Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
File: LxiqH1XWNcliBMp5qCmT-87BUSw.mft (raw, json)
Hash identifier: y+lSJ/o4kFf8DPS1C2PDGVzHAMkZyVKZTz3518iA8JQ=
Subject key identifier: BB:0B:9C:02:31:1A:A4:0A:F3:88:F8:6F:0D:3A:A4:44:EF:7A:52:5D
Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Certificate serial: 019D9818BCE8E612558B3F01BA3340EFDE81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 21:00:51 +0000
Manifest this update: Thu 16 Apr 2026 21:00:51 +0000
Manifest next update: Fri 17 Apr 2026 21:00:51 +0000
Files and hashes: 1: LgLEIgozDh6ZtieL7JWKGQ61yzE.roa (hash: BgRl5tIbVsSwLTDHr7kVBjnhqq09mtoEkAcyM+VA2Ws=)
2: LxiqH1XWNcliBMp5qCmT-87BUSw.crl (hash: j7IjDpORqptsPjVykQQUV4AXpWATd3sQmL+JZFGW8G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:bc:e8:e6:12:55:8b:3f:01:ba:33:40:ef:de:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Validity
Not Before: Apr 16 21:00:51 2026 GMT
Not After : Apr 17 21:00:51 2026 GMT
Subject: CN=bb0b9c02311aa40af388f86f0d3aa444ef7a525d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c0:33:90:86:ab:fe:ad:fa:6b:e0:79:57:6e:
fb:dd:ea:2e:b0:3e:fc:7b:8a:10:90:52:d0:e6:76:
13:a3:02:fa:9e:f6:d5:44:af:aa:62:01:ac:31:61:
8c:46:cd:46:80:0c:b2:ad:37:85:fd:4d:f0:3e:ca:
c7:11:87:2a:a1:1f:f0:d1:76:c6:d4:3d:16:30:6a:
58:46:26:bb:de:4b:31:4c:65:5a:ba:65:e8:67:37:
ec:2b:17:f9:47:e1:cd:1d:a0:ec:5d:80:b1:0f:33:
2e:60:05:3b:4d:13:6e:62:4d:21:db:d6:1c:97:a8:
c8:83:c9:63:a9:a1:8b:c6:1a:b1:b1:a4:1c:fe:67:
14:c4:bc:64:c4:4d:b9:2b:76:8a:91:0c:8e:7e:7a:
aa:e7:39:8a:d6:b8:70:ea:b1:5d:74:73:9e:14:55:
11:ce:18:f2:c5:58:cd:33:e9:5b:52:aa:ca:54:90:
1d:93:42:a2:2b:4f:3f:e3:e5:24:d2:93:7c:39:15:
f0:ff:97:b4:d2:f6:4c:29:90:e3:ce:ac:9f:6c:2b:
f9:f8:bd:39:2a:92:c8:25:3a:c3:5d:fc:23:e7:5d:
51:b3:33:e7:91:5b:51:ed:cd:04:28:8f:87:41:6b:
c9:f7:62:c4:c1:23:d4:b4:0a:64:61:86:46:f2:41:
d7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0B:9C:02:31:1A:A4:0A:F3:88:F8:6F:0D:3A:A4:44:EF:7A:52:5D
X509v3 Authority Key Identifier:
keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:62:28:8d:ab:c2:ad:3e:e6:ef:12:20:08:d7:06:91:b8:83:
4b:d2:28:bf:dc:3d:18:1d:32:fe:42:3f:ed:5b:cc:77:17:13:
7d:8c:97:25:da:42:d5:4f:94:cd:a7:26:3a:0d:8a:cf:70:1a:
8c:04:0e:da:fa:81:60:ca:df:d2:4d:50:9d:86:dd:51:f5:7a:
22:81:e7:df:75:13:4e:88:6d:57:e9:bf:06:88:f6:44:20:b5:
85:76:b7:83:48:0d:9d:68:f7:57:7e:b4:31:5b:55:20:f0:60:
9a:4e:f7:81:74:46:b4:37:01:17:d0:b5:51:53:b4:3c:46:59:
7a:85:ad:bd:9e:4f:76:8c:da:fa:9c:cb:13:e4:d1:9a:2e:80:
36:2e:26:eb:95:b7:3b:70:03:f3:ac:93:a0:af:88:ca:c8:3c:
da:9a:41:95:c3:25:f0:93:12:2a:9e:2c:83:4f:37:9e:8b:ff:
83:5b:21:38:68:ca:19:6d:c1:5b:9a:9a:02:e7:bb:ca:59:80:
c5:5c:fc:96:95:d3:c4:07:5c:78:48:44:00:19:c7:71:21:b2:
f9:e7:aa:68:d0:a7:ec:ee:fc:bf:a3:95:6b:81:00:1a:fd:cd:
eb:10:d6:76:7a:52:30:7e:2d:67:1f:d9:7a:15:c2:5d:ec:2e:
f6:8f:fa:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:10 2026 by rpki-client