Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
File: LxiqH1XWNcliBMp5qCmT-87BUSw.mft (raw, json)
Hash identifier: jSE/O10hw37dnRQ0lxIqMnUorsr8FvBcm0pLqjhSd9A=
Subject key identifier: 91:19:C5:7B:01:27:43:A0:4C:AE:29:8F:F8:D8:34:B1:96:B0:91:FF
Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Certificate serial: 019CAA8F9910008E3E162445191F7D272C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 18:01:03 +0000
Manifest this update: Sun 01 Mar 2026 18:01:03 +0000
Manifest next update: Mon 02 Mar 2026 18:01:03 +0000
Files and hashes: 1: LgLEIgozDh6ZtieL7JWKGQ61yzE.roa (hash: BgRl5tIbVsSwLTDHr7kVBjnhqq09mtoEkAcyM+VA2Ws=)
2: LxiqH1XWNcliBMp5qCmT-87BUSw.crl (hash: O/RNGvkQQyMrkEN/DLabU9O+tMpI9dvRwg2D/gA4OiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:99:10:00:8e:3e:16:24:45:19:1f:7d:27:2c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Validity
Not Before: Mar 1 18:01:03 2026 GMT
Not After : Mar 2 18:01:03 2026 GMT
Subject: CN=9119c57b012743a04cae298ff8d834b196b091ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:b8:62:44:1a:81:67:a2:a2:98:ee:41:ec:
db:5b:5c:05:50:7e:5a:e0:5f:6a:32:67:3a:93:eb:
6c:bd:f7:5b:cc:48:02:84:0e:60:01:d6:2a:b0:62:
8c:ea:57:cf:30:d4:f2:65:07:84:7f:f1:40:5e:39:
76:10:5a:a0:0e:95:d9:4a:72:c6:af:76:9f:d9:4d:
19:79:d4:59:bd:6e:90:2d:54:89:a5:75:99:5d:94:
eb:f6:b3:a4:d2:f2:ff:77:04:9c:75:86:e7:cc:b3:
d2:ec:a7:ad:c0:49:d6:67:36:64:d7:ca:0e:ba:54:
3d:61:9f:c1:48:9c:3e:1d:fd:b8:d6:ea:f0:da:c5:
7b:71:78:c9:ab:04:ce:1b:31:b1:25:72:ce:62:c3:
a6:90:f9:2e:8b:bb:23:2a:2d:08:4b:4c:34:b0:3f:
62:dc:4c:ec:f5:f6:cc:2d:4c:11:ce:26:e7:00:7e:
f1:3b:9e:9b:a6:c5:a9:7a:12:bc:79:63:1b:71:19:
38:d8:34:1d:a1:b0:89:e5:15:5e:21:b2:6f:f5:6c:
d9:1a:29:f6:20:52:ce:fd:e4:f9:8f:54:4b:26:5a:
d8:6a:8d:6e:66:5a:9c:74:6a:81:7e:95:c3:d3:1a:
48:6c:3f:16:79:a4:c6:95:96:01:3c:0d:9d:c5:0e:
6f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:19:C5:7B:01:27:43:A0:4C:AE:29:8F:F8:D8:34:B1:96:B0:91:FF
X509v3 Authority Key Identifier:
keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ac:08:16:24:04:d2:8d:aa:58:3a:65:03:42:6e:be:f7:1a:
ba:c4:10:3c:cc:e5:ec:12:bf:cc:88:4a:49:a7:f9:22:6b:b4:
1e:78:2f:6f:1a:6a:57:17:66:30:8d:b6:3d:e7:02:d4:80:bf:
df:73:49:97:46:f8:70:91:e3:64:e8:d0:f8:38:b3:d9:69:36:
e4:a5:06:20:ed:e5:be:a6:1a:8d:38:b0:e5:51:b8:cb:e9:2f:
16:0f:c9:72:2e:a5:25:a9:7b:fb:2d:95:7c:67:d1:7e:6f:76:
a2:bf:ca:91:f9:ea:59:16:99:64:92:4a:d0:7b:f0:04:a6:97:
3c:2b:e7:6d:97:20:35:52:b2:ce:f6:ff:d5:93:3e:9a:44:1f:
f8:3f:cb:17:da:04:22:03:69:ab:6a:35:43:bf:03:42:83:ef:
e5:bf:4d:d1:66:2c:72:16:42:ad:fe:76:b1:f9:ad:28:5e:70:
8e:f6:10:dd:39:e0:6b:0e:2b:ea:00:3d:7c:18:06:85:e1:a6:
09:00:bc:16:40:e4:7b:8a:d7:79:d5:39:9d:d6:8f:2d:ad:55:
b1:f6:7a:6f:d0:d8:37:78:d8:3f:07:ce:5e:d1:e3:0b:03:09:
42:dc:b9:2e:af:4d:4c:20:83:d5:88:7e:99:08:2a:c2:5d:6d:
fb:c5:a8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:49:51 2026 by rpki-client