Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft
File: LXjkrg653KxiXZEGzohcW0mAddc.mft (raw, json)
Hash identifier: Ix2MAPH3eBLW3/qFQqIElgeD/y48tiXz9rp3djk1i6w=
Subject key identifier: 5F:5B:C3:84:F3:29:59:2F:11:65:6F:7B:25:8A:0C:2F:FE:E3:C3:80
Authority key identifier: 2D:78:E4:AE:0E:B9:DC:AC:62:5D:91:06:CE:88:5C:5B:49:80:75:D7
Certificate issuer: /CN=2d78e4ae0eb9dcac625d9106ce885c5b498075d7
Certificate serial: 019D28845E239538F45A1D65EF35B36F333E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft
Manifest number: 01E9
Signing time: Thu 26 Mar 2026 05:00:56 +0000
Manifest this update: Thu 26 Mar 2026 05:00:56 +0000
Manifest next update: Fri 27 Mar 2026 05:00:56 +0000
Files and hashes: 1: 55_ifAwTrqSRB0aOLB49nTVctSI.roa (hash: 4G0y1MW280JpB4GB7lc4Qiad6u1T/uOmjGofSaEn2fo=)
2: LXjkrg653KxiXZEGzohcW0mAddc.crl (hash: R2KQuXdm5AWhd6YMUtumJKfxtUQKz7FjYFFCvecfAeI=)
3: O7uwantDjntNvlRH8RUE6UKocdY.roa (hash: TDMoKyC/SFI/TVzEIonzTVVbB4aesDSgkumTRMLegVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:5e:23:95:38:f4:5a:1d:65:ef:35:b3:6f:33:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d78e4ae0eb9dcac625d9106ce885c5b498075d7
Validity
Not Before: Mar 26 05:00:56 2026 GMT
Not After : Mar 27 05:00:56 2026 GMT
Subject: CN=5f5bc384f329592f11656f7b258a0c2ffee3c380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7d:16:8d:a2:0e:d0:27:a7:86:6f:5d:da:98:
d5:5f:85:61:29:a0:bb:bf:3e:95:d7:5b:f6:5c:ed:
08:73:6f:de:7f:59:6b:88:80:64:0d:19:3d:ba:d1:
03:fa:37:4c:4f:f0:c8:73:8a:82:0a:4c:b5:d2:c0:
0f:82:27:87:5a:10:5f:e9:97:16:06:10:67:dd:60:
0b:c7:ea:da:8c:6a:01:4d:c3:c5:76:09:9a:d6:55:
a0:fb:45:09:6e:97:2c:ce:a8:cf:d2:e9:2a:a4:72:
af:3d:8a:10:b6:1a:cc:d2:96:80:68:f6:65:0c:a8:
cc:70:dd:78:e6:e1:24:7d:2d:19:3d:67:89:96:2c:
75:99:63:f1:c1:1a:18:54:84:13:56:b3:04:36:4e:
60:c2:5d:2f:49:55:79:d2:ef:13:20:f5:36:41:0a:
db:2d:69:80:91:67:72:14:21:71:c9:23:41:99:28:
27:b1:a7:15:4b:3d:3f:e5:76:ed:7d:db:2a:73:5f:
03:e3:f7:c8:23:76:58:52:e9:99:81:7f:7c:40:21:
d1:98:c5:08:07:1d:29:16:23:f6:ea:bf:51:75:79:
86:c2:81:86:14:56:f7:29:ea:43:93:a4:02:b1:06:
05:8d:42:85:0d:41:ce:26:99:ae:f9:ea:d6:2e:90:
24:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5B:C3:84:F3:29:59:2F:11:65:6F:7B:25:8A:0C:2F:FE:E3:C3:80
X509v3 Authority Key Identifier:
keyid:2D:78:E4:AE:0E:B9:DC:AC:62:5D:91:06:CE:88:5C:5B:49:80:75:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:19:8b:35:ce:30:a4:cb:c5:c0:18:ce:17:cc:a8:a4:0e:29:
af:91:9f:b8:5f:13:ee:58:58:dc:73:de:b1:9d:dc:ef:00:7c:
98:e3:c8:a7:68:30:39:2b:7c:4c:58:f1:96:cd:74:bb:dd:67:
bf:aa:57:f5:55:76:1d:86:0b:f3:af:7a:72:bf:27:df:d7:f1:
8d:67:72:79:b8:e9:c3:f0:e6:83:bc:8a:b5:82:68:ec:53:09:
82:1c:40:97:17:de:3c:2e:99:22:43:c2:d0:dc:01:35:1e:de:
c3:66:99:10:f9:0a:96:39:cc:cf:cd:13:64:80:b3:22:f1:4a:
41:c2:d7:93:19:1b:c7:41:58:f2:bd:89:60:f1:ea:ff:59:9b:
d1:3f:e0:b5:63:57:f8:ec:2c:e7:ec:d1:d2:1c:b2:be:88:58:
28:cb:67:65:6a:79:b0:49:81:33:ee:18:ca:ce:d9:c1:a9:d9:
7c:ab:f6:4e:4e:48:37:1e:44:49:3e:e6:7b:b6:ee:73:b2:15:
5c:78:7d:8e:71:b4:19:59:5e:4c:4b:4d:3b:cf:a0:c8:7b:9d:
ac:17:05:90:e0:76:a0:b2:81:bc:27:ff:1c:4a:7d:b5:81:2a:
7b:cb:76:10:4e:9c:7f:03:44:8c:89:a6:67:53:ba:87:64:62:
2e:74:72:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohF4jlTj0Wh1l7zWzbzM+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNzhlNGFlMGViOWRjYWM2MjVkOTEwNmNlODg1YzViNDk4
MDc1ZDcwHhcNMjYwMzI2MDUwMDU2WhcNMjYwMzI3MDUwMDU2WjAzMTEwLwYDVQQD
Eyg1ZjViYzM4NGYzMjk1OTJmMTE2NTZmN2IyNThhMGMyZmZlZTNjMzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX0WjaIO0Cenhm9d2pjVX4VhKaC7
vz6V11v2XO0Ic2/ef1lriIBkDRk9utED+jdMT/DIc4qCCky10sAPgieHWhBf6ZcW
BhBn3WALx+rajGoBTcPFdgma1lWg+0UJbpcszqjP0ukqpHKvPYoQthrM0paAaPZl
DKjMcN145uEkfS0ZPWeJlix1mWPxwRoYVIQTVrMENk5gwl0vSVV50u8TIPU2QQrb
LWmAkWdyFCFxySNBmSgnsacVSz0/5Xbtfdsqc18D4/fII3ZYUumZgX98QCHRmMUI
Bx0pFiP26r9RdXmGwoGGFFb3KepDk6QCsQYFjUKFDUHOJpmu+erWLpAknwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9bw4TzKVkvEWVveyWKDC/+48OAMB8GA1UdIwQY
MBaAFC145K4OudysYl2RBs6IXFtJgHXXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFhqa3JnNjUzS3hpWFpFR3pvaGNXMG1BZGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81MjhiMzEtNDJjOS00NjI5LWE0NWQt
ZjY1Njc1NTI2MDVlLzEvTFhqa3JnNjUzS3hpWFpFR3pvaGNXMG1BZGRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS81MjhiMzEtNDJjOS00NjI5LWE0NWQtZjY1Njc1NTI2MDVl
LzEvTFhqa3JnNjUzS3hpWFpFR3pvaGNXMG1BZGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShmLNc4w
pMvFwBjOF8yopA4pr5GfuF8T7lhY3HPesZ3c7wB8mOPIp2gwOSt8TFjxls10u91n
v6pX9VV2HYYL8696cr8n39fxjWdyebjpw/Dmg7yKtYJo7FMJghxAlxfePC6ZIkPC
0NwBNR7ew2aZEPkKljnMz80TZICzIvFKQcLXkxkbx0FY8r2JYPHq/1mb0T/gtWNX
+Ows5+zR0hyyvohYKMtnZWp5sEmBM+4Yys7ZwanZfKv2Tk5INx5EST7me7buc7IV
XHh9jnG0GVleTEtNO8+gyHudrBcFkOB2oLKBvCf/HEp9tYEqe8t2EE6cfwNEjImm
Z1O6h2RiLnRycQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:34 2026 by rpki-client