Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
File: lxru6oeY927JpDTnVjfs2IEJLsI.mft (raw, json)
Hash identifier: 76nYX4j22/5JKTjo/+M/Y1tKS5s3UEkEX/bylAAxYQg=
Subject key identifier: 35:B4:D2:A2:65:0C:1D:54:29:D6:37:94:C8:87:53:1C:1A:BB:72:27
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 019D9B50AA17AC3A5376C6269B90164CE174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 12:00:47 +0000
Manifest this update: Fri 17 Apr 2026 12:00:47 +0000
Manifest next update: Sat 18 Apr 2026 12:00:47 +0000
Files and hashes: 1: 9g8xNFb2G40vpUgQ83M1qATo9IM.roa (hash: XlOOaS5ddXCcXrWbzYLtTuliD0nsTkmll8658pyGZu4=)
2: cJ3CSy6b-K7_SvDOoh-SHmO50AI.roa (hash: ima6XXFyVR9RW0ytt/Ct7dNcbu+58VazOZOWGhgX3kc=)
3: jM-7nkDS5qjlb3w33JvghnsyuJw.roa (hash: d7SlxGUeBLsKibMsNC4PiGRQBSGoyvgsjw7sV20/+lM=)
4: lxru6oeY927JpDTnVjfs2IEJLsI.crl (hash: 54T4bcqDusgP5QSBEwWsc+nu3XN3vBMumhBOEWFFGvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:aa:17:ac:3a:53:76:c6:26:9b:90:16:4c:e1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Apr 17 12:00:47 2026 GMT
Not After : Apr 18 12:00:47 2026 GMT
Subject: CN=35b4d2a2650c1d5429d63794c887531c1abb7227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:de:13:04:57:19:2f:55:7c:71:eb:9f:41:6e:
f1:c6:f2:7b:bf:20:43:84:a0:67:f7:bc:f0:57:04:
4b:e9:d7:6e:e9:79:2b:17:18:5f:77:66:23:05:77:
2d:2d:42:78:40:59:65:d8:e1:e9:c8:82:b4:7b:0e:
00:9a:cf:dc:92:8a:1f:69:6f:68:dc:61:bf:bd:59:
86:77:56:88:51:90:6d:95:d0:4b:ed:7e:aa:6a:17:
c8:d6:59:43:14:bc:e0:d9:62:7d:6a:b3:ac:fd:88:
b7:05:b3:09:61:6a:31:11:00:f7:b0:7d:df:5b:be:
d5:44:7b:51:05:a2:44:0b:c5:ab:ba:a7:ea:6f:45:
7f:d0:b9:17:86:a8:2f:54:22:58:1a:5b:b1:1c:7c:
47:6f:61:eb:9a:88:58:b7:e8:64:1e:8b:5e:fb:cf:
3b:a5:f0:e5:ec:81:d5:ce:06:d9:91:57:96:d7:bc:
16:87:9b:05:e9:ab:a6:c1:dc:54:da:bb:57:18:1c:
82:0c:00:00:f7:24:52:6d:65:bd:7c:1c:51:57:15:
2d:48:f2:af:0e:46:e4:20:26:2b:41:52:b6:d7:32:
4c:d9:ce:1d:c1:58:cd:ab:76:96:fb:e2:c4:99:99:
6d:08:68:84:e0:f8:20:5b:24:fa:d4:53:a5:e7:3d:
0a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B4:D2:A2:65:0C:1D:54:29:D6:37:94:C8:87:53:1C:1A:BB:72:27
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:03:61:81:3d:c1:08:2e:93:6f:cf:4b:9f:79:ee:b3:5e:0e:
bd:e1:d3:a4:93:e7:53:2d:af:8a:8e:b1:3d:f3:8f:3b:e6:c9:
de:23:51:7e:84:45:6a:b3:a1:77:1e:77:32:ee:92:0e:23:08:
f9:4b:98:7c:01:41:72:88:91:a0:82:04:60:70:68:30:f2:cd:
78:ae:ac:2d:82:da:54:9c:59:02:3d:48:84:51:dc:4e:2c:73:
7f:bc:3a:aa:4e:c4:ea:b2:97:bc:f4:4d:5c:c6:f0:f9:f4:26:
92:ce:7b:d1:86:90:19:6d:b7:13:6f:58:72:a2:96:21:22:22:
28:e4:fd:02:0f:94:cf:69:75:72:75:ea:47:09:7f:23:d2:09:
64:03:0e:88:16:35:2b:35:80:22:59:93:88:a8:dd:73:c2:aa:
df:8f:b3:bc:c3:bd:91:32:e9:51:cb:e1:81:60:40:28:cb:a5:
fa:0c:b6:5f:57:5b:84:2f:7a:74:d3:f1:fd:0f:16:5f:81:d5:
82:88:2a:24:7b:d6:48:56:65:ea:fe:a1:c3:df:7a:fa:99:0e:
28:14:3a:b5:6f:ca:b3:a3:30:af:ce:da:72:3c:22:8b:1c:cf:
d3:c6:2d:7d:cf:93:de:80:59:95:d3:82:b4:ff:68:7b:b6:af:
33:a9:f3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:05:36 2026 by rpki-client