Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
File: LXR59FZDorguENq_c-_vdwOx4tI.mft (raw, json)
Hash identifier: FnYW7lPQFihlMzxUchYVQxkAptrcUtM3uoCrcB3CN8M=
Subject key identifier: 4F:1D:82:F4:DC:C9:F9:23:45:36:31:CB:C5:BC:93:14:DD:E1:76:A6
Authority key identifier: 2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2
Certificate issuer: /CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2
Certificate serial: 019D98504A5DB705FD613CB37CB02741DA95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 22:01:31 +0000
Manifest this update: Thu 16 Apr 2026 22:01:31 +0000
Manifest next update: Fri 17 Apr 2026 22:01:31 +0000
Files and hashes: 1: 7GKSUsC2-EZN7XkuEfWum4yKSTg.roa (hash: 0/D0ft4/Akr9FC1mkgoFrsHQKcBzONWj8zopSzgBrVU=)
2: LXR59FZDorguENq_c-_vdwOx4tI.crl (hash: DcA84Z97564ajmkAaAsf2gQBVLQij+Sn4yxfWu7btug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:4a:5d:b7:05:fd:61:3c:b3:7c:b0:27:41:da:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2
Validity
Not Before: Apr 16 22:01:31 2026 GMT
Not After : Apr 17 22:01:31 2026 GMT
Subject: CN=4f1d82f4dcc9f923453631cbc5bc9314dde176a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c8:d0:ed:6d:ee:c5:1a:0b:7e:2f:46:4b:d7:
a7:fb:49:66:84:97:4d:d9:2e:6e:b0:f4:03:f4:99:
f7:4e:c5:69:5c:f5:8c:11:01:cd:ef:2e:8c:32:f3:
10:82:2c:5e:6e:ea:bd:9c:e0:9b:ca:7e:3a:6d:29:
68:a3:fb:08:7a:74:aa:38:14:5a:ad:4b:c4:7c:bd:
bc:bc:96:5e:1d:56:e5:50:14:d6:e5:8e:26:24:87:
1e:c2:ac:cb:7b:65:2a:fb:52:69:6e:ff:a0:30:fe:
f0:3b:0b:2d:35:20:09:8a:2a:78:88:35:21:87:c0:
f5:53:7f:e2:4b:c5:a1:bf:67:75:2f:fe:ee:57:26:
9f:e0:a2:6b:30:5b:0d:d0:26:89:d7:db:15:8c:98:
01:c2:07:69:09:cf:1c:33:cb:3f:1f:47:e7:38:df:
2f:2a:56:d7:06:dd:32:54:97:43:46:9b:ae:56:86:
ba:82:4f:e3:06:32:3b:5c:b1:94:c2:22:77:8b:14:
3f:d2:50:4a:29:62:87:8b:cb:5a:9f:73:a6:9a:5f:
fc:3a:32:20:a6:44:50:48:c4:82:4b:65:81:ff:8c:
23:9e:69:21:38:28:05:03:c9:91:d2:58:24:10:e6:
ad:21:d3:67:55:48:87:50:4d:d7:4e:d8:0a:eb:11:
3c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1D:82:F4:DC:C9:F9:23:45:36:31:CB:C5:BC:93:14:DD:E1:76:A6
X509v3 Authority Key Identifier:
keyid:2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:cf:66:21:b7:c0:a1:aa:8b:7c:89:11:d3:05:f8:b8:52:e8:
2b:58:9d:33:f7:de:a6:bd:1d:98:58:d9:14:be:fe:ec:3c:b8:
a6:02:c8:4b:b0:a9:e5:d7:f7:8a:06:84:95:ae:f6:a0:e0:47:
24:78:7a:f2:ef:0a:16:d9:55:18:cc:78:32:9c:ea:2e:59:12:
1d:53:0e:fe:2b:3f:6e:ff:61:ad:a0:b6:84:e5:7d:de:81:1a:
0b:99:16:07:cf:e9:ed:cc:ca:88:5c:94:39:77:7b:a2:c0:79:
23:8f:6e:8d:5d:9d:e3:f9:50:33:ba:ef:42:67:b8:01:35:4d:
5f:87:9b:48:e7:cf:f4:14:f4:de:a7:31:da:d3:a2:a0:f5:a6:
c9:4d:9b:8c:0e:cb:30:83:80:1a:11:4c:ae:bd:03:36:39:0e:
83:6e:50:c0:71:0e:50:71:2e:f8:0b:79:7e:03:c0:a8:b6:af:
ba:d7:e2:83:6d:5e:53:e4:7f:93:12:64:62:ea:60:3b:c0:ef:
f1:e4:cb:6c:43:31:40:9d:99:24:f7:e8:d0:e1:f7:e1:b6:db:
37:f4:3e:27:5d:75:8f:99:e4:61:3a:b8:8d:f8:c3:4c:20:81:
fe:0d:d0:6e:81:3a:a3:a2:7a:bd:cf:df:29:d7:fe:48:2d:6a:
f1:6a:65:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:47:22 2026 by rpki-client