Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
File: lxru6oeY927JpDTnVjfs2IEJLsI.mft (raw, json)
Hash identifier: 5Sj9ljJE3nzt1d+J1jDTWxU7kPPpXEcVHdNFf0fFHck=
Subject key identifier: 18:98:B2:85:96:4E:D5:14:B6:B6:1D:45:69:DD:61:80:BB:05:21:D5
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 019FAA87378C3DF5EE5132F5CFD194C41B51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 21:00:15 +0000
Manifest this update: Tue 28 Jul 2026 21:00:15 +0000
Manifest next update: Wed 29 Jul 2026 21:00:15 +0000
Files and hashes: 1: 9g8xNFb2G40vpUgQ83M1qATo9IM.roa (hash: XlOOaS5ddXCcXrWbzYLtTuliD0nsTkmll8658pyGZu4=)
2: cJ3CSy6b-K7_SvDOoh-SHmO50AI.roa (hash: ima6XXFyVR9RW0ytt/Ct7dNcbu+58VazOZOWGhgX3kc=)
3: jM-7nkDS5qjlb3w33JvghnsyuJw.roa (hash: d7SlxGUeBLsKibMsNC4PiGRQBSGoyvgsjw7sV20/+lM=)
4: lxru6oeY927JpDTnVjfs2IEJLsI.crl (hash: Rxke61Lc1mAsoQkGLi/4UMCuNmqvQzb+bbwwLkBhNHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:37:8c:3d:f5:ee:51:32:f5:cf:d1:94:c4:1b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Jul 28 21:00:15 2026 GMT
Not After : Jul 29 21:00:15 2026 GMT
Subject: CN=1898b285964ed514b6b61d4569dd6180bb0521d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:5d:87:1c:54:2e:f0:c2:1c:40:44:60:0f:
fe:91:2c:69:a4:c5:9a:6f:16:ea:d5:a1:9c:0e:a0:
f0:c1:8c:c8:01:52:7e:ee:82:d0:e9:38:90:d6:24:
42:d6:f2:45:e0:52:4d:42:af:30:c1:85:18:e6:39:
5b:e0:33:4e:01:aa:23:41:60:81:70:2b:cc:9a:e6:
71:86:6e:b4:64:d4:5c:35:6a:35:d1:5e:84:30:c7:
cf:a2:e1:79:20:fe:38:6b:34:af:a7:b9:27:76:b7:
a7:ee:f0:e3:c9:d4:bf:de:ad:39:ea:20:c0:fa:b6:
d5:34:14:d9:bd:c0:66:d6:0f:88:ed:b9:55:16:e2:
f3:fa:0d:85:92:1d:a7:66:96:5a:e5:5a:71:1a:b3:
49:ab:78:9d:d5:4e:a6:f5:bc:e2:5d:b3:3e:cd:2c:
76:93:de:5c:84:f3:ac:7c:10:f6:c2:33:41:81:20:
6c:0e:0b:c8:ab:ab:d2:39:80:95:72:73:5a:a5:67:
a7:67:d5:3d:09:9b:1c:3d:22:fd:a2:fc:28:31:d5:
49:34:f7:48:b9:85:2c:1d:82:4c:89:38:07:55:5c:
9f:50:d6:26:e2:ee:b5:90:b4:8c:fd:a2:9d:8b:70:
cd:92:d5:fd:38:45:79:b8:7b:c8:85:06:96:59:b2:
7f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:98:B2:85:96:4E:D5:14:B6:B6:1D:45:69:DD:61:80:BB:05:21:D5
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:26:b1:5c:55:e7:d9:c9:d2:cf:6d:0b:0d:31:e0:50:77:30:
d5:ff:b4:6c:53:d7:07:86:50:b7:52:71:89:f7:88:39:d4:fc:
29:f5:32:da:06:ca:e0:c5:a2:ec:38:98:5d:16:29:df:ea:8d:
a6:00:30:08:f5:63:15:32:47:f7:53:bb:c6:34:85:90:71:af:
75:4d:4e:83:42:b3:52:33:c5:55:07:7a:30:ca:4b:47:32:91:
d1:1a:bb:d7:38:87:ff:15:49:9d:53:b5:81:90:fe:db:1e:86:
4e:06:88:bb:8b:07:80:2e:8e:10:c7:9c:bc:3e:72:b1:1f:24:
54:a8:e9:33:cf:c3:2a:e0:2a:09:c4:6f:2d:37:fc:3f:26:f0:
a8:37:78:8c:32:83:30:18:a9:48:16:cf:f1:49:18:3b:c9:3b:
e9:40:eb:7a:70:ae:e4:49:fa:71:85:8f:ee:10:cd:5b:65:18:
2b:f7:11:5f:c4:d3:5e:2a:53:38:17:89:3a:ca:85:13:ac:53:
a1:b9:d7:67:87:5b:fb:7d:57:7d:c3:91:a2:ef:02:cf:ef:85:
95:92:dc:43:ce:ec:b9:ed:e7:84:ef:57:f0:c8:f6:d6:80:45:
6d:43:34:49:09:60:7d:cb:13:b3:08:db:40:41:8b:29:cc:66:
0a:4c:30:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:18:40 2026 by rpki-client