Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
File: LxrJ8JTYMY8wiNymgwGGX0YF6do.mft (raw, json)
Hash identifier: aWvuwHzlvfJvidMnAgirtDQOnb1Mw+FL2RJRiBNfa2Y=
Subject key identifier: 9F:C9:3D:88:E1:3F:90:11:EE:F2:36:94:2A:D7:27:4F:E6:BD:D2:FE
Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
Certificate issuer: /CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Certificate serial: 019EC0DACABAF301BE483B26055CA4436DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
Manifest number: 1322
Signing time: Sat 13 Jun 2026 12:00:24 +0000
Manifest this update: Sat 13 Jun 2026 12:00:24 +0000
Manifest next update: Sun 14 Jun 2026 12:00:24 +0000
Files and hashes: 1: LxrJ8JTYMY8wiNymgwGGX0YF6do.crl (hash: CsV2/N3vlouy+ggKlqdb7kIfbrCzA5VoMSjHDCPDp88=)
2: R4EyQfq47lKcSi7lGsbXI4F8tPI.roa (hash: tdmT4SygVfTwG2tATcY87tl2PKsMrLDS/k3VojLg3Q0=)
3: U2Z1XV8o3uSKFqctNf3JUk-H5Ts.roa (hash: FRVvHMEadriOkR83sQ2tDLvX3mVKMsDHHQh/IgHBVFQ=)
4: UYxFngClnykqTHTfuXuiS4afmY0.roa (hash: qhH8eU5uzACUHVTAmy6bDaqx30+kPSiCPRvL6eNWthc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:ca:ba:f3:01:be:48:3b:26:05:5c:a4:43:6d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Validity
Not Before: Jun 13 12:00:24 2026 GMT
Not After : Jun 14 12:00:24 2026 GMT
Subject: CN=9fc93d88e13f9011eef236942ad7274fe6bdd2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:6e:49:83:b2:30:c3:db:9f:69:24:56:0b:
60:e4:c4:68:39:15:34:5c:3f:ae:04:5c:0f:95:d9:
a8:78:9f:18:85:7f:4e:a2:35:02:17:ea:82:97:bb:
dc:92:34:5f:c9:35:c7:2d:9d:c8:34:bd:80:4c:6f:
cb:46:23:a0:d4:04:4d:ea:f1:da:30:cb:ff:ee:f9:
30:68:91:68:70:67:ac:6b:e0:e9:aa:1e:e7:f9:b9:
9f:e6:b0:d1:2a:a4:cd:30:1d:24:8f:39:39:c0:01:
b0:af:d7:ac:88:6e:f3:25:4a:76:98:98:58:3e:8e:
55:c9:3c:6c:cd:c5:a5:f3:18:fb:1c:34:32:66:39:
20:f9:0a:f5:ab:87:e7:a3:8b:4b:11:dc:63:e9:eb:
9f:1d:24:ae:36:8c:aa:59:a8:b1:21:3e:41:fb:25:
f8:99:22:ca:e8:12:c9:f1:27:5f:e3:bb:d0:1d:02:
fa:fa:03:13:ad:7b:f2:fc:b4:7d:47:8a:6b:1b:7a:
29:14:c1:46:38:d0:3d:c1:07:f6:2b:85:19:e3:8a:
58:8a:fc:e7:03:36:2c:fb:49:da:23:2e:93:64:4c:
51:87:5e:01:a7:ff:a0:1d:55:b1:63:6e:3f:70:50:
90:c0:9b:62:6c:c5:78:81:e9:00:de:71:6d:9b:f2:
45:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C9:3D:88:E1:3F:90:11:EE:F2:36:94:2A:D7:27:4F:E6:BD:D2:FE
X509v3 Authority Key Identifier:
keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:65:81:d0:ce:b3:d8:8d:05:74:21:39:64:2a:d3:a9:de:8b:
04:bc:b0:53:a9:06:ab:95:9f:1d:9b:8f:df:8c:17:43:a7:9e:
06:06:8e:ca:68:fa:1c:60:0d:a1:fd:e8:36:8b:f6:92:83:59:
34:c0:62:d0:9c:c8:41:6d:d6:56:82:9e:8d:64:d2:45:e0:cc:
34:c6:b1:58:ca:05:c1:5a:3b:94:26:69:95:0f:ed:f9:66:20:
b7:14:57:02:3f:c2:15:0b:6e:56:39:3f:40:97:9b:43:89:20:
fe:ef:71:bb:ad:5d:fb:ed:de:65:f8:b6:b5:5a:1e:a7:cc:28:
57:93:3f:50:e9:da:42:8a:f9:2e:fa:71:50:3a:dd:4d:d2:fa:
b8:f2:db:76:4e:97:c4:b9:73:5e:3e:2a:c9:40:50:22:4c:86:
88:7e:fb:e5:fd:cc:ce:70:53:3e:11:45:be:f9:63:c4:46:23:
f4:17:ba:3b:63:2b:76:4e:cd:2c:e2:6d:9c:e8:15:b1:df:40:
55:20:20:9d:f8:af:89:f0:b0:4c:f9:88:1d:94:1e:ca:ba:b7:
dd:2d:e9:cb:6f:81:d8:d7:b7:7a:57:9a:e5:8e:c2:66:a1:42:
4d:49:d9:24:f3:77:7a:3f:53:63:e7:19:c1:1f:fb:58:70:46:
ba:df:f9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:40:04 2026 by rpki-client