Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
File: lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json)
Hash identifier: UR+czhFy/c4BhDko/mcQdT9606KFLRBxOHht+xdBb1o=
Subject key identifier: 42:3D:5E:96:0D:1A:0E:EE:A5:57:81:6F:1F:B8:B9:12:1E:EC:F9:0D
Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
Certificate issuer: /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Certificate serial: 019CA9EAE3C4CC9B318FB1730F753734B3AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
Manifest number: 168E
Signing time: Sun 01 Mar 2026 15:01:09 +0000
Manifest this update: Sun 01 Mar 2026 15:01:09 +0000
Manifest next update: Mon 02 Mar 2026 15:01:09 +0000
Files and hashes: 1: LRNAbpyVNd4xRcYWOniPaIJsimE.roa (hash: MN58eSDU1GHmgZaBD9VcuURzS5Nsy+/QBrg9oxjCqD0=)
2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: Hz1w93wl1X2js4xIetHgOFtQ3XdaO3xRwivY/thjrAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:e3:c4:cc:9b:31:8f:b1:73:0f:75:37:34:b3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Validity
Not Before: Mar 1 15:01:09 2026 GMT
Not After : Mar 2 15:01:09 2026 GMT
Subject: CN=423d5e960d1a0eeea557816f1fb8b9121eecf90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b0:2b:85:01:a3:a4:22:8f:d0:56:4e:1a:5f:
3a:cf:91:70:02:93:a9:65:2c:b3:ae:48:24:73:67:
e0:4b:5d:3b:bb:75:c5:0b:2e:1b:49:15:bf:9c:0d:
a0:6b:67:8d:ca:dd:d1:b6:aa:9f:02:db:20:38:05:
cc:32:78:3c:7a:58:ae:ca:74:7f:e3:6c:02:15:2a:
32:0f:e3:10:4e:b3:73:1a:5a:76:6c:39:ec:5a:a3:
18:1e:93:89:ec:1a:8e:b1:ee:71:5d:88:47:18:d5:
f0:1e:3d:d6:b7:7a:8c:db:f5:90:53:c1:b6:8f:38:
bd:2d:d0:48:5d:8a:f4:20:02:80:6f:3a:17:2e:6d:
bb:30:84:c5:92:00:9b:fb:58:6b:30:bd:bf:83:f1:
c9:24:c9:1e:69:33:54:98:bb:61:26:a3:37:96:55:
a7:fe:e6:3f:5b:61:ec:cc:e6:dc:4f:18:1e:88:86:
a3:45:a8:68:91:f6:3a:14:c1:1c:87:83:5b:67:99:
0a:65:54:76:6b:62:05:a1:90:7c:f7:6d:cf:4f:70:
73:ac:58:b0:e2:c0:cb:66:12:95:14:c1:26:39:cc:
ed:7b:d2:a5:78:a0:66:35:1d:93:c4:e6:00:92:a2:
7c:ca:ea:40:db:cb:0d:5c:75:f7:68:44:67:d2:93:
6c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3D:5E:96:0D:1A:0E:EE:A5:57:81:6F:1F:B8:B9:12:1E:EC:F9:0D
X509v3 Authority Key Identifier:
keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:5c:fe:e2:c4:fa:2a:1f:1b:02:17:ec:b4:4b:fe:25:69:14:
65:1a:e7:1c:d6:f7:ee:12:13:6b:17:28:d4:98:73:c3:a5:4a:
f3:65:76:8a:24:a1:95:c7:ca:f5:88:77:dd:f6:d3:d4:30:fd:
ac:a8:35:2a:c1:3a:54:8e:be:88:5f:41:be:0a:52:80:7e:94:
11:6e:2a:f6:7a:18:9a:98:e6:2f:6f:67:47:b1:75:5c:61:94:
e0:12:dd:05:4c:f3:15:69:7c:49:29:94:c0:53:b3:6d:07:1f:
2b:9f:6c:87:ab:68:5a:cb:cc:d0:c9:5f:93:0f:86:97:25:14:
dc:d3:bd:49:df:57:58:6e:ee:a7:ed:6a:3b:7d:87:ab:a4:15:
eb:d8:11:1e:23:cc:d1:46:db:6b:5b:5d:10:9f:48:54:80:a3:
81:8c:35:15:96:19:d5:a2:89:f4:bc:c2:bc:75:70:95:e5:43:
a6:98:4f:bd:00:42:6b:45:b8:52:d6:f4:e2:a0:7d:71:c3:62:
7d:52:a2:ad:73:9f:ad:9a:5c:ec:a5:2b:d3:87:f7:38:50:08:
d9:81:89:14:43:56:97:09:f0:a3:c5:3b:69:cf:1d:59:f0:10:
05:73:ee:d0:d8:e9:1c:5a:3b:a0:eb:8e:9b:9b:1c:cc:bb:a4:
39:cb:d2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:44 2026 by rpki-client