Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
File: lxkrZdZTQfNy8GdjTxH_PJbESrM.mft (raw, json)
Hash identifier: fURQI+DUicru7zDTCNgnLJM0c+GZLqYoCXHYTB9VP+g=
Subject key identifier: 73:8D:A7:D5:AA:54:E7:39:44:18:AC:EE:59:FA:F2:FF:ED:48:AC:9F
Authority key identifier: 97:19:2B:65:D6:53:41:F3:72:F0:67:63:4F:11:FF:3C:96:C4:4A:B3
Certificate issuer: /CN=97192b65d65341f372f067634f11ff3c96c44ab3
Certificate serial: 019EC1B6D6F6AF486B91EA6C6229E3B46DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
Manifest number: 8D
Signing time: Sat 13 Jun 2026 16:00:45 +0000
Manifest this update: Sat 13 Jun 2026 16:00:45 +0000
Manifest next update: Sun 14 Jun 2026 16:00:45 +0000
Files and hashes: 1: lxkrZdZTQfNy8GdjTxH_PJbESrM.crl (hash: vn1sGRMKfiAKr1b11lsELWoiyt50Xc4ltY4QHvKLAcM=)
2: wn0IY0Am8dbWKWFYL-XocK9wI1M.roa (hash: f5YL150E3HRR/Y+EFdyKEJdNywzJxXemEPh++b/gfAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:d6:f6:af:48:6b:91:ea:6c:62:29:e3:b4:6d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97192b65d65341f372f067634f11ff3c96c44ab3
Validity
Not Before: Jun 13 16:00:45 2026 GMT
Not After : Jun 14 16:00:45 2026 GMT
Subject: CN=738da7d5aa54e7394418acee59faf2ffed48ac9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:f2:ab:65:52:ab:92:80:59:e3:ea:25:06:
0e:fc:5c:9b:d7:33:6a:5f:63:0c:02:85:0d:cf:49:
6b:dc:65:19:13:ba:7b:5a:59:bd:74:c8:f2:98:8d:
ca:87:48:dc:a9:90:5b:c8:0f:db:3e:0e:54:4b:bb:
5a:6e:9b:0d:7e:7c:f5:ad:7c:c9:fb:05:18:15:5c:
c6:d6:fa:ee:68:08:1b:c1:9c:2c:b7:47:fa:bb:56:
7a:2e:58:04:8a:62:98:8e:d7:f5:58:32:51:04:7f:
99:29:a6:c6:d2:77:37:a8:a0:f6:cf:d4:29:06:60:
61:c6:d9:72:e7:ea:c4:35:01:b0:9b:42:f2:ce:18:
a1:83:77:bd:f7:33:c2:ca:df:1f:b8:25:a4:b3:1e:
33:84:88:e4:98:42:62:52:e1:b8:5a:53:d3:c8:52:
62:99:f0:fd:4e:3b:90:eb:62:d3:9c:92:72:59:99:
4a:67:4c:70:5e:d2:5e:d7:e2:24:0e:92:74:41:c0:
9a:81:ff:d5:e4:79:d0:d4:a2:b5:49:ac:97:97:f1:
75:41:bc:00:23:c6:d3:53:11:40:9a:d3:85:d6:68:
da:b5:72:e6:46:7c:56:6a:6c:08:0a:83:f2:27:18:
b7:a7:19:f9:1c:3f:0a:7e:2b:94:aa:5a:35:41:eb:
52:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8D:A7:D5:AA:54:E7:39:44:18:AC:EE:59:FA:F2:FF:ED:48:AC:9F
X509v3 Authority Key Identifier:
keyid:97:19:2B:65:D6:53:41:F3:72:F0:67:63:4F:11:FF:3C:96:C4:4A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:3f:4f:2d:e3:dd:b3:ec:1b:e3:fb:50:f8:0c:46:94:96:17:
d7:b7:9d:28:45:d5:0b:7f:44:64:b8:4a:5e:b8:b1:89:93:bb:
3e:b1:10:48:6f:e3:b7:b7:65:a0:60:a0:b4:b7:0c:80:22:0e:
4a:cd:21:88:f3:22:7c:b2:bd:84:75:78:8f:d1:00:c9:d5:66:
84:15:97:e2:f9:c7:7a:53:e8:75:48:1f:db:b5:54:b6:9c:66:
38:1e:e8:8e:d2:a2:d5:ec:cf:bd:60:ce:db:cc:93:67:8b:43:
32:a2:f3:61:6f:8c:78:b7:19:73:3c:9c:22:02:d9:d1:1f:84:
44:26:9f:17:fb:95:8a:eb:e6:6c:07:04:a1:3a:5d:4b:d8:1a:
5f:87:8b:78:88:b1:f3:d0:b1:d6:6a:ff:9c:0e:ed:ca:4f:56:
20:20:48:a0:06:88:8a:c1:f0:2d:6f:73:c4:32:56:bb:42:e6:
f8:60:32:73:fd:7d:37:fe:82:b8:52:ab:0f:41:56:df:ed:7c:
21:d8:ec:1e:06:3a:d3:48:38:05:66:6f:00:52:f4:8e:af:0a:
7e:97:9d:38:cc:5a:ee:a7:e3:85:9b:32:9d:68:43:0b:26:c5:
2b:07:71:d4:ba:02:c1:a6:af:54:ca:b8:cb:42:91:1e:c5:3f:
76:0a:19:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:50:41 2026 by rpki-client