Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
File: lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json)
Hash identifier: 24Fr2r2Wy76bFjvKkJ/MAf+nwr3WmxwsWBPNKTMH0G4=
Subject key identifier: 75:EB:CE:90:59:AF:40:F2:A5:26:ED:93:E4:14:9E:3F:B9:42:6C:B3
Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
Certificate issuer: /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Certificate serial: 019D28849B2F978504B34A7A235ECC2D68C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 05:01:12 +0000
Manifest this update: Thu 26 Mar 2026 05:01:12 +0000
Manifest next update: Fri 27 Mar 2026 05:01:12 +0000
Files and hashes: 1: ZF0nGmPtxtkDUZtYeSMT07Pwz_c.roa (hash: q2DrD4GQJdtgGN/2Czf9hDRS5eBg2LiwOsSKK4NE0Ks=)
2: k6BAsgY_7U_KIwQG-JQSaHDxB9c.roa (hash: mykJoSrib037xaFcqg06p/Ay95dFVkUOY6oQwzMXt3Y=)
3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: dR2sLmTwx4RFi6fUFsw5NzV7D+81eTXvdoD3BTrnnks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:9b:2f:97:85:04:b3:4a:7a:23:5e:cc:2d:68:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Validity
Not Before: Mar 26 05:01:12 2026 GMT
Not After : Mar 27 05:01:12 2026 GMT
Subject: CN=75ebce9059af40f2a526ed93e4149e3fb9426cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dd:bb:4e:04:ca:68:42:1b:9f:37:10:19:e0:
f5:93:08:72:25:23:48:9a:66:06:25:00:71:53:b9:
59:4d:fb:b8:6d:f6:34:6c:79:7a:63:7c:99:3f:e7:
5b:3e:f6:87:59:9f:a7:04:2c:b6:8b:b5:90:54:66:
88:f6:c0:4d:19:27:d9:cf:89:75:38:24:91:48:7c:
eb:3e:37:dc:5e:ab:c8:f5:8f:0a:d6:de:06:8b:95:
c7:a1:e0:09:1e:a4:65:2a:12:4e:65:3d:4e:b6:31:
41:3f:3e:aa:ee:aa:e1:90:4c:3b:56:72:9f:f3:30:
de:45:d8:8f:74:46:df:ba:0e:e0:97:2a:ad:42:67:
73:71:38:b7:82:0e:de:2a:bb:5f:51:fb:c6:71:26:
04:61:ca:39:7f:4f:1c:74:1c:3f:e1:95:f2:22:3e:
93:66:f7:1c:2d:36:6e:5a:35:0d:c2:d0:0f:fa:42:
94:66:2b:81:48:41:e6:c0:7b:20:a3:0c:fd:23:1f:
f0:20:67:80:f5:85:98:99:fb:13:2e:f1:86:36:dd:
89:c4:cc:19:34:21:90:16:9b:07:c0:36:c3:51:40:
c1:0f:33:79:fd:38:56:25:52:c7:09:4c:13:16:60:
f3:52:77:2e:55:de:d2:c3:58:71:4c:7a:8d:da:20:
5c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EB:CE:90:59:AF:40:F2:A5:26:ED:93:E4:14:9E:3F:B9:42:6C:B3
X509v3 Authority Key Identifier:
keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:24:3c:59:9d:3e:b5:21:41:18:a2:43:64:d4:b3:ac:06:ac:
55:13:83:81:11:a0:64:50:f7:55:6d:7b:fe:49:38:0a:af:5e:
d2:73:fe:b7:55:2d:af:9f:9d:89:a6:d3:bc:ed:4d:4c:e4:82:
cb:f0:fa:6d:44:c0:2f:fa:c1:a0:38:aa:fc:c9:80:a3:e5:87:
53:24:46:69:0a:e1:fe:7e:c6:92:9e:fe:32:48:cf:4e:40:aa:
3c:e8:60:3e:8a:dd:67:99:ec:62:f0:7d:2f:c8:79:a2:ab:0d:
4c:30:da:34:4c:39:42:52:66:47:37:fa:24:a9:ec:cf:20:91:
22:f9:39:aa:6e:5e:74:39:8e:e7:1f:7a:60:9c:20:13:bd:4a:
90:97:b7:11:6e:fb:9e:d4:45:b6:b5:ce:dd:6f:3d:12:e5:4f:
03:50:f9:2f:a4:d9:6a:3a:95:44:2c:d7:26:0b:dd:42:29:7c:
f8:6e:2f:15:e9:32:32:cd:21:42:92:71:de:17:61:fe:d6:11:
7d:ec:36:bb:72:ec:14:05:a0:71:03:14:f0:d7:2b:e6:e9:e7:
24:c2:b7:89:0a:58:d3:cd:85:22:13:35:04:a1:87:29:25:68:
ab:a5:3a:f6:61:fa:48:38:50:c7:94:fd:e2:e4:95:a2:08:f0:
03:23:10:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:45:45 2026 by rpki-client