Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
File: lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json)
Hash identifier: +Y5lSuEY2vmj0ZxgEqNswaA+wsxncGARe7HHfp8LhdM=
Subject key identifier: E3:94:C1:F1:51:1E:B8:21:6B:09:6C:F6:5B:53:D6:F6:A4:B0:5B:5B
Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
Certificate issuer: /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Certificate serial: 01A0E0986B68D9288C6290E4FB27E5AD2FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
Manifest number: 1A76
Signing time: Sun 27 Sep 2026 02:01:20 +0000
Manifest this update: Sun 27 Sep 2026 02:01:20 +0000
Manifest next update: Mon 28 Sep 2026 02:01:20 +0000
Files and hashes: 1: ZF0nGmPtxtkDUZtYeSMT07Pwz_c.roa (hash: q2DrD4GQJdtgGN/2Czf9hDRS5eBg2LiwOsSKK4NE0Ks=)
2: k6BAsgY_7U_KIwQG-JQSaHDxB9c.roa (hash: mykJoSrib037xaFcqg06p/Ay95dFVkUOY6oQwzMXt3Y=)
3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: 1N2v1JBisjhG3Tw/SwvpbAjxoOEYRPyJtbh2OCpe2WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:6b:68:d9:28:8c:62:90:e4:fb:27:e5:ad:2f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Validity
Not Before: Sep 27 02:01:20 2026 GMT
Not After : Sep 28 02:01:20 2026 GMT
Subject: CN=e394c1f1511eb8216b096cf65b53d6f6a4b05b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:42:3e:d9:69:21:3c:40:93:03:a2:0b:ba:8a:
0d:67:96:70:e3:63:76:9b:83:d2:cc:dd:ed:a6:00:
df:3a:d0:4b:3a:7b:5f:6f:85:4b:83:09:16:3b:05:
ea:e4:83:ab:68:4f:60:5c:f7:0c:bd:61:76:26:42:
8a:86:84:d0:29:c7:99:06:0f:75:0a:36:3e:53:ad:
d3:d0:c3:9d:13:5c:30:1c:c7:96:28:06:90:78:e9:
f2:18:39:fb:fa:de:1e:7d:44:79:7f:bd:7f:b3:d6:
8f:1d:36:71:f9:4e:27:37:37:f4:39:60:73:79:a5:
eb:0a:45:e0:bf:74:97:95:2e:66:5a:f2:95:11:95:
a4:93:48:e4:fa:b2:2f:f1:da:0a:e4:06:37:25:45:
d9:11:03:16:16:58:e0:d6:49:a7:9d:d3:82:e4:8e:
66:4d:e6:3a:1f:8e:56:cd:93:f6:ef:41:7b:84:89:
9b:e2:37:3c:30:30:37:d4:43:2b:cd:95:f0:30:97:
1a:a4:51:31:ee:d6:80:24:a4:60:68:d6:b6:2c:0d:
00:17:11:33:3b:17:ce:f5:02:3f:da:e5:5f:21:78:
f5:da:3f:bf:55:a4:a1:a4:7a:67:36:e4:9e:9d:49:
b8:fd:13:7c:bc:7e:33:1b:3e:13:e6:70:75:78:fd:
5a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:94:C1:F1:51:1E:B8:21:6B:09:6C:F6:5B:53:D6:F6:A4:B0:5B:5B
X509v3 Authority Key Identifier:
keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:4a:04:17:3d:82:b9:8f:cd:4f:07:90:b6:7c:da:f3:39:67:
37:b2:7b:33:9a:f6:51:19:3e:91:8a:08:b1:29:22:04:d8:96:
1c:ba:95:1d:5c:17:5c:db:2e:d4:ed:1c:f1:2c:05:f0:d7:3a:
c8:d7:e9:8b:b0:1a:16:e6:a4:4f:43:7d:83:17:03:c7:7a:7c:
cb:92:5a:74:55:a1:68:55:cd:66:b1:73:01:1d:6e:31:b1:1f:
2e:45:f6:52:0c:69:02:92:c0:d8:5a:8d:0b:5d:7d:e9:11:f0:
74:4d:6c:5b:07:7b:b2:30:9f:0e:b0:89:52:65:d8:ec:19:d4:
72:21:5b:5e:9f:89:1d:db:93:b4:b5:e2:4f:fe:93:8a:ac:62:
11:e2:11:da:1a:6c:a6:7d:4f:77:ec:5e:a4:89:60:ad:d4:be:
eb:3e:43:78:bb:f4:e6:13:2f:4c:f4:88:04:25:6e:59:c9:40:
f1:90:ae:5c:87:54:51:03:29:0d:1e:4d:68:00:28:ae:ca:fe:
b4:4b:3d:59:1f:ff:8b:c9:b6:05:15:ad:f1:cb:97:d4:50:80:
a0:16:22:e0:e9:f5:3c:06:3c:9a:00:3d:c1:d8:46:17:2a:9c:
02:57:28:58:cb:5c:b8:da:33:38:58:ab:27:93:ad:5a:4e:09:
d0:5c:5f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:36:41 2026 by rpki-client