Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
File: lxru6oeY927JpDTnVjfs2IEJLsI.mft (raw, json)
Hash identifier: KJqAbFL6H4HdKueVrythNZgmc3cQgtmmSREYLbyzKEA=
Subject key identifier: 4E:7B:CB:80:54:48:22:CC:21:D9:74:C1:80:E2:23:66:67:B4:83:E7
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 019CADC77817EBA401B567A0A3688CE00FFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 09:00:56 +0000
Manifest this update: Mon 02 Mar 2026 09:00:56 +0000
Manifest next update: Tue 03 Mar 2026 09:00:56 +0000
Files and hashes: 1: 9g8xNFb2G40vpUgQ83M1qATo9IM.roa (hash: XlOOaS5ddXCcXrWbzYLtTuliD0nsTkmll8658pyGZu4=)
2: cJ3CSy6b-K7_SvDOoh-SHmO50AI.roa (hash: ima6XXFyVR9RW0ytt/Ct7dNcbu+58VazOZOWGhgX3kc=)
3: jM-7nkDS5qjlb3w33JvghnsyuJw.roa (hash: d7SlxGUeBLsKibMsNC4PiGRQBSGoyvgsjw7sV20/+lM=)
4: lxru6oeY927JpDTnVjfs2IEJLsI.crl (hash: SIhMvEGBiX46BDHGq19YyjO0t4TpXWNZ6udi0t3+5ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:78:17:eb:a4:01:b5:67:a0:a3:68:8c:e0:0f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Mar 2 09:00:56 2026 GMT
Not After : Mar 3 09:00:56 2026 GMT
Subject: CN=4e7bcb80544822cc21d974c180e2236667b483e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5b:ab:b5:c8:88:09:45:a8:ae:7a:54:dc:94:
12:db:bb:0a:c1:4f:1a:a3:79:ea:a6:72:a8:86:61:
71:0c:42:4a:f3:64:1d:dc:a5:b2:29:79:92:69:ee:
c1:b3:a2:16:4c:ab:ad:7d:41:de:97:fd:fe:af:9e:
ee:e9:cf:a5:d7:23:f3:5c:71:96:d6:a4:12:07:80:
dc:1c:c6:60:40:c6:4d:bf:62:d8:05:00:22:c0:12:
b3:12:7d:c9:51:cb:8d:a0:97:ef:0e:35:a8:a4:40:
86:87:d5:10:2f:30:4f:e2:40:5a:e1:95:46:f6:80:
d2:80:84:13:75:c4:e8:b5:77:13:6f:be:d1:1a:81:
d0:02:08:81:98:98:96:ac:c5:9c:a8:ac:43:e9:95:
d9:12:5a:5c:27:95:b9:91:56:ff:16:07:07:d2:91:
d1:46:d3:36:ee:cf:e6:ae:f8:16:ba:5e:f2:98:4a:
61:39:2f:44:63:e8:7c:67:17:41:84:aa:aa:4b:de:
3f:05:e3:31:f6:b8:6e:fd:00:aa:e5:5c:18:9e:4d:
24:1b:0f:35:09:ed:65:3f:c6:e0:8b:d2:16:41:8d:
7b:47:e5:05:78:66:3e:3b:32:8d:56:31:e4:9c:75:
28:7b:a1:ed:39:7d:cf:5a:a8:2d:7b:3e:7d:8a:a6:
7b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7B:CB:80:54:48:22:CC:21:D9:74:C1:80:E2:23:66:67:B4:83:E7
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a7:0c:a5:b3:5e:12:35:64:07:b9:86:2f:fe:0e:02:13:df:
cd:0a:47:22:d6:59:4a:2a:ca:84:d6:c1:a8:b2:aa:07:d2:b8:
51:f4:7f:68:48:f8:a4:c4:6a:55:a6:25:3f:de:67:06:16:2e:
58:38:06:6b:b4:82:c0:50:48:f6:3e:d2:fa:fb:5a:4b:b7:e2:
10:62:c5:40:73:1f:57:53:da:10:8e:64:c1:54:37:f2:2b:c2:
0b:5e:de:ad:59:4a:d0:2b:fd:a1:69:8c:ec:f5:b7:f3:bc:72:
44:68:d1:03:be:81:09:d1:31:05:0b:45:ef:e4:35:a2:7e:28:
44:09:c0:15:eb:c7:d8:dd:49:92:73:cc:fc:bd:92:e2:ab:1f:
f5:cd:37:31:70:bd:04:23:a6:8b:56:5e:d2:a0:aa:e9:df:f0:
81:a2:27:70:ec:8b:2f:7c:14:6f:14:94:ac:1c:47:50:88:39:
fb:cc:15:60:9d:8b:7e:9a:f4:2f:d6:82:6e:6d:4a:a4:00:56:
97:b5:80:65:9c:81:9d:5d:50:0f:b5:99:43:8e:ab:1e:09:bc:
cd:ac:76:a2:ed:5e:72:db:e1:e5:d6:2b:b0:5a:88:f8:77:98:
3d:d9:51:7f:27:d7:a2:b4:8b:a4:f4:07:7e:04:a2:c2:81:07:
e9:3d:2b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:48:47 2026 by rpki-client