41:
81:37:f2:4b:97:b6:d1:95:23:2d:6a:ef:43:08:4f:
1f:97:83:78:47:ee:27:64:0b:af:b6:63:79:73:8a:
3b:97:d6:f9:38:78:81:6a:29:30:47:98:b5:04:46:
33:86:91:ef:79:9a:98:6a:61:3f:35:aa:8c:ac:b5:
46:a2:2c:67:7c:e1:57:84:98:b4:24:77:aa:8f:eb:
60:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:82:21:32:92:31:B2:82:F2:1D:14:66:9D:BB:46:D2:5F:7A:4D:AC
X509v3 Authority Key Identifier:
keyid:97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:24:ed:2f:82:64:6a:ce:50:21:68:37:81:05:9a:c4:6a:d3:
4f:5e:56:67:28:d4:6d:5c:48:bb:b5:0b:f2:8d:73:7d:86:90:
3d:ee:47:f1:92:e3:37:75:74:53:b0:6a:60:d7:d3:af:e6:62:
bf:13:a1:80:bf:a5:a4:5c:e5:ed:3a:e2:8d:54:6e:50:a6:81:
1a:f6:74:1e:da:d8:57:be:91:72:97:d4:bf:de:60:7f:08:ad:
a3:a6:9d:f8:2b:7e:fb:b4:2c:6b:64:9f:41:05:12:8d:fd:b8:
30:39:83:23:89:47:34:56:95:4f:37:9e:a2:82:27:74:00:38:
b6:9f:94:46:fd:22:6b:df:ee:89:df:08:f6:73:f5:3c:8a:55:
8a:fc:66:3a:f9:e4:30:bf:23:7b:61:d8:fa:16:a2:65:6e:4b:
fc:62:ca:63:8e:b7:cf:f1:77:c2:c8:08:88:0c:1f:e5:33:11:
8f:40:5f:30:43:a1:b1:25:ba:e2:34:cc:c9:c0:93:33:87:13:
93:e6:be:57:57:e5:5d:91:76:5f:94:91:15:85:be:74:d1:29:
89:12:72:46:a5:a6:69:ee:58:a4:b3:3f:70:2d:f5:21:e2:29:
6c:a4:e9:77:60:20:00:5d:71:cc:33:60:78:c3:ae:02:22:1e:
28:ea:2a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:49:25 2026 by rpki-client