Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
File: lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft (raw, json)
Hash identifier: RxwmLHBaYVzyC1yA2Y3TziMG8RZIFGImXFn9F3DICmg=
Subject key identifier: 78:1C:FA:51:05:1A:AF:6A:4F:CC:C0:CA:4D:E2:39:26:08:4D:87:00
Authority key identifier: 97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
Certificate issuer: /CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Certificate serial: 019F9512556B744F5A304C19716F77C3FF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 17:00:34 +0000
Manifest this update: Fri 24 Jul 2026 17:00:34 +0000
Manifest next update: Sat 25 Jul 2026 17:00:34 +0000
Files and hashes: 1: H_aIB34XXRbiPvATUkCbAHJuZks.roa (hash: GmWrAgdFKtzaI9LiJNA5YbFMAcvIbrgKGLYesLFjTmw=)
2: QHQB5R-_IHEKwwGTKDoZ2Ksm3ts.roa (hash: RSCo2PpN2aVf+mUteSJphpe4hoO5sJZI7c95rlwWbrM=)
3: lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl (hash: nh26pmcvCKSQJgq6YTE5ddiwrn0T9fqfDzx31+QTM9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:55:6b:74:4f:5a:30:4c:19:71:6f:77:c3:ff:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Validity
Not Before: Jul 24 17:00:34 2026 GMT
Not After : Jul 25 17:00:34 2026 GMT
Subject: CN=781cfa51051aaf6a4fccc0ca4de23926084d8700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:69:05:70:6b:27:70:95:5b:de:b3:1a:69:
d7:57:8d:3c:66:7d:2a:2f:f2:87:6c:e6:22:25:4f:
bb:f2:f3:8c:c4:f3:e4:38:25:aa:70:73:e5:ad:6a:
04:91:84:0c:b1:0a:c4:37:4a:2f:9d:91:53:1f:d0:
7d:3d:5e:42:0f:74:bc:de:e7:7e:14:99:8e:03:7e:
ac:a7:92:b7:f8:37:b9:56:52:a6:49:d7:f4:0c:bb:
1e:c7:ec:fa:58:4d:9c:9c:f2:7b:6d:51:50:57:ff:
85:01:d5:94:09:e1:aa:53:be:8b:21:8e:ae:5b:6d:
3b:d7:81:43:0d:82:6a:99:78:ef:51:8a:91:c7:57:
09:11:d5:a3:5d:80:ea:62:3a:10:f5:2f:fe:95:cb:
07:c3:b4:46:c6:65:e6:45:33:be:c0:a1:ba:33:93:
3b:18:be:5b:4f:7e:4e:96:59:a8:9a:9e:f9:9b:6c:
cd:28:79:3b:46:7f:9c:e6:0f:55:6b:2a:9a:e2:bf:
5d:65:f1:57:8d:ac:e3:6f:55:ba:92:bb:c7:6b:37:
00:ed:53:af:de:aa:b5:b8:a7:9a:b2:d5:06:ac:4b:
21:34:85:52:79:32:ec:92:c3:e6:2f:b1:d5:59:7c:
31:9d:30:ae:4f:4a:68:8a:6d:17:55:90:95:d6:9c:
f8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1C:FA:51:05:1A:AF:6A:4F:CC:C0:CA:4D:E2:39:26:08:4D:87:00
X509v3 Authority Key Identifier:
keyid:97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:49:af:c7:d7:65:b5:7b:86:03:b4:c1:67:e5:de:63:6c:7e:
12:c0:9e:32:80:be:81:31:9a:59:e8:cf:12:52:55:37:14:c6:
c8:5b:70:1c:38:82:dd:83:31:fa:7a:72:dc:21:a4:34:31:a6:
c9:f9:ae:4f:18:c2:51:2a:fc:1a:40:77:90:cb:0f:ce:67:81:
46:d7:63:7b:c7:7d:c5:5c:44:ac:42:f9:e7:78:96:e5:d7:78:
ed:bf:e3:10:b5:d9:f0:d9:8e:bb:a2:e2:0a:b3:91:5c:35:b8:
32:3e:40:94:e4:19:21:90:1b:e6:e5:6a:be:f8:88:03:a9:ad:
84:66:b6:6a:84:7d:55:16:95:a5:99:31:01:c9:2e:44:9b:db:
55:57:69:d2:69:0d:c2:bf:0e:99:a7:0f:4f:74:c5:4d:9a:74:
a6:45:cc:9d:22:44:af:ae:be:93:4b:93:ef:1e:4d:f6:b7:71:
ec:e4:25:61:a7:34:80:a9:a8:97:3e:af:35:3c:86:7c:f4:3a:
16:62:4e:c5:5f:15:65:a1:00:0f:3b:82:2c:c1:e7:2c:6c:43:
77:33:2d:f9:97:3b:ff:27:f2:cf:21:3a:cc:08:c3:0a:d5:78:
aa:52:5f:c5:12:4f:12:77:83:60:3d:fe:0a:82:1c:d7:41:28:
4c:a2:52:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:09 2026 by rpki-client