Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
File: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft (raw, json)
Hash identifier: YI+Mh96tVlR5YeV+em5pnS8XloS4DcsLiGOflRtSPhE=
Subject key identifier: E3:A0:17:5F:D0:2D:FA:6A:E4:42:D4:25:61:8C:EF:B8:88:5E:E1:DF
Authority key identifier: 97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12
Certificate issuer: /CN=97102c693af3a090f8f94ba1fd082db0924eaf12
Certificate serial: 019DA3AEC6825C954AC3D65821B287B7FD0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
Manifest number: 18C6
Signing time: Sun 19 Apr 2026 03:00:33 +0000
Manifest this update: Sun 19 Apr 2026 03:00:33 +0000
Manifest next update: Mon 20 Apr 2026 03:00:33 +0000
Files and hashes: 1: Gv_wNpXfpWq-q_UPRh3AwBy396o.roa (hash: mb+6Z361/RYrR2bM4P/XCXIcCPG1uTGsxi5EGv9l1NI=)
2: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl (hash: yfcCXkh2AOfEALMMA8tcCZ8L3vbteWALjZJmy959f5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:c6:82:5c:95:4a:c3:d6:58:21:b2:87:b7:fd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97102c693af3a090f8f94ba1fd082db0924eaf12
Validity
Not Before: Apr 19 03:00:33 2026 GMT
Not After : Apr 20 03:00:33 2026 GMT
Subject: CN=e3a0175fd02dfa6ae442d425618cefb8885ee1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3a:99:5e:69:34:d0:83:8c:d5:fd:88:6e:b1:
fc:44:83:12:65:29:f0:1e:b6:b1:52:3e:c5:a6:7f:
d5:b7:73:51:1f:0b:38:01:d7:c2:90:ad:ab:bd:cb:
36:1b:28:05:ba:3e:d2:93:f4:98:4a:ed:71:20:23:
ed:f9:4e:93:aa:be:ef:1e:b6:66:ee:b2:e8:24:38:
f4:7c:b1:37:e5:cc:92:83:f8:5f:a8:80:04:b4:6c:
27:9a:7d:9d:df:cc:c6:6a:2e:0f:a5:f4:d3:55:a1:
f9:f7:bf:77:2d:87:14:f0:8e:ea:34:fe:21:7b:ef:
a6:09:2a:05:02:0a:fc:74:44:18:21:2a:50:d7:80:
a9:45:1b:ca:65:b0:b8:39:07:f3:42:4d:37:1e:1f:
41:01:5c:40:77:b3:cb:62:22:dc:c9:79:06:3b:f5:
d2:e9:4c:a4:63:f7:9a:bf:0a:4d:65:2c:9f:ea:47:
7f:74:d1:5c:c4:5f:64:fd:10:66:e9:4e:6a:7a:7c:
c1:7c:4d:77:b2:70:b6:58:61:d1:20:73:ca:3b:be:
2a:57:7d:dd:92:73:34:6c:a7:0b:62:f5:04:b5:a7:
89:53:b9:a6:9a:0a:a0:71:5d:71:95:06:0d:46:86:
ba:31:64:87:f0:31:0c:d1:f7:38:6f:85:32:2d:c0:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A0:17:5F:D0:2D:FA:6A:E4:42:D4:25:61:8C:EF:B8:88:5E:E1:DF
X509v3 Authority Key Identifier:
keyid:97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:2e:2e:e6:9e:bb:75:c2:d6:a9:3d:e3:b0:fc:96:6b:2f:b2:
fa:e3:cf:69:7c:be:76:2c:d1:1b:37:07:31:0c:55:97:14:8e:
27:6a:8e:52:77:f3:d7:02:1d:8f:0f:c7:65:7a:9b:db:de:f5:
ba:9b:90:e4:7b:96:90:16:04:31:61:f3:a0:6b:a0:96:9e:d2:
2e:21:bd:5a:0c:8c:3a:21:a2:75:7a:1b:20:9b:6a:ec:2e:49:
29:65:27:6f:3f:3d:95:58:fb:9d:07:cb:5a:1e:6f:17:e0:ad:
0e:53:18:95:b6:c9:5d:96:1e:36:d8:e3:15:7e:3f:6a:94:9a:
70:95:15:6d:ea:77:e3:1d:ca:3c:7f:a6:e8:64:e8:15:79:87:
b7:ad:fd:a2:50:30:b8:a2:43:09:8a:37:66:57:df:07:b8:5f:
98:44:5c:57:fb:ae:b3:db:8c:b5:23:04:fc:57:ec:b7:04:b8:
6b:92:9a:3b:d0:cf:a9:3f:6e:06:83:12:2a:6b:54:c4:21:f9:
cd:08:f9:d1:6c:21:d8:f2:f2:d9:e9:81:51:51:03:d6:bc:63:
38:38:ae:7a:2b:3f:03:f5:68:f8:0f:fb:5e:89:90:cc:f8:f3:
17:a0:9f:04:eb:b8:d0:82:0a:11:d8:43:fe:d6:6d:25:15:5a:
ca:53:41:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:25 2026 by rpki-client