Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
File: LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft (raw, json)
Hash identifier: wzwceIcb/wR4vcrvEe6oWW5h3iPUyvyQzLjutqKyJ+c=
Subject key identifier: C9:2A:77:5A:74:52:66:55:55:70:F7:8C:C8:D7:19:DB:8D:D3:CA:02
Authority key identifier: 2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
Certificate issuer: /CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Certificate serial: 019F91358A8CA1625FC273D169C0A7275DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
Manifest number: 0188
Signing time: Thu 23 Jul 2026 23:00:32 +0000
Manifest this update: Thu 23 Jul 2026 23:00:32 +0000
Manifest next update: Fri 24 Jul 2026 23:00:32 +0000
Files and hashes: 1: 0xXbCURhYGAah-ub3QgpVnkd5sc.roa (hash: Q0oF/ybiwcu5gijOk6b+e5zoOovn/M1MtfwaMpdjGcE=)
2: 9yvmVURUkLMHk20MVeDjqLMtnVE.roa (hash: /RYvywBfKnZxdvL0x6U6DMMb9MrbE+OssqTLAfPCxa8=)
3: LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl (hash: 5K8B1Fp8MZP80qYshJH0hC7zXD1VLakoFABAuu3xSKg=)
4: Nequ1Lfv45A-4d-1Vk4dCZmbP8I.roa (hash: bLVnDdjoc9G1dickoCoDDOI7CZ2glnUV81dCe9iXEnE=)
5: eFeaVaRSBkGil76pjqqdgdUkbzI.roa (hash: mK68NwlgziX7HL5QUueavEEpH7AmEQ0bjY5gVUd0cuc=)
6: rxqd0Gry-OP0vQizZ8B0iUOlhQk.roa (hash: YqR2/1gTcjcRib7Q7eC6pgNPFlvqofC4cwX5ccdPO5s=)
7: sk6WLXVZEkboXRVPMZBoeqCrxVY.roa (hash: 4xjEoOdVMoXraD+ur+OZrTrLjOFEYcxLVFCWWAfHvz8=)
8: uIxLvhO87cm4uLEN6CRbiRRAprg.roa (hash: /WkNAUA3svepJJ+1z611s33eGYD9olxUjtZpjS5M7lk=)
9: uhrvAuxzS5aftx3VHfde8tRACMk.roa (hash: 8t8x2EpQlFENAHhuFsJA0XsBIYVQrZTRSbhmAKKQQcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:8a:8c:a1:62:5f:c2:73:d1:69:c0:a7:27:5d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Validity
Not Before: Jul 23 23:00:32 2026 GMT
Not After : Jul 24 23:00:32 2026 GMT
Subject: CN=c92a775a745266555570f78cc8d719db8dd3ca02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:f1:97:42:3c:0d:d1:b0:61:ca:7e:50:c9:
78:bc:9d:c7:41:07:4d:22:c1:ac:5c:1c:86:fd:cf:
13:15:b5:48:a8:8b:3d:66:94:9e:2e:10:a5:be:d0:
aa:77:ee:84:15:db:ec:50:5c:b0:c7:27:97:52:ac:
3e:7d:53:6b:80:aa:76:10:c3:d7:03:d5:ea:b7:46:
7b:a3:95:11:05:aa:96:07:1c:b4:69:de:8b:a4:3d:
ec:90:ff:a7:59:b6:b5:d3:0f:8d:57:16:e4:ae:16:
f3:7f:00:3a:98:55:7f:67:03:7b:0a:48:65:25:db:
b5:84:ba:03:60:e5:c1:94:1c:23:2d:be:95:fd:06:
86:4f:95:51:8d:95:a9:89:ee:1a:1d:51:7e:4c:8e:
04:f0:79:d9:99:23:07:96:4a:a5:cb:8a:17:a1:b5:
3a:d6:45:79:2c:ab:50:7d:68:0d:4f:4d:fb:4a:04:
40:41:fc:67:e7:dd:c4:b2:9b:ad:ab:43:06:96:ca:
9a:8d:c6:68:4d:8a:d6:1e:17:94:80:d5:af:58:c9:
b1:f7:c0:d5:e8:a5:4b:f5:c0:75:6e:75:be:17:34:
1f:02:ba:a3:71:ea:b5:a4:66:a3:48:29:9a:4d:d5:
f4:6d:7e:59:70:87:f7:10:ce:1a:61:37:60:0c:d6:
2d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2A:77:5A:74:52:66:55:55:70:F7:8C:C8:D7:19:DB:8D:D3:CA:02
X509v3 Authority Key Identifier:
keyid:2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:83:d7:84:8e:44:19:e9:19:ad:63:17:3c:1b:41:28:fd:2d:
f0:fa:c0:3f:c3:c5:a9:ae:6c:d9:d1:01:67:a3:32:01:f5:d8:
04:e8:21:b6:17:87:52:84:bb:99:97:32:e4:e0:f7:89:e8:e1:
82:a0:0c:eb:43:98:8f:b2:d9:a4:5e:bd:97:15:a0:d8:c8:92:
f6:5f:f4:ef:3f:bd:1a:ef:d2:64:40:de:68:23:40:db:27:28:
b9:9b:a1:9c:af:cb:ef:ec:38:f4:fb:c2:b2:72:7f:1a:50:9e:
9d:d5:3b:b7:78:b5:6b:f7:10:38:87:8e:41:03:6a:07:35:e6:
98:0e:6a:44:81:41:22:64:bc:6e:8d:d0:f2:ce:6e:36:98:0c:
27:af:14:70:db:33:e9:a2:bd:00:b9:06:77:b7:27:65:70:19:
b2:d8:b6:68:34:18:87:da:04:db:7f:71:fe:d8:a6:50:fd:8b:
65:e9:57:85:66:7c:57:64:61:9b:8f:ba:9b:3c:06:45:74:28:
45:b1:b5:53:0e:eb:38:a6:bd:83:76:93:f4:4c:e2:4f:87:16:
51:bd:37:00:21:12:99:26:32:4a:84:f9:ea:53:9b:79:6f:ce:
22:d9:01:be:f8:64:0a:7f:3b:2f:90:7a:cc:6a:77:9f:0f:8b:
96:6c:a7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:59:09 2026 by rpki-client