Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
File: LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft (raw, json)
Hash identifier: 27VikgaBuDJiEkghaF2sBmayrnOr4pwoOOy5I+YsCWM=
Subject key identifier: F9:58:A0:B5:5D:F9:6F:DA:C2:6F:08:38:99:2B:2B:21:CF:C8:D6:44
Authority key identifier: 2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
Certificate issuer: /CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Certificate serial: 019D29298F9B72D4B1F3E24FF5937128D8ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
Manifest number: 48
Signing time: Thu 26 Mar 2026 08:01:22 +0000
Manifest this update: Thu 26 Mar 2026 08:01:22 +0000
Manifest next update: Fri 27 Mar 2026 08:01:22 +0000
Files and hashes: 1: 9yvmVURUkLMHk20MVeDjqLMtnVE.roa (hash: /RYvywBfKnZxdvL0x6U6DMMb9MrbE+OssqTLAfPCxa8=)
2: LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl (hash: 8WHo4dHhAI4ddxCm79kwH8B74EbRPmGMQgNLRyS2U+k=)
3: Nequ1Lfv45A-4d-1Vk4dCZmbP8I.roa (hash: bLVnDdjoc9G1dickoCoDDOI7CZ2glnUV81dCe9iXEnE=)
4: eFeaVaRSBkGil76pjqqdgdUkbzI.roa (hash: mK68NwlgziX7HL5QUueavEEpH7AmEQ0bjY5gVUd0cuc=)
5: rxqd0Gry-OP0vQizZ8B0iUOlhQk.roa (hash: YqR2/1gTcjcRib7Q7eC6pgNPFlvqofC4cwX5ccdPO5s=)
6: sk6WLXVZEkboXRVPMZBoeqCrxVY.roa (hash: 4xjEoOdVMoXraD+ur+OZrTrLjOFEYcxLVFCWWAfHvz8=)
7: uIxLvhO87cm4uLEN6CRbiRRAprg.roa (hash: /WkNAUA3svepJJ+1z611s33eGYD9olxUjtZpjS5M7lk=)
8: uhrvAuxzS5aftx3VHfde8tRACMk.roa (hash: 8t8x2EpQlFENAHhuFsJA0XsBIYVQrZTRSbhmAKKQQcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:8f:9b:72:d4:b1:f3:e2:4f:f5:93:71:28:d8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Validity
Not Before: Mar 26 08:01:22 2026 GMT
Not After : Mar 27 08:01:22 2026 GMT
Subject: CN=f958a0b55df96fdac26f0838992b2b21cfc8d644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:76:1a:c7:07:1c:50:15:e3:ad:85:af:f8:
44:d6:80:c7:5c:c0:7d:0a:70:50:32:3e:9f:31:cf:
23:50:f3:c4:c7:db:4d:81:34:0b:0b:42:57:0d:fb:
cf:c2:fe:11:6a:f4:d8:69:48:19:e8:e1:c7:0c:ad:
19:7e:04:8a:79:01:b4:2c:ae:76:82:12:63:93:9c:
50:ac:af:ba:5d:0f:25:2c:60:d8:b9:5f:34:4e:2c:
a4:82:e6:de:7b:37:93:e0:2e:1c:75:72:e4:d9:47:
8e:38:5c:b0:63:24:83:81:b7:bb:1f:16:fe:ed:d7:
60:17:c2:8d:d6:f9:38:44:cb:5d:c1:66:5b:14:07:
d3:47:9a:3b:fc:b5:18:8e:cc:87:54:16:50:3a:84:
4e:0d:d4:3d:dc:94:5a:3c:07:b8:bb:9b:eb:4a:b7:
42:f5:68:87:25:f1:83:0e:5a:52:df:05:d0:e6:27:
75:75:a2:d2:49:10:76:c3:ed:e5:79:6f:59:b3:af:
7c:42:74:41:1e:ac:45:08:28:b6:f1:18:87:36:48:
a6:c2:be:c1:bf:07:bb:1e:1d:a2:b0:96:9c:87:f8:
16:e9:0e:46:a5:71:2d:a0:b7:75:16:c4:1b:58:09:
6c:18:9b:52:98:0a:05:69:cf:40:fa:a9:45:3d:f7:
fe:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:58:A0:B5:5D:F9:6F:DA:C2:6F:08:38:99:2B:2B:21:CF:C8:D6:44
X509v3 Authority Key Identifier:
keyid:2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:61:90:33:6a:e8:5f:8a:95:33:5f:cd:ad:14:c0:96:2e:82:
37:4c:5a:f6:13:d7:58:88:8b:36:0c:fe:68:89:c3:fc:06:af:
5f:ae:6d:2d:8c:26:2b:53:ec:4a:4a:8f:f1:b6:9d:75:c2:e6:
5c:99:a8:e6:94:b2:b8:1c:ec:77:46:d4:76:cb:a2:2f:c7:19:
2c:c6:5e:b3:16:3d:86:c7:fc:ba:d3:f3:97:2a:31:f8:5f:4d:
73:a2:5a:3d:4d:c4:e1:92:90:95:e9:c9:59:e3:57:c7:0e:bb:
7d:04:28:b6:aa:96:ea:ac:5f:cd:d2:62:13:f0:7c:cd:94:c5:
2f:f0:f5:64:fc:60:92:68:e8:88:2d:3a:68:4e:81:24:a1:d2:
ad:b7:a3:fc:fd:70:f4:31:28:d5:4d:3a:9b:1d:ac:2a:94:cf:
3b:88:ff:d0:de:45:74:c9:7c:12:9d:a5:75:15:f4:be:df:e6:
2f:12:e3:d5:cc:f2:f1:da:5e:18:22:f2:24:f8:ae:0f:2b:62:
0c:2d:11:26:20:b6:c5:1b:fc:03:10:83:11:0c:77:1f:e7:d3:
11:ca:53:52:51:bf:7f:b9:9c:e1:a2:8f:d1:7a:28:01:47:87:
65:f4:b6:12:b8:8b:63:15:52:66:b0:ea:ba:df:84:16:11:6f:
12:b8:83:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:48:21 2026 by rpki-client