Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
File: LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft (raw, json)
Hash identifier: 9X8LdI6ZO1zXrymcN2hA4j8CZhnugECSA+r9WsdcwHw=
Subject key identifier: A1:95:D0:A2:C1:09:10:5F:B3:26:97:50:AE:4F:AE:EB:97:1A:DF:4E
Authority key identifier: 2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
Certificate issuer: /CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Certificate serial: 01A0DB7216B9D7C07433633F8A6C8C15DAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
Manifest number: 0233
Signing time: Sat 26 Sep 2026 02:01:22 +0000
Manifest this update: Sat 26 Sep 2026 02:01:22 +0000
Manifest next update: Sun 27 Sep 2026 02:01:22 +0000
Files and hashes: 1: 0xXbCURhYGAah-ub3QgpVnkd5sc.roa (hash: Q0oF/ybiwcu5gijOk6b+e5zoOovn/M1MtfwaMpdjGcE=)
2: 9yvmVURUkLMHk20MVeDjqLMtnVE.roa (hash: /RYvywBfKnZxdvL0x6U6DMMb9MrbE+OssqTLAfPCxa8=)
3: LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl (hash: Wgrqa2Q6friF3gfECsDR3it2p/iho2RqRWpP5GrSs6Q=)
4: Nequ1Lfv45A-4d-1Vk4dCZmbP8I.roa (hash: bLVnDdjoc9G1dickoCoDDOI7CZ2glnUV81dCe9iXEnE=)
5: eFeaVaRSBkGil76pjqqdgdUkbzI.roa (hash: mK68NwlgziX7HL5QUueavEEpH7AmEQ0bjY5gVUd0cuc=)
6: rxqd0Gry-OP0vQizZ8B0iUOlhQk.roa (hash: YqR2/1gTcjcRib7Q7eC6pgNPFlvqofC4cwX5ccdPO5s=)
7: sk6WLXVZEkboXRVPMZBoeqCrxVY.roa (hash: 4xjEoOdVMoXraD+ur+OZrTrLjOFEYcxLVFCWWAfHvz8=)
8: uIxLvhO87cm4uLEN6CRbiRRAprg.roa (hash: /WkNAUA3svepJJ+1z611s33eGYD9olxUjtZpjS5M7lk=)
9: uhrvAuxzS5aftx3VHfde8tRACMk.roa (hash: 8t8x2EpQlFENAHhuFsJA0XsBIYVQrZTRSbhmAKKQQcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:72:16:b9:d7:c0:74:33:63:3f:8a:6c:8c:15:da:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Validity
Not Before: Sep 26 02:01:22 2026 GMT
Not After : Sep 27 02:01:22 2026 GMT
Subject: CN=a195d0a2c109105fb3269750ae4faeeb971adf4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fc:c3:c8:f4:f0:2c:66:77:6a:0e:67:ef:2e:
99:62:0b:d1:b9:3c:06:73:4d:c0:d1:4a:d8:55:2f:
aa:65:84:7b:05:26:cd:6a:aa:c3:83:b9:44:05:ef:
27:bd:e4:5f:0d:40:f4:c0:ef:70:8a:5a:31:46:b2:
10:5c:17:93:ac:af:f9:87:71:d1:4e:20:b6:13:80:
20:f0:81:e7:d9:b1:dc:64:bc:f5:e3:3d:fa:80:bd:
a5:a5:06:22:40:fa:97:48:de:26:0c:a2:d6:50:06:
59:cf:8d:43:66:68:63:44:c3:82:a6:01:bc:15:7f:
00:cf:27:90:e4:b1:99:e3:cd:28:a7:b0:b9:b1:7b:
3b:99:1e:0d:f1:a6:30:40:9a:8e:f8:b4:27:5e:98:
e1:b9:4f:1f:ef:d8:0c:bb:d0:54:59:35:2d:1b:04:
66:08:86:3b:cc:16:bc:a6:a9:8d:34:ce:55:9f:41:
ec:3c:63:e4:97:09:c4:6f:cb:30:35:1e:37:23:4d:
93:75:8f:37:d6:06:5a:2f:ba:ac:04:c3:cc:c0:a0:
08:2e:52:85:26:9f:d2:fd:62:1d:44:e2:82:04:e1:
de:2b:fb:8d:0f:9e:78:ca:3b:1e:b2:4b:44:0d:4e:
0c:ee:91:17:b0:f9:61:5f:de:86:c3:66:ce:ed:32:
a8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:95:D0:A2:C1:09:10:5F:B3:26:97:50:AE:4F:AE:EB:97:1A:DF:4E
X509v3 Authority Key Identifier:
keyid:2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:69:ef:d1:30:b2:83:85:2d:99:0c:e7:e0:fc:26:1a:45:c0:
01:2b:d0:4f:d5:c2:e0:ab:b4:de:8b:10:d7:12:1f:4b:d1:4e:
4c:8d:bc:72:38:dd:97:e5:fa:0b:1e:17:9a:be:c4:03:18:a1:
ac:3e:b9:d0:07:a9:60:06:21:5f:c7:3a:cf:bc:d5:11:5f:c5:
2a:71:cc:47:64:64:a9:f3:5e:c2:a6:b3:f6:ea:5e:a5:89:48:
77:1e:49:78:39:d9:7e:d4:95:8d:de:1e:37:7a:1e:d0:cd:a0:
cd:c4:bd:c4:18:6e:ab:25:1d:a7:e3:6c:81:f4:45:10:33:59:
36:32:46:2d:8b:c8:5e:9c:1d:2a:95:5b:3c:47:ba:4f:52:68:
ee:a3:1f:90:d5:7e:e3:b5:63:b9:12:09:7a:ca:86:5a:2a:05:
7d:b8:22:54:e1:b7:26:1c:78:a7:22:6f:e8:b0:9e:3e:80:23:
02:e5:da:d8:94:2b:c6:48:2a:f4:c4:e2:e2:fa:b1:50:5a:bf:
35:a4:4a:61:04:02:cd:83:10:e6:cf:ac:63:7f:b0:ee:a8:57:
19:af:42:30:05:28:37:eb:fd:71:7b:31:47:56:5d:d4:72:05:
1e:ca:b4:20:68:c5:ed:f6:c0:23:75:66:c4:e6:39:28:2a:9c:
a1:a3:6c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:31:49 2026 by rpki-client