Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
File: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft (raw, json)
Hash identifier: lUXg0mSL+YXsaCHIpWp37zeDLKWjLHsWJDC34RsaHZQ=
Subject key identifier: 51:C8:AF:D2:B7:A6:D8:40:C3:CD:0C:BE:8F:3C:B9:98:A9:DF:10:BC
Authority key identifier: 97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
Certificate issuer: /CN=971a799c6a663439d74450dfb38993571f98e15d
Certificate serial: 019D273AC86EC98BC6519A223454EB6B928C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 23:00:56 +0000
Manifest this update: Wed 25 Mar 2026 23:00:56 +0000
Manifest next update: Thu 26 Mar 2026 23:00:56 +0000
Files and hashes: 1: ElmE07kq9LxUDEmmTyOo1MIpVtU.roa (hash: IMhS3Hg31zsSt4C+dpnb7kVneJ7jUTvLYNSo6j8gQwI=)
2: FsdxCBsSPhgrqj2DSICdPcHdelg.asa (hash: eEvqQgi+lzyKHFjO4TryDYnkbMBQ3ARIXRQH0ITgfu4=)
3: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl (hash: kERTtGEM9JPvnWFOQQBrwFWPUWzlc3JWaN2nyMWWMQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:c8:6e:c9:8b:c6:51:9a:22:34:54:eb:6b:92:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a799c6a663439d74450dfb38993571f98e15d
Validity
Not Before: Mar 25 23:00:56 2026 GMT
Not After : Mar 26 23:00:56 2026 GMT
Subject: CN=51c8afd2b7a6d840c3cd0cbe8f3cb998a9df10bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:55:94:f1:a5:77:d5:ca:f1:df:a3:32:8b:
5d:5b:81:14:24:f9:97:4f:02:35:c1:24:ff:7b:39:
0f:f8:d3:92:13:cd:94:62:5f:81:b6:88:dc:83:e2:
2f:e4:58:34:5f:00:8f:79:17:c0:7c:f2:8a:7b:7c:
1e:6e:d0:dc:db:e5:39:b2:54:47:31:8c:ac:49:d2:
76:e6:41:39:48:c1:b4:e5:4e:d6:f6:85:7c:9f:f5:
a3:98:a1:98:05:41:83:c0:ee:4c:08:ef:d9:33:f0:
b7:e1:55:75:85:7b:a1:24:d3:de:4f:56:95:91:19:
6d:d3:43:bf:a5:8c:45:89:39:af:60:7b:37:16:2e:
26:83:7d:66:cb:8f:f9:98:e0:56:7b:bf:f2:ac:fa:
a5:3c:cc:56:93:22:06:7f:e0:61:3f:f8:f6:46:c0:
f2:25:46:a2:8f:9a:82:a3:24:b4:39:0e:86:6b:b6:
13:1d:fe:7a:19:e4:76:ac:06:e9:cf:79:96:d4:37:
15:79:c8:00:0c:90:8d:36:83:4d:20:c2:a4:b5:6c:
50:96:74:a1:d2:7f:f1:85:92:dd:34:94:a6:c3:f4:
a7:31:2b:03:61:e9:60:f1:50:8a:b9:b7:0f:5f:c7:
68:b6:6b:90:51:d7:84:fe:82:b6:b3:53:28:ad:52:
85:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C8:AF:D2:B7:A6:D8:40:C3:CD:0C:BE:8F:3C:B9:98:A9:DF:10:BC
X509v3 Authority Key Identifier:
keyid:97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d7:d9:7c:eb:7a:09:60:8e:ee:cb:e6:74:01:4f:1c:98:2a:
f1:57:a0:00:0d:5f:fa:eb:1b:2e:4f:b9:af:06:32:45:ca:b2:
68:a6:64:af:20:49:36:66:b0:a4:05:ea:00:8f:cd:70:fe:82:
c2:b5:a4:12:f3:81:41:a8:4c:ef:32:78:bb:f6:da:a2:41:0c:
76:af:42:14:dc:e6:bd:40:a2:86:e9:58:40:5b:bd:a5:50:15:
3e:07:cc:68:56:96:39:ea:56:e8:d6:cb:66:16:23:12:57:35:
b7:79:81:74:fa:de:2a:11:7f:b1:f1:0a:b8:c4:69:15:67:d5:
f8:42:a9:16:50:10:52:6d:61:05:e5:20:bf:72:6e:8c:89:63:
07:df:70:a6:84:39:1d:64:6f:7c:ff:bb:54:f9:82:c4:25:24:
bb:d2:47:7c:3d:41:76:ef:b2:36:f8:01:d3:28:9d:dd:82:68:
a3:4b:31:91:5e:89:e3:31:77:f1:75:71:6e:e4:57:d5:4b:91:
ca:ed:c7:4d:06:34:29:7d:04:c0:65:69:88:a1:a8:a1:f0:3a:
58:6d:e2:7b:30:08:ce:5b:b7:20:8b:f3:f7:bb:d2:a0:43:a8:
65:fd:e6:79:15:17:eb:83:2c:f7:38:8a:8d:af:14:18:0b:7c:
b5:ec:73:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:27:05 2026 by rpki-client