Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
File: LxiqH1XWNcliBMp5qCmT-87BUSw.mft (raw, json)
Hash identifier: H2LLrgYMphq3sCUdeeY9CH+ltfsdw3h7LL8ycVlqHls=
Subject key identifier: 9E:96:32:23:A9:AA:1C:13:69:EC:44:F4:91:2E:44:80:4E:00:27:2F
Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Certificate serial: 01A0C520C55119979A8164278A0CF70E35D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 18:00:54 +0000
Manifest this update: Mon 21 Sep 2026 18:00:54 +0000
Manifest next update: Tue 22 Sep 2026 18:00:54 +0000
Files and hashes: 1: LgLEIgozDh6ZtieL7JWKGQ61yzE.roa (hash: BgRl5tIbVsSwLTDHr7kVBjnhqq09mtoEkAcyM+VA2Ws=)
2: LxiqH1XWNcliBMp5qCmT-87BUSw.crl (hash: 4S8JKYoXszyogiBkJdUQ7q0KwPi/j3nSV+d0vfzja/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:20:c5:51:19:97:9a:81:64:27:8a:0c:f7:0e:35:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Validity
Not Before: Sep 21 18:00:54 2026 GMT
Not After : Sep 22 18:00:54 2026 GMT
Subject: CN=9e963223a9aa1c1369ec44f4912e44804e00272f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:65:e5:ab:19:69:a2:3e:47:ad:22:b6:f5:f7:
06:b3:da:c0:83:2c:49:ab:e1:d5:40:f2:5f:c5:95:
4d:72:a1:99:7c:26:6c:41:42:5f:42:46:21:f2:5c:
55:b8:42:59:2c:9a:48:73:9c:22:a5:69:2a:74:67:
68:9d:61:6a:18:b9:6a:eb:34:20:24:00:7c:53:73:
21:a6:91:2c:0a:22:54:84:b4:b0:f1:cd:59:08:8d:
60:8a:ab:11:38:d0:dd:a8:dc:3c:56:e6:e3:11:3b:
62:78:5b:9a:6d:7e:cb:9b:6a:07:df:30:3d:cb:a1:
e0:b3:e6:ce:59:2c:e0:5d:bb:69:d4:86:3f:09:2d:
f8:ba:60:cf:3d:ae:5e:c8:d2:d6:a7:03:53:a4:42:
10:2c:24:b6:78:92:c6:4a:35:97:0c:37:ea:0e:ec:
b0:d9:36:12:f0:ad:ca:a1:bd:57:4a:23:1d:71:6a:
2d:f4:68:dd:18:21:3a:9b:be:ca:59:1c:7b:f1:98:
63:9e:2f:f4:0f:e0:cf:fd:61:48:f4:ac:1a:c2:c2:
d6:c0:a5:fa:c0:f6:fd:4b:4e:50:18:82:57:c7:2a:
6d:76:7b:3c:f9:de:4a:85:c8:c5:fe:ce:6e:44:f6:
18:93:aa:d6:fe:e1:d9:23:ee:67:c9:3a:a0:bf:01:
7a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:96:32:23:A9:AA:1C:13:69:EC:44:F4:91:2E:44:80:4E:00:27:2F
X509v3 Authority Key Identifier:
keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:72:26:6a:9a:de:90:77:9e:a2:15:dc:a2:a5:7a:d6:f4:3a:
a3:ea:c4:7a:7c:b8:e4:4c:d0:f2:8e:5a:60:95:1a:f8:ff:ba:
11:b7:c6:59:5e:0d:7e:62:93:40:fb:8d:8c:56:42:3a:ae:23:
7d:ab:9c:cb:11:2d:4c:19:46:e2:d6:b8:1f:f1:c6:49:7d:75:
15:68:82:2a:50:fa:bd:db:cd:eb:76:07:14:1f:96:f6:a3:6c:
c0:71:af:44:62:96:b1:77:b2:b8:85:12:f6:47:78:b9:58:48:
c4:28:bc:1d:0c:e4:7b:91:f5:6e:4b:0f:8c:74:9b:4f:2f:35:
c5:31:ba:68:26:d8:e1:62:06:6c:55:2e:ba:8e:20:cc:67:09:
0c:d8:a1:d3:90:7f:74:35:ae:52:a6:3e:53:1a:35:79:b7:ff:
d7:14:14:c4:30:e6:a1:1a:de:22:f3:73:ed:86:a6:77:54:34:
ea:59:41:ad:1e:b8:bd:32:4b:73:d9:12:f8:83:78:32:b2:a6:
f7:5d:a3:a3:36:c2:54:ee:33:7a:0d:bf:24:8c:2d:a5:bb:b0:
74:d8:6d:fb:a0:ef:1a:7a:ac:76:10:d9:16:6d:2b:37:6b:41:
18:66:a3:4f:a8:f8:19:4f:ec:56:57:91:1e:f5:0b:66:22:2c:
14:56:84:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:55:21 2026 by rpki-client