Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
File: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft (raw, json)
Hash identifier: sZl1tN8tJXyMmxf343gY11fPps4AcLFHUevFEJNlOgM=
Subject key identifier: FE:B3:79:F5:16:A4:1C:28:17:54:3E:7F:4F:05:D2:EA:7F:91:42:FC
Authority key identifier: 2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
Certificate issuer: /CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Certificate serial: 019D9998FC78C6C7777528C8E839FBEA04F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
Manifest number: 0D3F
Signing time: Fri 17 Apr 2026 04:00:33 +0000
Manifest this update: Fri 17 Apr 2026 04:00:33 +0000
Manifest next update: Sat 18 Apr 2026 04:00:33 +0000
Files and hashes: 1: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl (hash: jjTFOjk8RJheWwSIGIiJVc9+vOVxWo+V3RnYQMSFhuc=)
2: kV7AwnkXYKEJUo_QQveMLFjR1Q0.roa (hash: SX4oJ6iuf50pvLJFbaFInsRNowHDyi5Eu+2bcodIAMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:fc:78:c6:c7:77:75:28:c8:e8:39:fb:ea:04:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Validity
Not Before: Apr 17 04:00:33 2026 GMT
Not After : Apr 18 04:00:33 2026 GMT
Subject: CN=feb379f516a41c2817543e7f4f05d2ea7f9142fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d4:6a:cd:79:0e:d0:83:4d:dd:6a:b6:b9:64:
cb:fd:79:c1:03:c7:4b:79:3d:0d:7e:31:5f:bc:e1:
c5:4a:aa:c7:1f:4c:04:3b:f6:08:3a:ac:5a:89:bc:
9e:cf:a2:0c:ec:88:72:fc:a0:10:1e:18:eb:49:ee:
69:eb:e7:0e:6a:5f:11:24:e3:c6:30:83:11:26:71:
9b:07:94:fc:24:dd:9c:6e:5a:e5:12:bc:b6:b6:ab:
aa:df:df:66:ba:a8:fe:0f:48:40:48:1f:54:97:fc:
19:a4:99:75:27:6e:3b:c0:9a:52:d0:44:ae:22:19:
35:b2:01:c7:eb:31:e1:31:70:2f:c3:29:5f:6e:64:
7e:1e:8b:7d:cb:49:c6:6a:19:10:41:36:cd:54:76:
dc:b7:73:35:21:f3:01:7f:ac:ce:60:07:e8:a7:88:
46:cb:c2:b2:24:6f:5d:3e:a2:74:1f:f5:86:82:98:
ed:4c:a5:f8:85:38:13:43:df:ec:ab:52:32:9c:87:
2a:72:1e:f9:4a:02:46:89:eb:ad:2f:d9:4b:2e:1b:
f9:2e:c5:df:5a:0a:89:69:8b:87:91:fe:a8:10:d8:
9e:d9:f1:47:78:74:89:c6:9e:ed:84:59:55:bf:df:
73:ff:55:91:91:ad:2c:b5:50:09:1e:04:4e:4d:c2:
f5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B3:79:F5:16:A4:1C:28:17:54:3E:7F:4F:05:D2:EA:7F:91:42:FC
X509v3 Authority Key Identifier:
keyid:2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f8:f3:d5:5d:e5:c0:04:ed:07:e8:76:ca:00:48:cd:1c:b6:
5a:5e:13:b2:de:4b:26:39:85:31:99:11:75:cf:a6:c2:c3:e6:
ff:69:16:42:0b:8e:6f:a5:3d:2f:02:2d:6a:03:6f:54:1a:67:
4a:9c:bb:9c:36:35:f0:ae:b7:60:dd:5c:62:e2:70:9f:11:4c:
e3:3e:18:e8:6c:25:86:f5:a3:6b:25:03:2d:6c:86:50:8e:fa:
e0:a3:68:6a:2c:b0:cf:c1:2f:bf:42:67:20:79:0a:33:f0:41:
84:f0:1b:b8:4f:ee:33:b4:a6:da:6e:e4:fc:a0:51:bc:38:1b:
20:96:81:21:0e:f7:43:91:72:3d:4f:d2:51:5a:22:9f:54:ad:
c3:47:ad:2f:66:52:39:4c:0a:65:01:dc:5f:b4:7a:d2:4a:d1:
b5:ec:84:84:af:96:7b:06:19:a9:ad:e8:95:d2:e7:bd:23:53:
1c:4f:cf:21:b3:e7:b3:6d:d2:17:e5:89:13:e8:05:92:cd:1c:
24:69:6a:6b:46:cf:dd:c1:65:e8:fe:a7:61:81:58:22:78:0d:
b3:e8:49:fe:52:2f:2e:bc:5e:21:9a:14:fe:69:6e:e5:a7:b0:
43:f3:ae:70:9f:d8:9a:66:b8:08:47:39:03:c3:6e:9b:d7:df:
da:76:7e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:48:52 2026 by rpki-client