Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
File: LxiqH1XWNcliBMp5qCmT-87BUSw.mft (raw, json)
Hash identifier: mA83fPrH3LNvGLoC41uiGW4lZzxNS0GQwRgBz0107w0=
Subject key identifier: 42:18:01:C6:E7:D7:6D:11:65:39:E2:38:D8:48:01:9A:FA:6C:C8:83
Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Certificate serial: 019CAC7E4D08D9DBA24F8C3FF2030793219F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 03:01:24 +0000
Manifest this update: Mon 02 Mar 2026 03:01:24 +0000
Manifest next update: Tue 03 Mar 2026 03:01:24 +0000
Files and hashes: 1: LgLEIgozDh6ZtieL7JWKGQ61yzE.roa (hash: BgRl5tIbVsSwLTDHr7kVBjnhqq09mtoEkAcyM+VA2Ws=)
2: LxiqH1XWNcliBMp5qCmT-87BUSw.crl (hash: hikOiwhKQ2QzFgSZg9RAMxIRytdkdVWxoqETn2QVH/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:4d:08:d9:db:a2:4f:8c:3f:f2:03:07:93:21:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Validity
Not Before: Mar 2 03:01:24 2026 GMT
Not After : Mar 3 03:01:24 2026 GMT
Subject: CN=421801c6e7d76d116539e238d848019afa6cc883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:49:d2:60:dd:75:70:e6:6a:c9:5c:6c:aa:
a2:16:73:cf:fc:f0:90:e7:a1:ca:17:5b:b2:eb:af:
70:31:bd:aa:bc:78:7c:fe:3c:d8:60:1b:14:de:e2:
21:d5:42:06:9f:21:d9:3b:e2:d6:18:7e:76:8c:7c:
52:d3:6b:49:9a:86:2e:4a:d2:85:d9:b9:4b:52:ee:
88:82:f6:21:9c:40:cb:c1:6c:42:a8:90:4e:28:d9:
e8:a2:5d:3a:94:f2:cd:cc:9b:c2:5e:84:09:05:6b:
89:6c:4a:62:f3:cc:0c:be:7a:cd:9f:d6:b8:8d:19:
10:11:5a:ec:c6:05:46:91:2e:f2:33:40:21:a2:c8:
8a:d9:1a:27:34:70:b8:06:ff:37:58:66:47:c2:32:
51:0a:13:1c:28:59:b4:df:f1:34:32:64:3e:f8:84:
c0:22:b0:63:13:51:69:fb:70:ab:f5:aa:fe:d9:e0:
12:11:30:dd:5e:ce:de:36:d0:20:d0:e1:93:47:e1:
5e:db:c2:59:5f:87:8b:e1:bc:29:b7:69:6d:e1:e5:
4f:4f:09:2d:c5:e1:38:9a:68:89:c8:1b:b1:fa:22:
89:2d:f8:ca:9a:35:79:28:b1:e3:02:a8:9a:61:93:
e0:cb:e4:d0:a0:4a:56:79:fc:dc:c9:56:dd:2c:e4:
f3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:18:01:C6:E7:D7:6D:11:65:39:E2:38:D8:48:01:9A:FA:6C:C8:83
X509v3 Authority Key Identifier:
keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:69:02:b4:22:a3:86:b2:ae:40:83:a3:cc:dd:5b:16:73:19:
71:16:1c:07:70:0d:41:d9:8e:22:ce:a9:94:07:6a:0d:3c:9c:
69:24:25:f2:b1:09:a9:53:91:a5:d0:55:91:40:3a:be:92:f4:
51:99:40:c9:9f:d9:a0:b8:f0:d5:a0:c0:0e:2b:36:55:d4:a1:
06:cf:25:45:00:79:75:a0:1c:8c:fb:ed:12:17:a4:bf:dc:01:
31:c5:a1:6a:29:a3:f4:4a:ea:48:fb:fd:6c:e8:dc:42:45:7b:
1f:4f:e7:d4:06:6d:dd:5b:35:b3:95:61:d9:da:d5:3d:cd:d3:
8a:52:95:30:79:92:e3:f6:5e:28:0e:ed:bb:f1:22:bb:21:51:
91:49:6a:c6:75:cc:0e:a7:95:12:f2:59:d9:1b:94:96:ac:0a:
cc:7b:58:06:11:42:4b:0f:8e:97:f6:d7:26:82:fe:9c:34:71:
ca:6a:6f:b6:19:60:0b:6e:6b:87:69:69:48:3a:52:69:94:df:
3b:b4:e6:01:fe:9f:f2:30:58:e2:37:ad:3f:af:7e:6f:e3:59:
2e:19:44:e0:79:f2:84:c9:37:89:55:15:a5:b4:93:71:3b:9b:
b5:73:a3:17:a3:c8:81:62:94:a7:c9:b3:d7:c9:a2:49:ea:b0:
f7:d2:93:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:13:57 2026 by rpki-client