Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
File: LxXXiyVtKEWbhptybyMpSrP_Fz8.mft (raw, json)
Hash identifier: +oon5/2yn6rMyjYj3RvWJL4Tprv3gY8vLZhLkSyjzeE=
Subject key identifier: 5A:A3:CC:73:01:2E:A9:EF:48:25:27:37:0C:E6:AC:E6:13:D3:7B:98
Authority key identifier: 2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F
Certificate issuer: /CN=2f15d78b256d28459b869b726f23294ab3ff173f
Certificate serial: 019D284DA21311D0BE76D490678AA24EC94B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
Manifest number: 08AC
Signing time: Thu 26 Mar 2026 04:01:09 +0000
Manifest this update: Thu 26 Mar 2026 04:01:09 +0000
Manifest next update: Fri 27 Mar 2026 04:01:09 +0000
Files and hashes: 1: LxXXiyVtKEWbhptybyMpSrP_Fz8.crl (hash: jc05DTn5IUudxuHnfKBnT5KPimtnJec4w3Amfm3UAgI=)
2: rOf-HDDDWUjLrbyMntCj7Zxr5hQ.roa (hash: nH33C7dbdrbXUnx2qhd+AcU6xtieasJAwf4EGexUyEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:a2:13:11:d0:be:76:d4:90:67:8a:a2:4e:c9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f15d78b256d28459b869b726f23294ab3ff173f
Validity
Not Before: Mar 26 04:01:09 2026 GMT
Not After : Mar 27 04:01:09 2026 GMT
Subject: CN=5aa3cc73012ea9ef482527370ce6ace613d37b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:42:61:e1:48:68:ab:ea:cd:33:0d:8e:aa:be:
22:f9:eb:df:f7:56:f0:9b:b6:b0:26:32:34:1f:fc:
52:8b:15:70:b9:3d:de:3d:4d:7b:d5:5c:5d:25:86:
3f:45:d9:13:2f:4e:96:b4:41:5a:de:fb:47:90:6d:
c2:9b:4b:e5:7b:96:b1:0c:f3:ca:d4:3d:47:3b:f9:
6f:2d:db:47:10:e2:27:77:ee:e0:3c:74:5d:09:2e:
23:e3:7c:66:a1:08:eb:66:7e:65:65:9c:90:c2:ce:
51:34:4b:e6:d5:35:2c:43:7c:d6:f7:0c:45:20:97:
04:10:51:46:ba:50:87:a8:f2:8f:34:44:44:3b:bf:
3d:ca:ad:ef:d7:89:e4:2c:d2:3f:2e:39:5a:e9:13:
4e:4b:6e:5e:b2:67:ac:41:81:22:d9:be:e3:1f:d9:
06:83:d3:27:94:72:85:df:ef:ea:ef:50:08:16:80:
f2:f0:23:59:e9:c4:cd:67:a0:f4:5b:fd:ca:af:eb:
31:48:9c:df:aa:d7:ac:21:ff:3a:96:f3:52:21:d1:
92:a7:17:d5:f0:ef:c7:c5:c8:38:d0:6f:3a:3d:78:
ca:83:4c:1f:e9:31:75:27:22:f2:a0:18:d8:7b:24:
9c:a4:bf:10:d4:81:1f:56:a5:d9:5e:22:02:b2:12:
cf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A3:CC:73:01:2E:A9:EF:48:25:27:37:0C:E6:AC:E6:13:D3:7B:98
X509v3 Authority Key Identifier:
keyid:2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0c:85:0e:ce:27:de:1a:e9:d5:62:88:ea:19:d5:e9:86:bc:
51:af:05:4c:60:76:17:a9:9d:59:80:b7:b0:f8:d4:07:08:2b:
31:2e:c6:77:3b:09:c4:14:6a:73:08:24:ad:51:78:b7:3b:69:
6a:62:b7:56:84:9d:97:31:fb:51:e1:17:5a:f4:31:dc:16:a8:
65:1f:fa:b0:ed:8c:e8:50:76:0f:82:8a:c5:55:6f:d3:7a:0a:
5c:be:c1:23:47:07:7d:b2:5f:07:14:d0:79:14:71:30:b4:d7:
1f:83:8e:f2:69:ea:4b:56:06:d4:54:e3:f3:d7:3d:eb:a3:4a:
88:84:61:97:5d:ce:63:cf:f8:d7:60:f3:3c:85:a0:f7:20:df:
2e:db:08:e0:2c:d5:94:36:9e:7d:cb:dd:65:9a:33:c7:91:94:
48:3c:c0:7e:f1:ab:a6:26:71:69:f9:b9:15:db:e1:c3:25:f9:
34:cc:ed:94:83:ee:e6:eb:10:b4:d6:07:e6:b2:11:c4:8f:6c:
08:62:a1:29:ce:44:35:43:06:92:78:9a:3a:e6:5e:3b:47:1b:
bf:d2:7b:58:8d:f0:77:ce:e9:f3:5f:46:da:c5:51:3b:19:8d:
23:43:b0:0d:49:ed:b4:a2:2a:37:b4:6c:44:3d:2f:f0:f6:5a:
9a:a3:9e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:57 2026 by rpki-client