Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
File: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft (raw, json)
Hash identifier: 2PNimrQPFLQWSHZDATPKXeUlbIgng46nBqwSZCWt0S0=
Subject key identifier: F7:D0:AB:D5:3C:2A:E8:74:0C:EF:F4:54:75:08:7E:EA:04:EE:B9:2A
Authority key identifier: 97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
Certificate issuer: /CN=971a799c6a663439d74450dfb38993571f98e15d
Certificate serial: 01A0C6A0A8D8B1C4520E0AB4099133644B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 01:00:12 +0000
Manifest this update: Tue 22 Sep 2026 01:00:12 +0000
Manifest next update: Wed 23 Sep 2026 01:00:12 +0000
Files and hashes: 1: FsdxCBsSPhgrqj2DSICdPcHdelg.asa (hash: eEvqQgi+lzyKHFjO4TryDYnkbMBQ3ARIXRQH0ITgfu4=)
2: dZ_v3Mc_jaWXuBe3BXvQFPLEuQU.roa (hash: QKHkKHHTIdqqahwWOaIvsm5JVVVXqX2D3ZMdSwEaAZk=)
3: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl (hash: 3IPNDHe01OccdhOhEUHZhqb/e5CaN6po5nvxqhf5Hvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a0:a8:d8:b1:c4:52:0e:0a:b4:09:91:33:64:4b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a799c6a663439d74450dfb38993571f98e15d
Validity
Not Before: Sep 22 01:00:12 2026 GMT
Not After : Sep 23 01:00:12 2026 GMT
Subject: CN=f7d0abd53c2ae8740ceff45475087eea04eeb92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:75:a8:96:38:96:38:9a:9d:6b:23:51:8a:17:
2c:f4:a6:e6:13:f9:75:67:ba:ff:3a:1c:62:ec:f6:
6a:c7:7c:02:60:4f:75:f3:86:d3:e2:21:04:66:d4:
23:be:18:17:d7:d3:03:97:65:1b:70:26:b5:3f:e7:
e9:68:4b:3a:95:cf:bc:e0:00:29:eb:c6:d3:78:03:
33:61:8e:77:c9:5c:4c:0c:bb:2b:bb:b3:d0:5f:04:
ae:ce:0b:1e:76:c0:c8:35:7e:5f:7b:0e:f6:d0:e3:
28:00:4e:fd:0b:3a:3c:60:c6:fd:8b:7b:3e:9f:21:
00:64:8d:bc:cb:4e:7b:3d:2b:e1:5a:9e:f7:c1:b6:
88:fa:c9:52:9b:93:82:bd:4a:db:75:02:4e:5e:5d:
6e:31:89:db:98:12:47:e4:1b:8b:bc:55:d3:e2:04:
f4:10:fd:76:70:62:aa:59:f3:2f:f3:cd:a1:d4:ed:
b1:86:d4:a5:f7:4c:04:dd:26:68:40:f4:29:bf:f3:
2c:b0:53:dd:d5:c4:29:cd:8e:4c:cf:eb:f4:59:c7:
ab:2c:81:2e:2b:a2:a1:ca:ad:8d:65:31:fe:6d:28:
da:01:c5:3c:d8:e0:cf:bb:4a:9e:10:59:12:f6:84:
1e:12:4b:4f:47:09:89:53:c0:46:51:60:df:0d:5e:
cb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D0:AB:D5:3C:2A:E8:74:0C:EF:F4:54:75:08:7E:EA:04:EE:B9:2A
X509v3 Authority Key Identifier:
keyid:97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:dc:45:fd:fe:f8:e3:3e:1b:9f:7a:a7:79:77:fb:c6:66:41:
bb:1b:8c:67:b8:71:77:ff:77:67:87:04:36:a8:31:6e:b0:85:
d5:7e:7b:76:6a:0b:f8:e6:af:f1:89:65:ac:90:b1:69:49:0f:
25:f2:15:a9:85:c2:60:74:fd:f7:2a:de:0f:36:d4:88:9b:5d:
7f:bb:5d:2f:34:39:35:80:fa:92:08:5e:2b:23:38:51:eb:ad:
90:bf:2d:bd:16:4d:98:b1:8a:96:7b:0e:00:f3:07:c1:13:4f:
e1:c5:9d:26:c4:db:fa:81:41:0c:5f:f1:6b:de:6c:cd:12:d5:
d3:ab:95:5c:dd:40:75:e6:ec:4a:87:b4:ed:80:57:78:fc:74:
ca:de:f3:40:a6:22:ae:7d:de:a5:3a:59:9c:c6:1d:29:4c:07:
3c:9e:ea:b3:1a:d0:bc:61:52:18:3f:53:54:4d:2c:6c:9c:05:
ff:22:83:23:7a:2c:d8:1f:44:c9:5a:c6:8b:8e:e0:7e:bd:b8:
ee:cc:0e:87:c1:1e:0f:39:da:4b:2f:b1:df:01:e2:65:e2:11:
d5:b7:d0:0e:96:06:f0:d2:f3:85:52:19:34:d3:89:29:bd:13:
51:59:19:f3:19:1e:31:a3:3d:9b:6e:eb:6a:1d:1c:bb:b1:29:
e0:df:c7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:29:56 2026 by rpki-client