Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
File: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft (raw, json)
Hash identifier: zHml4huIH0tNjZE6uJMbU1Z0lDkQMT3L8vx+pRmUMMg=
Subject key identifier: 8A:02:15:83:94:E2:59:8C:90:BE:12:FA:3D:A6:C7:80:22:56:83:CF
Authority key identifier: 97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
Certificate issuer: /CN=971a799c6a663439d74450dfb38993571f98e15d
Certificate serial: 019EBF23B95B549F15E607837EB938F68CA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 04:00:49 +0000
Manifest this update: Sat 13 Jun 2026 04:00:49 +0000
Manifest next update: Sun 14 Jun 2026 04:00:49 +0000
Files and hashes: 1: FsdxCBsSPhgrqj2DSICdPcHdelg.asa (hash: eEvqQgi+lzyKHFjO4TryDYnkbMBQ3ARIXRQH0ITgfu4=)
2: dZ_v3Mc_jaWXuBe3BXvQFPLEuQU.roa (hash: QKHkKHHTIdqqahwWOaIvsm5JVVVXqX2D3ZMdSwEaAZk=)
3: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl (hash: VcZUWL6E8dDRHyxdkatrHh9STHlp3rR+J4U78p7B2wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:b9:5b:54:9f:15:e6:07:83:7e:b9:38:f6:8c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a799c6a663439d74450dfb38993571f98e15d
Validity
Not Before: Jun 13 04:00:49 2026 GMT
Not After : Jun 14 04:00:49 2026 GMT
Subject: CN=8a02158394e2598c90be12fa3da6c780225683cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d5:4a:bb:51:a2:cc:99:e1:a3:79:65:24:7e:
10:b8:a9:89:aa:0d:93:be:e5:10:9c:13:53:21:b5:
c2:2b:20:be:95:9b:e8:ad:f2:4a:36:6d:68:15:df:
14:0c:1c:14:cc:98:ba:84:41:98:b9:6a:99:ac:03:
04:90:bb:64:6d:cd:cc:1a:d8:05:31:2f:dd:b8:f9:
46:99:e6:97:c5:51:84:40:ce:8d:c1:b0:e5:de:52:
a9:f5:d5:de:e4:0b:d0:a5:bf:85:24:a1:77:c8:c7:
39:e1:9b:65:9f:c7:90:01:10:06:af:99:c9:71:26:
b7:61:a7:67:a2:2b:0f:95:6c:fb:00:b0:72:94:36:
78:97:a5:2c:92:29:65:d5:3b:f1:f5:d2:2b:3e:db:
50:a0:43:d2:25:e2:5a:a1:bf:eb:43:52:d7:d4:56:
40:3b:f5:e0:5f:a5:8d:40:b0:13:a0:18:00:0b:1e:
f6:fe:dd:f7:ae:74:43:2b:6d:c4:dc:c8:57:6a:65:
bb:9f:e2:ef:00:64:65:5d:a3:4a:d8:c5:78:7c:1a:
8e:23:7a:65:0b:35:7d:2e:5a:b4:34:b6:33:47:e6:
9f:09:41:4a:57:48:62:47:a7:c6:62:0b:99:4c:77:
4d:28:89:8a:0a:03:d0:18:5a:37:32:14:87:28:f1:
25:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:02:15:83:94:E2:59:8C:90:BE:12:FA:3D:A6:C7:80:22:56:83:CF
X509v3 Authority Key Identifier:
keyid:97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:b7:08:dd:40:a8:26:c9:50:76:45:96:45:6c:ab:dc:65:92:
2c:ff:70:d5:ba:13:72:6e:9a:77:66:e7:eb:0e:2a:b9:f5:ae:
41:b8:6d:cf:70:cd:d3:0f:88:db:0e:30:49:f5:e3:93:9a:3e:
fe:c1:ff:7f:69:0a:73:c7:f2:b4:80:67:4b:6d:8e:3d:14:e7:
5a:25:84:8f:56:8c:e3:e4:d0:e8:4a:2e:1e:bf:2d:3a:62:f6:
1a:03:c2:80:2f:8e:1c:e0:2b:ee:17:50:5a:a7:59:19:0d:ff:
cb:a2:f8:80:ca:4c:1c:0c:58:60:62:82:3d:76:f9:5e:33:04:
f9:c6:6a:23:88:2c:03:78:7b:90:b9:e1:a5:9c:9f:dd:13:46:
e6:8e:ce:0f:85:c0:95:30:be:ac:5a:b6:19:04:c8:e7:11:ab:
b9:87:05:b9:a8:18:5f:b9:ef:72:3c:a4:65:d6:9c:b6:f5:a6:
a3:52:9c:b3:5b:3a:52:79:c4:43:ba:bb:fa:d7:a7:86:33:58:
9c:d9:23:66:97:aa:2d:ed:80:e4:e8:80:e3:23:23:25:bd:c4:
d4:86:45:17:c0:f1:73:7a:06:ea:c7:c5:c7:b2:27:73:35:07:
ef:90:63:b1:1a:17:43:e2:89:ed:e0:4d:08:d7:2c:2a:5a:6d:
94:c4:9c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:29:30 2026 by rpki-client