Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
File: lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft (raw, json)
Hash identifier: k7hPHfzWdTYH5VsOAzu0bYxbSh3hS0FXkeXWbLyMbjY=
Subject key identifier: CF:4C:80:A7:A6:37:9C:EF:A1:7A:C8:AF:66:BA:BB:B9:28:33:94:59
Authority key identifier: 97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
Certificate issuer: /CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Certificate serial: 019D27DF64070C6F4A8F01CC0F82C70AA44A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:00:44 +0000
Manifest this update: Thu 26 Mar 2026 02:00:44 +0000
Manifest next update: Fri 27 Mar 2026 02:00:44 +0000
Files and hashes: 1: DE4eWYMqD_V_TW9RHCPnXwS869o.roa (hash: B3QCN3c0NtaCxyXkiY1LF3q86AMCDmY0V4HgIvdlpZw=)
2: QHQB5R-_IHEKwwGTKDoZ2Ksm3ts.roa (hash: RSCo2PpN2aVf+mUteSJphpe4hoO5sJZI7c95rlwWbrM=)
3: lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl (hash: Ax3Es9sQ4L/EwhiCQ2muPIY4fXJhXvX25TQfWDrnpvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:64:07:0c:6f:4a:8f:01:cc:0f:82:c7:0a:a4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Validity
Not Before: Mar 26 02:00:44 2026 GMT
Not After : Mar 27 02:00:44 2026 GMT
Subject: CN=cf4c80a7a6379cefa17ac8af66babbb928339459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cf:50:2c:69:db:25:b7:ed:9e:0e:4e:ed:83:
17:fa:4e:2a:82:d6:a4:65:e9:1b:af:ff:d0:88:dc:
eb:5b:9f:48:9e:56:0e:59:c8:14:4b:55:0a:83:36:
98:8c:25:e8:a5:0e:d0:f5:7a:f7:fd:9f:31:76:25:
f7:40:86:97:7d:a5:00:3a:aa:e8:ca:94:67:ae:68:
19:fe:c8:bc:3a:f1:51:3c:6c:eb:94:a5:b1:74:07:
a9:91:08:41:a1:3a:ed:10:29:f5:6f:22:81:03:ab:
dd:16:08:0f:1d:ca:5a:48:f5:de:c1:a3:1c:a1:10:
cc:4b:6f:98:ac:1a:2a:39:27:25:fe:54:3b:6a:73:
16:5e:23:20:d9:98:00:94:c1:5b:79:2a:01:68:54:
e8:fd:e9:96:89:b1:74:47:f0:e3:99:a5:c3:af:bf:
6f:6b:11:a7:66:3d:2f:c6:07:b0:b1:14:8e:a3:49:
c9:01:84:ba:81:70:09:a3:67:b9:12:45:de:f4:5d:
94:e2:1b:c3:a0:2c:6c:da:37:d5:9a:4a:36:6e:59:
13:57:65:b4:8a:fb:51:33:ad:9b:b9:f2:57:1d:d5:
83:c3:ee:9b:8f:74:7f:7d:4c:17:58:f5:d3:82:bd:
23:0f:72:30:b5:3b:06:e0:79:16:49:60:c1:02:a5:
41:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4C:80:A7:A6:37:9C:EF:A1:7A:C8:AF:66:BA:BB:B9:28:33:94:59
X509v3 Authority Key Identifier:
keyid:97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:61:63:59:0b:44:51:d2:ae:a5:45:ce:de:3a:a3:f3:81:ae:
bd:c7:71:71:5b:b2:a6:11:73:01:0a:23:c5:ce:4a:76:eb:97:
1b:d8:66:e7:78:a1:c2:e8:1e:94:df:9b:0c:d8:c6:a9:ad:7d:
75:bf:c4:fe:f5:65:6e:e9:cb:85:b3:24:b5:5e:38:91:e7:89:
72:31:58:4c:a9:7c:b1:fd:b3:66:32:db:02:79:ce:c0:67:f2:
ae:67:57:ed:8e:86:85:f4:44:5f:ba:b5:ed:a8:79:29:2d:cf:
b9:8a:8a:26:52:21:0a:e0:a1:d7:ff:91:02:e1:44:32:de:47:
9d:28:fb:ee:c7:12:cc:48:63:da:e2:29:af:55:5d:f7:9d:a4:
ef:96:fe:be:36:80:04:af:1f:a2:17:0a:fe:ab:bb:ac:2c:a8:
d5:d5:06:d5:81:d0:43:2e:19:c9:30:a2:6d:f8:02:25:8d:d5:
72:ef:03:d7:33:75:27:19:bb:a2:f0:f7:b1:57:e6:de:4b:88:
08:cb:92:9b:f3:ee:6a:1c:5a:48:2d:2a:15:39:ad:f9:48:63:
08:69:a7:18:d8:e3:4a:10:b4:6d:e0:e3:58:ba:77:0f:a9:f9:
6f:18:69:32:e9:93:d3:3f:99:8a:4c:68:bb:f9:f5:3c:61:95:
19:4e:f7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:17 2026 by rpki-client