Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
File: LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft (raw, json)
Hash identifier: J3g4Kv+shs4zr++OsXjGlAc1QvfRrCdEAZYhq8iHpdw=
Subject key identifier: DC:58:AB:8E:25:82:3D:9F:18:A5:CD:E2:97:03:72:F9:AF:91:B6:B7
Authority key identifier: 2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
Certificate issuer: /CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Certificate serial: 019D26CD3F2867AEEBDD9D31A30153F9C54E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 21:01:18 +0000
Manifest this update: Wed 25 Mar 2026 21:01:18 +0000
Manifest next update: Thu 26 Mar 2026 21:01:18 +0000
Files and hashes: 1: LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl (hash: rQmreX1Az+Xc0svsfiwxDD9fQ4Mb4r823/IFB5hcGyQ=)
2: xJrl572dGNTyomn-v8TCuFg7I1A.roa (hash: 2x5cy4pJUQbMIYLAtAfVd42ocgzotDRP+XX1VY3Dv3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:3f:28:67:ae:eb:dd:9d:31:a3:01:53:f9:c5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Validity
Not Before: Mar 25 21:01:18 2026 GMT
Not After : Mar 26 21:01:18 2026 GMT
Subject: CN=dc58ab8e25823d9f18a5cde2970372f9af91b6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:92:e4:06:b4:c4:f4:3e:07:c2:e9:b8:e7:8f:
33:3b:96:2a:5f:d1:62:dc:7e:6f:f7:08:5e:7a:da:
8b:c8:b3:d4:9d:5e:da:4b:60:5c:f8:11:0c:88:e5:
65:ed:78:2e:15:9e:3d:51:72:ff:c0:c0:c9:fe:a3:
52:90:a7:ba:d6:d8:ac:a7:31:13:7d:73:11:55:ec:
e2:56:ae:58:e6:fd:87:bc:4e:42:73:0c:2b:2c:d6:
e8:e9:1f:1a:94:87:79:ba:b2:32:d4:e8:fd:5f:75:
f5:bd:69:f0:a1:a5:a1:be:6e:0a:fb:c6:24:a4:6c:
52:70:d7:7b:52:15:8e:c8:62:41:b4:ba:94:fd:5d:
2a:43:d0:db:3d:f0:2c:b5:da:36:8c:90:8f:fc:0e:
43:59:b7:67:32:d3:aa:18:6b:c3:7d:54:45:b0:03:
bd:73:f9:21:82:6a:62:9a:8a:86:30:07:36:ed:f8:
e1:db:aa:77:31:e7:5d:25:25:25:95:61:05:a3:23:
70:2b:d0:19:71:4d:73:42:ab:5d:7d:6c:10:62:87:
66:19:37:94:42:8f:db:fc:c8:b6:61:7b:60:c9:23:
7f:e3:80:35:e5:30:57:ec:3e:d6:1e:ca:35:a6:55:
9c:1c:77:e2:c6:20:7b:56:17:62:05:f9:49:6a:c4:
3c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:58:AB:8E:25:82:3D:9F:18:A5:CD:E2:97:03:72:F9:AF:91:B6:B7
X509v3 Authority Key Identifier:
keyid:2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d3:df:b4:d2:cd:c4:6d:4c:4b:a7:33:d3:ec:e9:56:38:a3:
68:fc:87:b6:75:ce:45:27:8d:92:29:96:39:6c:1a:c8:83:b9:
ca:06:05:00:be:00:32:e1:d7:d1:a5:0c:3d:d9:b3:a4:b1:e8:
86:bd:64:48:45:f0:9a:e6:3e:9a:f7:80:64:dc:64:63:c5:db:
1d:16:87:09:34:88:ef:22:c4:88:a2:24:e3:68:f9:dc:5b:91:
af:91:5e:a2:c0:2b:48:07:ec:1c:5d:fd:b1:6e:96:51:a8:83:
49:ee:17:0a:86:44:5b:7f:99:38:52:bb:7a:84:0e:49:5c:a1:
e5:88:7c:14:fe:22:fa:62:f2:ec:ff:78:c2:6a:5f:20:11:17:
fe:cf:11:d3:b8:ff:60:78:57:31:df:88:ab:df:25:f0:e8:0e:
23:6b:96:ad:a5:31:5f:a7:10:58:8d:97:29:25:e4:5f:5c:b3:
af:52:51:00:19:1a:47:2d:f0:2b:0a:38:73:76:8c:fe:69:87:
16:bb:a3:7a:36:df:04:2b:61:2d:c1:44:d2:1a:b4:d0:ad:18:
21:71:8e:68:10:d1:9f:7e:15:44:bf:f6:31:19:da:79:ea:81:
29:00:59:94:22:63:12:de:02:80:89:5c:82:de:9a:1c:3f:e4:
25:4c:05:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:34:13 2026 by rpki-client