Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
File: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft (raw, json)
Hash identifier: R+vAkrdom8VFFPlidrQwjVcu0fxUBaWrs2r53Q9PSCw=
Subject key identifier: A6:1F:5F:42:A2:C9:A9:6F:4D:E1:FD:F5:50:A8:6A:C5:C0:49:2F:92
Authority key identifier: 97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12
Certificate issuer: /CN=97102c693af3a090f8f94ba1fd082db0924eaf12
Certificate serial: 019CAA8FF53BD021333AF6E453D5A612BDB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 18:01:26 +0000
Manifest this update: Sun 01 Mar 2026 18:01:26 +0000
Manifest next update: Mon 02 Mar 2026 18:01:26 +0000
Files and hashes: 1: Gv_wNpXfpWq-q_UPRh3AwBy396o.roa (hash: mb+6Z361/RYrR2bM4P/XCXIcCPG1uTGsxi5EGv9l1NI=)
2: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl (hash: vnsWLGg0Jr6qEl4VXl0bbIxcKziYRyYq3aWxySQW6r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:f5:3b:d0:21:33:3a:f6:e4:53:d5:a6:12:bd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97102c693af3a090f8f94ba1fd082db0924eaf12
Validity
Not Before: Mar 1 18:01:26 2026 GMT
Not After : Mar 2 18:01:26 2026 GMT
Subject: CN=a61f5f42a2c9a96f4de1fdf550a86ac5c0492f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:c1:e5:d7:7a:77:bf:3b:18:47:0f:ac:47:
b4:a8:ce:8a:a3:bf:51:c7:8e:4c:51:20:b2:72:96:
48:c8:8e:f5:2f:41:1e:a5:a6:d3:c3:bc:ae:dc:8d:
7f:14:c0:53:8c:fd:97:3b:f4:30:04:84:75:c8:18:
e4:08:a0:2b:03:a4:ea:b5:fa:36:45:6e:aa:05:4c:
c6:4e:f6:dd:68:69:40:b0:2a:ac:83:e5:88:21:97:
b6:6c:dc:62:0d:8e:b1:ce:b4:d7:e7:97:bd:bb:82:
88:81:5e:da:fd:07:ad:5f:55:a3:bf:6c:06:77:dc:
2f:89:50:11:8e:72:c4:b1:6b:b3:96:0b:66:bb:53:
37:66:a6:7f:58:67:69:b4:42:e9:fe:fb:5e:dd:06:
91:37:0c:85:72:af:92:9e:36:73:09:05:00:fd:09:
d7:b9:18:e9:2a:bd:e7:da:26:06:55:46:b2:4c:08:
fa:3e:b7:92:4d:c4:6b:85:c8:e7:e0:62:bb:da:3c:
b6:c4:40:f9:98:d6:34:e4:e5:4d:61:40:6e:4d:5b:
0c:1b:6c:c2:4c:e4:f5:d9:ba:4c:37:4e:4f:8d:8a:
43:be:d9:c5:6c:27:a8:35:82:65:64:c6:96:af:3e:
b1:be:fd:cd:3f:f1:5e:12:5f:e2:5a:81:a1:26:e6:
d6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1F:5F:42:A2:C9:A9:6F:4D:E1:FD:F5:50:A8:6A:C5:C0:49:2F:92
X509v3 Authority Key Identifier:
keyid:97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:40:20:2a:3a:ab:ed:b5:71:28:95:fb:40:ef:89:6d:a9:cd:
00:29:e5:d5:79:bc:bb:29:13:d0:7c:7e:c5:b2:ce:00:f7:b0:
58:c2:c1:d0:48:45:f7:d5:9d:ff:75:fc:2b:19:9f:12:c3:38:
01:be:fb:45:70:73:4d:ee:b0:b7:7b:13:b3:6e:dd:1c:f8:88:
2c:be:fd:f4:53:cb:de:47:97:08:c9:3a:fb:b5:84:0e:9d:08:
79:c5:ba:bc:db:ef:b6:7d:ec:02:ab:0b:c8:a3:48:cc:7a:f0:
b5:d1:09:b8:68:93:54:ea:06:c3:6d:25:d3:84:48:73:22:0e:
d8:ae:ac:c3:63:f9:10:57:c3:f4:20:6d:55:34:d2:cd:81:7b:
a9:b5:f4:4c:6d:ba:1d:1b:37:0e:4c:d6:e1:ee:42:fd:a2:b7:
d1:69:82:f6:56:f2:ed:a5:b4:22:85:7a:b7:31:7c:78:a8:86:
b1:a5:26:17:18:e4:44:3e:bf:c8:b8:0b:40:9b:a3:1c:90:7c:
9e:64:23:20:7e:98:07:49:4c:a0:35:14:f1:c3:d7:76:40:48:
8f:40:19:5e:86:fd:e2:5d:e5:db:94:fc:f3:87:4b:c4:b8:18:
d2:b0:98:bc:d6:c3:d7:b3:56:1d:96:67:5c:83:3c:c0:53:bc:
77:8f:05:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:26 2026 by rpki-client