Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
File: LxiqH1XWNcliBMp5qCmT-87BUSw.mft (raw, json)
Hash identifier: WQrbf2YcNnYZq2rOxGTdHD5MRIA0xsjYlRqxcPqskUE=
Subject key identifier: 27:DB:B7:EF:FC:86:A4:0E:A7:D7:5F:AE:5B:C0:A7:27:F0:CA:B2:01
Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Certificate serial: 019EBF913A34EB01670FD119DBDC130B32C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 06:00:26 +0000
Manifest this update: Sat 13 Jun 2026 06:00:26 +0000
Manifest next update: Sun 14 Jun 2026 06:00:26 +0000
Files and hashes: 1: LgLEIgozDh6ZtieL7JWKGQ61yzE.roa (hash: BgRl5tIbVsSwLTDHr7kVBjnhqq09mtoEkAcyM+VA2Ws=)
2: LxiqH1XWNcliBMp5qCmT-87BUSw.crl (hash: sNoyemO3JJyiXgsCvNJ2hXg16B4uwLKkZ4HnNZQdH1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:3a:34:eb:01:67:0f:d1:19:db:dc:13:0b:32:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Validity
Not Before: Jun 13 06:00:26 2026 GMT
Not After : Jun 14 06:00:26 2026 GMT
Subject: CN=27dbb7effc86a40ea7d75fae5bc0a727f0cab201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:0f:fd:55:1a:aa:83:bb:29:64:10:21:4b:
97:be:1f:33:97:cb:2d:98:dc:30:a8:e5:c9:5c:88:
ba:08:c4:1c:ba:72:2f:cc:cb:c9:a2:a2:5e:14:4e:
3a:e7:ae:a5:dc:00:95:0b:24:9f:e1:14:7d:21:c2:
9f:09:11:d0:7a:53:c3:06:62:53:d0:92:43:d1:8c:
e9:2e:27:89:c2:08:4a:78:ff:91:26:ff:8f:03:eb:
2a:d4:c1:06:59:a1:39:12:69:c5:62:73:44:fd:67:
02:58:2a:c6:05:e3:b1:eb:cc:12:26:31:bb:ac:3f:
f4:dc:dc:9a:59:ea:97:95:a3:cb:a1:cd:c0:e1:c5:
e2:c7:35:99:3c:d1:0a:d5:ae:c7:74:bf:3a:74:3e:
e8:29:e0:80:f4:7c:59:e8:84:c3:df:6e:d8:b2:9f:
74:37:53:a6:5a:de:dc:58:dd:fc:2c:96:a4:7b:c4:
aa:af:c5:04:0b:19:b7:a8:c5:bf:26:28:d3:cc:4d:
5f:42:c1:1d:b8:b2:d6:07:d6:e6:bb:c7:88:1b:cf:
17:b3:a7:9a:f4:4e:df:c0:0b:60:bf:df:88:ac:4c:
88:ef:47:61:5f:5d:e4:15:07:fb:ff:7e:38:07:6e:
b2:f4:e8:9b:6f:b7:b9:03:9f:f9:55:88:47:f9:8d:
09:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DB:B7:EF:FC:86:A4:0E:A7:D7:5F:AE:5B:C0:A7:27:F0:CA:B2:01
X509v3 Authority Key Identifier:
keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ad:8e:d0:c3:47:7f:7a:9a:e7:49:a0:f5:87:0f:7f:f8:0b:
33:fc:21:8e:93:5c:02:1d:bd:0c:ad:02:2d:20:4d:5e:7f:ca:
8d:78:51:6d:1b:46:3a:41:15:ad:09:72:e3:fe:e3:39:a8:8a:
36:47:9d:60:0f:c8:98:9c:8a:4a:f4:ed:ff:88:93:a3:e2:83:
64:f2:e6:79:62:f9:97:07:1c:89:36:2d:9f:c9:31:f7:db:34:
7c:93:13:e9:5d:96:b9:ff:b8:a3:5f:ad:32:6a:84:a1:c8:3e:
20:73:cb:33:35:c6:a2:b3:ac:af:7d:fe:de:bc:35:2c:2f:34:
52:0f:ea:1c:35:76:34:ba:ac:7d:34:08:16:53:ef:fd:ac:0c:
0e:dc:0f:9d:d2:db:9a:57:df:4c:22:18:d1:4f:54:d2:43:91:
c0:97:25:b4:52:0b:36:ae:0f:83:2b:d8:ac:a8:84:21:56:df:
78:8c:60:12:23:69:98:95:4b:fd:a4:b5:7a:7a:04:48:0b:ad:
3d:32:01:7f:c9:8f:4b:18:dd:48:6f:53:67:92:2f:68:d2:8a:
0b:67:09:15:23:f1:90:14:e7:92:f9:9c:57:1f:d0:26:4f:e7:
03:0a:6f:e5:93:1d:df:79:0a:44:f1:41:da:bd:3e:c5:a9:69:
d6:98:06:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:06:37 2026 by rpki-client