Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
File: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft (raw, json)
Hash identifier: UGT0i6dIxFoDxGrvf7cD1QDOrnPwqwt+GOiEk9CHh58=
Subject key identifier: 31:93:44:0B:61:A6:B5:05:2B:0C:7C:7C:1E:45:A3:E6:39:92:85:77
Authority key identifier: 97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
Certificate issuer: /CN=971a799c6a663439d74450dfb38993571f98e15d
Certificate serial: 019CAA59197B8EA92346516E4D7000FE1117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 17:01:31 +0000
Manifest this update: Sun 01 Mar 2026 17:01:31 +0000
Manifest next update: Mon 02 Mar 2026 17:01:31 +0000
Files and hashes: 1: ElmE07kq9LxUDEmmTyOo1MIpVtU.roa (hash: IMhS3Hg31zsSt4C+dpnb7kVneJ7jUTvLYNSo6j8gQwI=)
2: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl (hash: fwNfBBb5/dfthFYxW9kuhd9/kapU/guC89d5nAwdmJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:19:7b:8e:a9:23:46:51:6e:4d:70:00:fe:11:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a799c6a663439d74450dfb38993571f98e15d
Validity
Not Before: Mar 1 17:01:31 2026 GMT
Not After : Mar 2 17:01:31 2026 GMT
Subject: CN=3193440b61a6b5052b0c7c7c1e45a3e639928577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:32:d9:ff:50:90:08:1c:23:0d:74:7a:83:
34:c9:4d:7b:94:08:ce:16:43:92:1d:c6:8c:cf:a5:
d0:c2:4b:41:c8:b1:b9:70:90:2f:f6:bb:ea:d0:98:
11:e6:ba:28:a0:47:c0:c1:c1:1f:94:4d:aa:16:a0:
ad:d9:d4:09:37:70:6a:1c:b3:d2:3f:99:7e:b9:30:
e9:4e:5c:ee:10:a1:6e:cb:ba:a3:d3:ab:9d:2b:4a:
ef:b2:b6:70:69:b5:a3:2c:28:a6:9e:3f:78:e0:9e:
b6:60:34:88:9f:e1:bf:bd:35:35:b8:39:56:72:02:
8f:7e:a6:7d:fb:db:ea:6d:ed:33:a5:f8:ad:13:d6:
38:d4:15:10:ba:53:25:25:7c:ed:84:5f:fd:66:51:
fc:42:6e:14:5b:06:3d:84:d1:7c:fb:37:7b:3b:cd:
3d:e1:08:11:45:46:47:4b:d3:11:34:21:7d:8d:65:
82:35:fe:a4:b9:d9:0a:84:26:ec:8d:b7:b8:9f:a2:
64:81:73:97:ac:b3:23:fe:e6:ed:0d:45:9c:8c:a0:
c6:4f:0a:93:b6:dd:e6:e6:12:bb:cd:80:fc:23:e5:
cf:0b:e0:ed:b2:35:8e:31:b2:3b:a5:8b:a1:c3:09:
6c:63:0e:39:94:6a:32:12:07:c1:44:3d:49:32:bc:
f6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:93:44:0B:61:A6:B5:05:2B:0C:7C:7C:1E:45:A3:E6:39:92:85:77
X509v3 Authority Key Identifier:
keyid:97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:3b:12:88:21:c1:0f:19:1c:76:79:cc:29:e3:4f:e3:35:b3:
8c:0f:7f:2f:25:c3:37:32:3e:99:6a:91:02:f3:4d:c6:69:ba:
f5:f6:0b:0c:ff:8b:b3:6c:62:45:2e:53:7d:dd:f2:a8:6c:65:
14:d4:53:c8:3a:ba:46:f3:28:40:41:6f:12:ec:61:17:b0:fe:
d8:12:41:16:17:4c:df:6a:2c:a5:e1:4f:97:fd:8f:3e:ca:78:
1f:88:5f:f2:44:a6:48:05:37:39:ca:1c:08:ed:f1:17:97:c8:
b8:e3:35:dd:60:bc:15:7d:b0:0c:5a:00:a3:7c:e0:1e:1e:07:
fe:79:e1:ef:59:23:c8:3d:6e:8b:5f:86:80:d6:d9:7c:ec:22:
04:92:c6:79:61:ae:c4:ca:82:12:e4:b9:df:fe:d8:36:5c:14:
62:82:f1:5c:e4:0d:87:19:0e:8d:4c:30:3a:9c:7a:8b:0f:8a:
8e:98:be:c3:81:04:43:62:e6:18:11:db:4c:69:27:3b:03:26:
bf:a6:86:3b:6a:af:d4:2e:01:a5:7f:f6:7e:0f:46:e0:b3:70:
42:0b:a5:0f:64:65:cd:c4:2a:40:ea:3d:36:a2:96:b7:6a:61:
2c:6c:44:53:67:dc:7e:d3:b4:fd:59:a5:8e:3c:a3:58:66:df:
c8:0d:3c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:56:22 2026 by rpki-client