Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
File: lxkrZdZTQfNy8GdjTxH_PJbESrM.mft (raw, json)
Hash identifier: DUZzhleOQyGbmCuir91AqkbPt7vi3cDOgk1tYCp9BMc=
Subject key identifier: EF:D4:9D:75:79:39:4D:48:D7:26:A5:C5:88:76:5E:67:8E:5B:A8:48
Authority key identifier: 97:19:2B:65:D6:53:41:F3:72:F0:67:63:4F:11:FF:3C:96:C4:4A:B3
Certificate issuer: /CN=97192b65d65341f372f067634f11ff3c96c44ab3
Certificate serial: 019FAB63308BF48C5FB68BE29999AB3C0499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
Manifest number: 0106
Signing time: Wed 29 Jul 2026 01:00:32 +0000
Manifest this update: Wed 29 Jul 2026 01:00:32 +0000
Manifest next update: Thu 30 Jul 2026 01:00:32 +0000
Files and hashes: 1: lxkrZdZTQfNy8GdjTxH_PJbESrM.crl (hash: BCFVAyA1Ir//Ek1o96Uu7AOMeQZQ3PA4VFNZ0UjIFyQ=)
2: wn0IY0Am8dbWKWFYL-XocK9wI1M.roa (hash: f5YL150E3HRR/Y+EFdyKEJdNywzJxXemEPh++b/gfAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:30:8b:f4:8c:5f:b6:8b:e2:99:99:ab:3c:04:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97192b65d65341f372f067634f11ff3c96c44ab3
Validity
Not Before: Jul 29 01:00:32 2026 GMT
Not After : Jul 30 01:00:32 2026 GMT
Subject: CN=efd49d7579394d48d726a5c588765e678e5ba848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fd:80:0c:fe:5d:46:49:e8:db:6f:76:db:d2:
98:d0:6d:7d:60:28:28:f7:8a:39:d6:bc:5e:fe:24:
03:8f:01:fe:7f:b3:4c:78:38:9b:cd:95:50:8b:79:
f6:f1:75:1a:5e:f8:9c:03:95:f9:8a:e3:66:ae:de:
05:35:f4:93:a9:30:bb:c4:2f:52:91:33:40:a2:ca:
fe:9d:a4:14:7c:fb:23:fe:95:9f:10:4c:57:cc:7b:
5b:fb:80:f8:33:0e:e8:c1:90:0c:6c:69:51:0d:23:
44:ba:c8:49:ee:d5:24:19:86:6c:09:62:2d:89:25:
69:02:67:7d:cf:0f:38:67:cb:aa:1a:7f:9f:67:3f:
d5:fd:39:47:43:05:0e:b1:b5:1d:91:08:af:bd:80:
ca:31:df:9d:29:0c:8e:97:c6:b7:97:80:cc:b7:e3:
d3:18:50:81:27:f8:71:9a:38:9d:a1:84:58:b1:02:
3f:9b:9b:aa:79:7d:9a:27:18:7b:12:25:6a:2d:1c:
ef:53:9a:40:b2:a4:51:ec:8e:94:c9:c5:45:b8:4f:
d4:1d:88:2c:64:e3:fb:5b:3f:22:07:97:37:00:97:
22:7b:9c:52:3f:a7:00:68:df:bf:cc:e1:84:8b:0a:
40:cb:1c:e6:e0:83:89:4b:17:1d:81:e5:81:a8:c8:
b9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D4:9D:75:79:39:4D:48:D7:26:A5:C5:88:76:5E:67:8E:5B:A8:48
X509v3 Authority Key Identifier:
keyid:97:19:2B:65:D6:53:41:F3:72:F0:67:63:4F:11:FF:3C:96:C4:4A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:83:c5:03:5a:d7:fd:35:94:c8:8d:9d:9e:37:ca:5e:33:cc:
85:ec:8a:0f:0d:1a:5c:e5:3f:2f:99:de:b1:46:a4:aa:01:25:
12:5e:09:b1:3a:5c:e9:43:c5:03:d4:cb:81:28:2e:27:8e:14:
79:5f:c2:1a:3a:6d:93:a9:4f:7f:ee:23:57:6e:d3:52:82:37:
f3:a1:10:6f:bc:fc:be:46:3a:4f:c6:60:c3:d4:77:21:d9:54:
1d:49:6a:81:03:d9:77:93:e2:17:88:2f:8c:5e:11:91:b4:4a:
1c:7d:49:25:3c:e4:a8:74:71:9f:3d:aa:bf:ef:c8:22:28:38:
d6:28:c2:ab:df:90:50:9c:e5:c5:ca:32:35:75:d6:da:7c:af:
1e:46:41:10:08:79:a4:17:a2:19:b8:8c:08:cf:7c:7f:03:02:
59:10:79:f0:f4:73:d0:e8:de:de:3e:2d:4d:30:d9:53:e0:b2:
1f:64:9e:a3:99:bb:84:b4:16:cc:7a:14:c0:e8:99:61:c8:24:
22:58:c8:9a:17:e4:d6:c6:f6:dc:86:cf:b5:1c:fa:1f:6a:4d:
21:91:b5:da:f7:27:88:01:4b:a0:4e:52:f6:89:12:91:98:1a:
ee:7a:9d:c7:24:5d:cf:0e:e3:6c:b4:1b:bc:c5:4f:0c:45:c7:
b7:df:cd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:01:22 2026 by rpki-client