Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
File: LXR59FZDorguENq_c-_vdwOx4tI.mft (raw, json)
Hash identifier: NGSyS9FdHbhjMEceb1spghnVPpPMouzE6Z23TeROCxo=
Subject key identifier: 9A:AC:AF:E1:88:AC:1E:3C:30:63:D1:9B:02:CA:C1:3A:6A:73:75:43
Authority key identifier: 2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2
Certificate issuer: /CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2
Certificate serial: 019CAAC626FE612592CB982070464E7DCB45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 19:00:38 +0000
Manifest this update: Sun 01 Mar 2026 19:00:38 +0000
Manifest next update: Mon 02 Mar 2026 19:00:38 +0000
Files and hashes: 1: 7GKSUsC2-EZN7XkuEfWum4yKSTg.roa (hash: 0/D0ft4/Akr9FC1mkgoFrsHQKcBzONWj8zopSzgBrVU=)
2: LXR59FZDorguENq_c-_vdwOx4tI.crl (hash: 1+aBIIbOIq9JG88pdcr/pU2W2znZ5kIWXAwfwXBgL9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:26:fe:61:25:92:cb:98:20:70:46:4e:7d:cb:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2
Validity
Not Before: Mar 1 19:00:38 2026 GMT
Not After : Mar 2 19:00:38 2026 GMT
Subject: CN=9aacafe188ac1e3c3063d19b02cac13a6a737543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:d7:f7:ca:88:42:2e:ae:e4:8f:cd:31:15:
30:6b:06:34:81:f6:d6:70:c9:bf:61:5f:94:43:56:
c6:e7:ed:af:5b:45:65:fb:7b:c5:d4:4d:b5:df:0e:
68:c4:85:63:c1:91:3e:e4:63:98:14:e3:10:fd:db:
3e:1a:91:ab:36:d0:01:de:6d:23:fe:69:91:38:a3:
5a:b3:2a:67:b5:49:31:12:76:14:4e:a0:28:58:b9:
76:c2:2a:02:9f:8d:16:47:33:7c:9b:f8:b2:90:8a:
5b:12:e3:fd:28:32:f8:76:f9:f1:e3:15:b6:d8:73:
f0:76:c6:29:8d:92:df:3d:f0:ed:95:af:1a:cb:73:
ac:0b:17:f6:aa:e1:b3:73:ad:a7:3f:ba:a8:2b:68:
0f:1e:32:cf:84:0d:0d:79:36:43:86:97:2e:58:94:
01:3e:9e:fe:ff:f1:4f:50:03:d0:6e:af:48:64:c8:
a9:40:6c:76:91:da:45:2b:38:d4:37:16:48:82:ab:
c9:2d:59:93:48:62:de:8d:11:bb:0e:c5:bd:0d:6a:
dd:07:9a:c5:46:e7:dd:32:b1:ba:ce:d4:72:a9:ad:
55:99:be:da:78:2a:a4:7d:dc:94:99:a6:54:e6:8b:
9c:14:b2:16:6b:2e:a3:1d:c4:d3:c2:94:f9:39:36:
c0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AC:AF:E1:88:AC:1E:3C:30:63:D1:9B:02:CA:C1:3A:6A:73:75:43
X509v3 Authority Key Identifier:
keyid:2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:31:7d:0c:e2:16:c4:c1:cf:08:57:cd:c7:fb:44:a4:9d:00:
af:7e:c5:42:fc:28:6a:80:bf:ae:d2:90:c5:4c:e9:a4:66:5a:
aa:bf:cc:df:91:21:b0:36:bc:5a:08:64:6f:41:bd:1e:51:5c:
da:fb:96:df:0a:ef:14:d8:7b:a3:b1:eb:ea:c7:de:3a:c5:cc:
e8:fb:af:e3:48:c1:5d:7f:00:14:22:d2:8f:36:c1:47:65:38:
40:a0:5d:11:a6:45:2e:7f:0a:b4:6e:3b:d8:93:22:3a:19:d8:
04:e1:a8:ca:22:2b:4e:f7:1c:b8:55:f0:bf:7c:f0:52:be:3e:
1d:fb:da:fe:a5:75:70:e2:75:5d:88:9d:c3:f3:12:37:d6:8c:
56:82:56:10:a8:25:aa:ee:36:87:66:9e:98:a7:9a:7c:eb:1e:
2f:21:5a:cb:48:6d:97:45:a9:ba:17:1e:71:2e:67:0a:20:15:
59:38:2e:26:fc:f4:9b:d8:7b:67:de:a4:86:45:17:6e:1b:d9:
23:a0:2b:98:15:47:e8:43:94:7e:3e:e8:34:20:0e:b5:54:d4:
06:df:d0:7f:60:e2:e4:52:d4:27:c7:3e:aa:5d:5e:22:36:f0:
02:71:52:37:20:fa:b7:9d:57:c3:72:7f:51:8d:ed:4b:3c:d0:
a6:ed:61:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:56 2026 by rpki-client