Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
File: lxkrZdZTQfNy8GdjTxH_PJbESrM.mft (raw, json)
Hash identifier: XVhOxiExhlBOrGpQqnJV0qR7nppUjDxu/Bgu3gb+ngg=
Subject key identifier: 8B:36:4C:F5:8F:36:74:26:68:79:46:52:A3:33:BD:89:42:B5:CE:B3
Authority key identifier: 97:19:2B:65:D6:53:41:F3:72:F0:67:63:4F:11:FF:3C:96:C4:4A:B3
Certificate issuer: /CN=97192b65d65341f372f067634f11ff3c96c44ab3
Certificate serial: 01A1201CA2714CE89A6DEFFFD958A50919CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
Manifest number: 01C7
Signing time: Fri 09 Oct 2026 10:01:49 +0000
Manifest this update: Fri 09 Oct 2026 10:01:49 +0000
Manifest next update: Sat 10 Oct 2026 10:01:49 +0000
Files and hashes: 1: lxkrZdZTQfNy8GdjTxH_PJbESrM.crl (hash: WI2FktG5i+yhDCrdKcqY/u8cIqo88qZzS012qn5hgZQ=)
2: wn0IY0Am8dbWKWFYL-XocK9wI1M.roa (hash: f5YL150E3HRR/Y+EFdyKEJdNywzJxXemEPh++b/gfAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 10:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:1c:a2:71:4c:e8:9a:6d:ef:ff:d9:58:a5:09:19:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97192b65d65341f372f067634f11ff3c96c44ab3
Validity
Not Before: Oct 9 10:01:49 2026 GMT
Not After : Oct 10 10:01:49 2026 GMT
Subject: CN=8b364cf58f36742668794652a333bd8942b5ceb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:72:4e:09:99:64:08:d5:b4:04:2e:3b:81:
b6:a8:9f:4a:e2:6e:b6:b2:ae:ff:e0:fd:67:3d:be:
b3:47:a7:2d:06:16:af:32:fa:d1:38:46:78:33:cd:
57:ba:fb:b9:74:cb:fd:87:9a:cc:0b:09:cc:b1:b7:
3d:96:e6:91:dc:fd:77:11:1b:ff:28:38:aa:58:7a:
1b:fa:58:c1:b9:8a:28:ab:17:68:61:70:e6:83:86:
3f:b5:e4:ce:f9:14:47:3f:81:d9:ff:3d:58:5d:e3:
fe:77:96:90:40:ce:2b:ec:b3:8a:41:d5:6e:eb:46:
9b:1b:64:bc:15:86:6d:f0:c4:93:4d:f8:c8:9d:24:
44:06:ea:f4:48:3f:00:98:7e:7c:8e:d8:fe:31:e1:
fc:eb:8e:06:a2:56:db:a8:d9:e8:62:28:39:a4:75:
a4:a6:d9:4f:9a:31:8d:d2:78:54:d5:4b:60:0b:3e:
69:2f:a3:91:27:74:94:77:7e:3e:bd:d0:f8:cd:60:
e8:7a:84:94:c5:3b:f1:76:fd:97:40:f5:92:32:36:
2b:04:a0:50:4f:58:71:b6:bb:81:72:2a:76:5e:39:
2a:81:76:57:55:7a:c0:23:ec:cb:8c:cf:1d:b1:de:
00:71:28:56:dd:09:0c:88:f9:d3:4c:77:47:13:52:
97:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:36:4C:F5:8F:36:74:26:68:79:46:52:A3:33:BD:89:42:B5:CE:B3
X509v3 Authority Key Identifier:
keyid:97:19:2B:65:D6:53:41:F3:72:F0:67:63:4F:11:FF:3C:96:C4:4A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:91:b9:f5:51:8f:fb:a3:93:1b:6a:0f:51:4e:06:c0:5e:d4:
d0:4c:59:6b:17:ad:af:8d:12:d5:7c:40:89:de:68:30:3f:82:
19:88:e0:02:f9:a3:25:e4:93:46:14:19:e0:70:57:a4:b2:30:
ac:93:11:5f:bf:3b:54:d7:f4:98:0d:1e:d7:6c:05:90:6e:43:
25:35:f1:07:db:e5:32:47:19:3b:66:92:a8:a5:53:fb:12:7e:
4c:cb:01:4c:91:bb:b1:5a:a5:d3:b1:1f:e9:8c:f8:35:dc:9b:
c1:d5:9e:3e:0a:9e:22:c1:e9:ce:26:3b:98:e6:cd:86:8d:88:
39:f5:97:4d:d6:6d:b6:5e:d7:08:2e:a9:ef:c0:fe:7c:a5:48:
fd:aa:c6:88:03:12:a8:a2:1b:b1:07:5f:71:cf:67:1f:98:43:
87:bd:95:b6:0e:cb:38:17:d8:92:d1:3d:c9:9a:37:6e:fb:72:
44:6d:ad:9d:81:17:08:0e:d2:f3:a3:6c:a8:0d:18:a1:2b:b2:
ab:1a:f0:e8:d7:9d:95:48:a7:4b:00:66:fa:f1:01:30:f1:14:
b4:99:a1:03:68:8c:98:33:6f:e5:7f:d3:25:42:45:90:0a:c8:
c3:56:4f:2d:68:60:e8:dc:ac:9f:0a:73:1e:aa:de:43:f3:23:
b2:64:ec:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:46:20 2026 by rpki-client