Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
File: lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json)
Hash identifier: DjAtTrWbFjeM1UkH02Car6kD4PosIFh5Niygkq4Npps=
Subject key identifier: 55:4E:B0:CB:D4:A2:DD:68:E7:13:54:D1:0A:CD:75:5D:F9:96:2A:17
Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
Certificate issuer: /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Certificate serial: 019D99622F9780C32DB7293ADB56914ABEFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
Manifest number: 170A
Signing time: Fri 17 Apr 2026 03:00:41 +0000
Manifest this update: Fri 17 Apr 2026 03:00:41 +0000
Manifest next update: Sat 18 Apr 2026 03:00:41 +0000
Files and hashes: 1: LRNAbpyVNd4xRcYWOniPaIJsimE.roa (hash: MN58eSDU1GHmgZaBD9VcuURzS5Nsy+/QBrg9oxjCqD0=)
2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: m4oQisMgP76X10gHAvgUfsa0xenUAjJJU5RDH9r1e8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:2f:97:80:c3:2d:b7:29:3a:db:56:91:4a:be:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Validity
Not Before: Apr 17 03:00:41 2026 GMT
Not After : Apr 18 03:00:41 2026 GMT
Subject: CN=554eb0cbd4a2dd68e71354d10acd755df9962a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:42:fa:55:b7:b0:73:45:f5:04:04:77:11:19:
f1:a2:67:02:9d:a0:44:2a:4a:84:13:1c:26:89:08:
24:a6:04:69:06:73:e0:53:40:8e:d9:08:a2:c0:85:
40:db:01:ce:e9:17:f4:fe:1a:f8:7f:55:72:c0:59:
a0:5a:5e:4d:e7:1e:cb:65:f9:c5:65:d1:f2:12:73:
44:5d:25:82:d8:d5:b5:9c:8e:86:1a:10:33:de:8e:
6d:8e:88:8a:81:03:d8:2a:8d:5a:cf:27:28:a2:47:
0d:3e:50:9f:bf:f0:8e:62:ef:44:31:2e:96:c9:7c:
46:6c:fd:47:8e:75:1c:77:ed:84:7b:e6:f9:27:d9:
92:6d:da:f6:2e:46:fe:a0:6d:bd:59:be:b2:28:b2:
82:c5:67:1e:2b:f2:c2:72:1a:02:79:27:a7:40:7a:
cb:2e:1c:c5:e1:49:c8:8f:99:58:a0:ee:d6:51:3a:
55:6e:df:29:51:4c:ab:d0:d3:df:e8:f0:8e:a7:f4:
d5:6f:66:43:58:74:ae:d2:84:01:d3:f4:33:2e:2a:
d3:a9:ba:fa:3a:ec:74:67:22:b3:5b:19:2d:ba:ec:
25:0b:1a:5c:16:08:15:c9:7f:41:cd:5d:01:77:84:
34:4b:2b:30:75:39:36:00:fc:f3:4c:35:4f:0c:1b:
6d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4E:B0:CB:D4:A2:DD:68:E7:13:54:D1:0A:CD:75:5D:F9:96:2A:17
X509v3 Authority Key Identifier:
keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:24:cf:22:76:71:9b:0f:df:8b:cb:f2:66:03:74:23:35:85:
45:b8:35:71:c1:c9:b4:bf:4c:f8:cc:00:91:fc:61:32:ca:1d:
12:45:f4:ef:20:94:42:f9:7c:be:c4:9f:21:16:38:48:8f:f6:
55:1b:25:bf:ba:ac:00:99:80:2b:17:fc:35:9e:0f:b0:ec:ff:
b7:8d:3f:20:ac:61:fe:c4:7d:9f:06:52:ad:69:50:86:fa:d2:
11:12:85:e3:66:d9:f1:18:ab:86:f7:29:ea:9e:a7:28:4c:c4:
d5:d4:50:6a:60:b2:dd:8f:2c:de:64:c3:82:9e:a1:0c:32:9b:
d8:c6:63:f2:c8:f8:aa:12:ca:e9:7f:24:48:f8:49:b7:c9:a0:
85:03:62:d0:43:9e:af:84:46:e5:2c:80:0c:11:b0:fe:24:11:
4a:38:fe:15:e3:95:69:b7:36:62:4c:43:7f:ec:87:71:6f:d1:
2e:55:1e:ea:48:1d:aa:0e:a2:3a:cd:df:30:60:06:fe:fd:36:
71:96:e7:8d:8d:aa:59:a8:8f:18:6d:b3:7d:23:55:f5:92:8c:
94:8e:7c:bb:94:1c:02:ba:87:b7:ea:f7:09:92:55:8c:f2:d4:
e0:af:17:90:47:40:a7:57:82:bd:b6:d0:6f:11:0f:47:e0:79:
8c:4b:13:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:11:21 2026 by rpki-client