Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
File: LxrJ8JTYMY8wiNymgwGGX0YF6do.mft (raw, json)
Hash identifier: u5689J1qSad4JYSX9Cmmc042cj4WYJmkj2UYgchxpVY=
Subject key identifier: 79:89:FD:BE:42:22:6C:90:CC:87:47:64:CE:CA:85:83:AD:B3:6F:93
Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
Certificate issuer: /CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Certificate serial: 019D9B50CB4FC3330210AF78FABE2A1D4EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
Manifest number: 128A
Signing time: Fri 17 Apr 2026 12:00:56 +0000
Manifest this update: Fri 17 Apr 2026 12:00:56 +0000
Manifest next update: Sat 18 Apr 2026 12:00:56 +0000
Files and hashes: 1: LxrJ8JTYMY8wiNymgwGGX0YF6do.crl (hash: pjEYR7dxLs2+DYqDbEl5B6fOlQNOeUf6r4ate+mcT3c=)
2: R4EyQfq47lKcSi7lGsbXI4F8tPI.roa (hash: tdmT4SygVfTwG2tATcY87tl2PKsMrLDS/k3VojLg3Q0=)
3: U2Z1XV8o3uSKFqctNf3JUk-H5Ts.roa (hash: FRVvHMEadriOkR83sQ2tDLvX3mVKMsDHHQh/IgHBVFQ=)
4: UYxFngClnykqTHTfuXuiS4afmY0.roa (hash: qhH8eU5uzACUHVTAmy6bDaqx30+kPSiCPRvL6eNWthc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:cb:4f:c3:33:02:10:af:78:fa:be:2a:1d:4e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Validity
Not Before: Apr 17 12:00:56 2026 GMT
Not After : Apr 18 12:00:56 2026 GMT
Subject: CN=7989fdbe42226c90cc874764ceca8583adb36f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:e5:c0:de:07:65:4d:1b:f7:83:77:ba:37:
c6:2e:8e:83:87:fc:cf:cd:2f:aa:4d:e6:5a:38:73:
a4:6e:e1:58:bd:ed:e0:bc:13:8a:da:37:55:32:3b:
06:62:8c:65:61:65:13:45:08:0b:d4:45:90:14:82:
0b:ee:e7:33:32:20:f0:b9:67:a8:4e:03:55:b3:1d:
19:52:a7:f1:dc:2e:12:71:70:e7:59:4e:fd:e3:ad:
96:cc:9e:77:fb:99:76:f8:8d:c9:0a:6a:ca:b5:97:
2d:97:04:c9:36:09:83:9f:8f:db:43:c6:f4:39:53:
06:fb:bd:39:19:ab:58:33:c0:2f:cc:62:48:ee:92:
c8:c2:f7:45:cb:98:57:bf:d0:33:93:b8:53:52:c4:
15:33:a4:1e:39:bc:02:07:94:d5:00:7c:7c:89:db:
c6:03:bb:9a:72:63:f6:95:c1:7b:4c:20:f6:d2:cd:
4b:63:88:05:85:a4:ee:a9:68:be:22:62:2a:6f:56:
d8:ed:ee:35:20:02:6c:62:1d:2e:dd:62:d1:c8:b8:
5a:0f:58:a0:7f:fc:dc:de:22:84:58:5b:62:17:8a:
49:f6:58:d6:18:6e:6f:0c:33:bb:7d:57:ba:b5:45:
c5:a6:a8:7c:03:76:38:b8:7c:75:9a:69:10:3e:85:
61:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:89:FD:BE:42:22:6C:90:CC:87:47:64:CE:CA:85:83:AD:B3:6F:93
X509v3 Authority Key Identifier:
keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:18:fe:7a:6f:6f:90:c8:8c:fd:50:52:d6:0b:d2:78:0f:84:
a8:15:99:f8:f7:16:91:be:ad:c2:61:67:26:fa:ff:8f:2a:83:
59:82:45:36:67:e1:9c:8f:23:40:09:2b:4e:3a:7c:aa:5a:47:
00:95:af:3f:5b:c6:c1:00:97:01:0e:18:e0:60:23:f2:41:f4:
a4:bc:0e:11:4d:6a:b6:53:6a:2e:d8:97:09:1c:d7:c2:ed:8f:
62:c7:ed:e0:71:20:33:75:5e:e3:b2:eb:5b:11:2f:70:ac:cd:
db:1d:1d:2c:4f:3b:31:12:69:99:84:c5:97:4c:31:fe:c3:51:
dd:5e:4f:4b:b6:5c:05:52:ee:1b:a3:6e:24:42:6b:0d:56:40:
b0:47:04:2e:d5:50:63:92:cb:30:69:c8:0b:ef:f2:f0:45:8f:
12:a2:56:b1:f2:76:0a:98:58:c6:e0:c1:7d:e4:ca:18:c6:fa:
4a:3a:b6:b6:d2:d3:1e:6a:11:cf:0d:33:b1:f3:78:39:a0:85:
7e:64:9d:dd:85:9d:f8:e0:8b:6a:d0:cb:d3:80:d6:c3:39:86:
c4:27:08:8c:20:41:42:3c:9f:f9:3d:e9:23:73:3f:9c:ca:f3:
d3:8f:c5:50:f6:5f:5f:35:d7:18:c6:22:0a:92:82:1f:58:0c:
fd:71:18:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:43:25 2026 by rpki-client