Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
File: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft (raw, json)
Hash identifier: 0udZcMit6l/aq7GiLtc6/ff/UFMhAb2HSGBPKvZ6OX8=
Subject key identifier: 4B:F0:11:E3:54:EB:A7:95:A0:83:DD:63:11:62:30:8C:C2:90:61:AD
Authority key identifier: 97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
Certificate issuer: /CN=971a799c6a663439d74450dfb38993571f98e15d
Certificate serial: 01A0C0D587EE9C4328C15CF2A64D74646E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
Manifest number: 1A67
Signing time: Sun 20 Sep 2026 22:00:14 +0000
Manifest this update: Sun 20 Sep 2026 22:00:14 +0000
Manifest next update: Mon 21 Sep 2026 22:00:14 +0000
Files and hashes: 1: FsdxCBsSPhgrqj2DSICdPcHdelg.asa (hash: eEvqQgi+lzyKHFjO4TryDYnkbMBQ3ARIXRQH0ITgfu4=)
2: dZ_v3Mc_jaWXuBe3BXvQFPLEuQU.roa (hash: QKHkKHHTIdqqahwWOaIvsm5JVVVXqX2D3ZMdSwEaAZk=)
3: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl (hash: vHR09zTdipvXKTb+q1do77PlVFrToFbtPPmADhoB45U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 22:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:d5:87:ee:9c:43:28:c1:5c:f2:a6:4d:74:64:6e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a799c6a663439d74450dfb38993571f98e15d
Validity
Not Before: Sep 20 22:00:14 2026 GMT
Not After : Sep 21 22:00:14 2026 GMT
Subject: CN=4bf011e354eba795a083dd631162308cc29061ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:de:64:42:ec:cc:bd:f2:17:4b:24:05:5b:c1:
20:d7:0b:12:49:4f:42:0a:51:b4:07:fc:69:f4:6d:
2d:32:bd:bb:e2:46:fd:76:c0:99:a6:f2:fa:c4:a2:
a4:65:f7:f3:6b:49:de:9d:f8:dd:2e:ab:66:ce:69:
96:a8:2f:f5:44:1a:22:56:fd:c5:42:10:a2:6c:af:
38:a6:15:3c:27:75:c3:d6:9a:2b:35:bf:4f:32:ef:
67:d0:af:db:60:8f:3c:dd:63:f6:a1:75:69:ac:c4:
2d:a7:56:af:c4:d8:5c:64:0e:67:be:d9:c5:d0:aa:
aa:35:0a:20:f3:06:5e:68:13:90:c0:29:8d:4e:7e:
1e:e8:d7:16:5e:72:33:bb:7f:a8:c1:89:70:bd:01:
f4:fd:23:fb:12:86:81:4f:d2:e0:bd:cd:b2:2e:ed:
cf:97:07:ef:e9:c7:ec:d3:7a:be:65:de:ce:7d:40:
23:03:d1:47:c7:2a:33:df:b5:77:f4:dc:ae:f1:91:
c4:7d:51:bf:7b:a5:48:bc:a4:8e:54:46:e8:c0:fe:
21:e9:27:a8:93:a3:dc:c5:e1:62:7b:52:9b:81:32:
b0:76:f4:00:bd:24:61:56:5d:79:6f:8d:48:5d:d5:
fe:b0:10:68:d6:34:82:67:b4:47:c3:56:e8:3d:c5:
75:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F0:11:E3:54:EB:A7:95:A0:83:DD:63:11:62:30:8C:C2:90:61:AD
X509v3 Authority Key Identifier:
keyid:97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e8:2a:87:13:e8:f2:fb:52:17:fc:3b:d9:dc:8d:a6:dc:aa:
eb:c4:f0:4b:16:ce:b8:df:6f:47:2b:7b:97:51:d0:72:c0:f1:
1d:8c:f0:9f:a1:1e:89:25:32:81:3d:7d:61:f1:5b:13:9b:3a:
53:d9:db:3a:5b:16:14:e8:c8:38:15:79:de:29:11:4a:15:68:
0a:d7:e4:35:9e:19:58:d2:c1:bb:75:7c:7c:8e:ca:35:83:51:
e9:d0:3e:41:9a:19:f0:19:a8:56:37:6a:7f:de:e5:c2:2a:3e:
4b:6b:5c:77:d2:88:77:fa:9d:46:a2:c8:2a:e1:f2:e2:3d:d3:
a7:21:85:a5:5c:66:e0:05:92:ea:47:a4:c8:43:36:40:18:61:
e1:e5:d3:51:d5:b8:e6:b8:19:a8:4d:8e:44:44:7d:6d:9c:30:
c1:c0:5d:50:4b:de:a9:8d:e6:68:41:7e:8a:76:2f:4f:a2:ff:
82:e6:19:50:18:a2:af:c8:2a:43:a6:c9:ff:0b:b8:5c:ad:0e:
56:f2:73:84:eb:cd:bb:7b:77:38:8c:07:93:38:09:5e:a7:b5:
51:15:76:a2:90:b6:4e:b5:3b:19:b6:3c:bb:3c:3b:fd:27:4f:
39:47:31:c3:2f:b0:6d:08:bf:8c:88:0b:1f:c3:51:ca:e8:20:
95:12:28:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:19:34 2026 by rpki-client