Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
File: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft (raw, json)
Hash identifier: udYGh1jdNXktzbKgjAIyfZD8ckv8aGZlIvOEzjoh7cU=
Subject key identifier: C7:78:4F:23:1E:07:43:B9:54:62:56:85:B5:E5:59:93:8F:B3:F3:C0
Authority key identifier: 97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
Certificate issuer: /CN=971a799c6a663439d74450dfb38993571f98e15d
Certificate serial: 019FA8D001430D7656340CC0411EB12438F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 13:00:31 +0000
Manifest this update: Tue 28 Jul 2026 13:00:31 +0000
Manifest next update: Wed 29 Jul 2026 13:00:31 +0000
Files and hashes: 1: FsdxCBsSPhgrqj2DSICdPcHdelg.asa (hash: eEvqQgi+lzyKHFjO4TryDYnkbMBQ3ARIXRQH0ITgfu4=)
2: dZ_v3Mc_jaWXuBe3BXvQFPLEuQU.roa (hash: QKHkKHHTIdqqahwWOaIvsm5JVVVXqX2D3ZMdSwEaAZk=)
3: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl (hash: o1sFBSihU79EHWHIqtoWTyU2oky9Nt95lNbOq+fFFtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:01:43:0d:76:56:34:0c:c0:41:1e:b1:24:38:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a799c6a663439d74450dfb38993571f98e15d
Validity
Not Before: Jul 28 13:00:31 2026 GMT
Not After : Jul 29 13:00:31 2026 GMT
Subject: CN=c7784f231e0743b954625685b5e559938fb3f3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:3a:e1:96:39:f1:08:50:d1:0b:f5:06:3c:
89:13:2f:2c:75:d0:4c:87:3a:8b:ec:ff:1b:49:58:
31:b0:54:43:29:b9:66:b7:9c:ad:60:c2:95:c9:ba:
bd:89:ac:ab:fc:33:aa:32:90:56:ba:88:f1:63:9e:
4b:dd:69:3f:e2:57:28:8a:36:d9:11:11:46:ce:c4:
e9:dc:27:6a:04:75:46:fd:32:06:88:53:ed:c0:92:
6d:cc:9c:94:6a:68:72:65:25:68:63:a1:c4:b7:55:
e6:98:2d:a3:03:d7:9c:53:7b:fa:26:10:bd:df:16:
00:d3:b0:37:75:da:4a:95:0d:39:48:bb:37:6f:97:
22:92:06:58:83:1c:80:09:78:8e:3d:2b:94:98:d0:
36:41:0c:67:9f:33:92:45:36:cc:c6:b7:82:9e:58:
6f:18:f4:45:84:b9:20:c4:80:24:e0:3e:f7:2e:1e:
f7:e8:67:51:fb:3a:2a:a3:aa:7c:61:6d:80:51:51:
53:06:99:81:58:12:a4:79:dc:4d:9a:f4:e6:10:0a:
2c:c7:15:66:8f:01:2e:e8:78:37:5a:e8:28:ba:1f:
d1:86:8b:a5:71:3f:56:7d:41:41:d1:97:ac:cc:b3:
ac:a4:53:46:e9:7b:0a:c9:dd:95:0d:49:34:8e:1b:
bb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:78:4F:23:1E:07:43:B9:54:62:56:85:B5:E5:59:93:8F:B3:F3:C0
X509v3 Authority Key Identifier:
keyid:97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:40:c3:25:23:bd:db:35:4f:57:e8:1c:57:d0:df:87:b9:b0:
d2:5c:27:c3:22:8c:46:30:9e:16:a8:c3:7f:1b:d0:d7:4d:70:
8c:9a:55:c2:d6:f5:5a:ae:8b:3c:db:55:7d:26:38:71:14:3e:
cb:ad:1c:92:9c:4e:13:f9:0a:32:11:53:28:22:20:f7:a3:35:
ee:6e:fe:82:a9:e3:39:40:ac:26:f2:1d:7a:85:a4:7d:90:58:
69:01:ab:a8:15:40:f5:c9:fd:d6:48:3e:9a:e2:21:e3:53:02:
5c:ff:7d:13:36:6a:b7:17:e1:09:b7:1a:cd:e9:0e:81:0c:d6:
c3:6c:01:dd:01:95:a5:62:5f:16:bc:0b:d8:5c:f5:8c:cf:eb:
99:05:8a:bc:97:40:ad:e7:08:48:34:ed:a4:ec:28:94:d5:d3:
ec:1b:da:02:a7:c4:18:d0:20:fe:78:7d:f5:be:32:ed:c3:11:
8c:69:32:bf:7b:9f:f3:dd:f1:5a:7a:02:d7:21:81:5f:1d:60:
37:f2:80:8e:bf:e6:ec:c9:85:af:81:72:b5:4a:ff:a6:b3:48:
b2:29:2b:7e:8a:80:6b:e2:09:25:f7:a1:c6:45:f0:be:8c:cf:
f5:75:f2:fc:32:a6:97:bc:ee:a9:46:82:88:e9:eb:8f:90:47:
99:cf:2c:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0AFDDXZWNAzAQR6xJDj0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MWE3OTljNmE2NjM0MzlkNzQ0NTBkZmIzODk5MzU3MWY5
OGUxNWQwHhcNMjYwNzI4MTMwMDMxWhcNMjYwNzI5MTMwMDMxWjAzMTEwLwYDVQQD
EyhjNzc4NGYyMzFlMDc0M2I5NTQ2MjU2ODViNWU1NTk5MzhmYjNmM2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjc64ZY58QhQ0Qv1BjyJEy8sddBM
hzqL7P8bSVgxsFRDKblmt5ytYMKVybq9iayr/DOqMpBWuojxY55L3Wk/4lcoijbZ
ERFGzsTp3CdqBHVG/TIGiFPtwJJtzJyUamhyZSVoY6HEt1XmmC2jA9ecU3v6JhC9
3xYA07A3ddpKlQ05SLs3b5cikgZYgxyACXiOPSuUmNA2QQxnnzOSRTbMxreCnlhv
GPRFhLkgxIAk4D73Lh736GdR+zoqo6p8YW2AUVFTBpmBWBKkedxNmvTmEAosxxVm
jwEu6Hg3Wugouh/RhoulcT9WfUFB0ZeszLOspFNG6XsKyd2VDUk0jhu7FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMd4TyMeB0O5VGJWhbXlWZOPs/PAMB8GA1UdIwQY
MBaAFJcaeZxqZjQ510RQ37OJk1cfmOFdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhwNW5HcG1ORG5YUkZEZnM0bVRWeC1ZNFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS84ZTRiZGMtZTZlYi00MjA4LTliMTMt
YTJlZmFlM2Y5Y2FiLzEvbHhwNW5HcG1ORG5YUkZEZnM0bVRWeC1ZNFYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS84ZTRiZGMtZTZlYi00MjA4LTliMTMtYTJlZmFlM2Y5Y2Fi
LzEvbHhwNW5HcG1ORG5YUkZEZnM0bVRWeC1ZNFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkDDJSO9
2zVPV+gcV9Dfh7mw0lwnwyKMRjCeFqjDfxvQ101wjJpVwtb1Wq6LPNtVfSY4cRQ+
y60ckpxOE/kKMhFTKCIg96M17m7+gqnjOUCsJvIdeoWkfZBYaQGrqBVA9cn91kg+
muIh41MCXP99EzZqtxfhCbcazekOgQzWw2wB3QGVpWJfFrwL2Fz1jM/rmQWKvJdA
recISDTtpOwolNXT7BvaAqfEGNAg/nh99b4y7cMRjGkyv3uf893xWnoC1yGBXx1g
N/KAjr/m7MmFr4FytUr/prNIsikrfoqAa+IJJfehxkXwvozP9XXy/DKml7zuqUaC
iOnrj5BHmc8sGQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:08:12 2026 by rpki-client