
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
File: lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json)
Hash identifier: puGbyVcehNYNKrHmUJlcEwdtDx1+7mMFLcHdMtmV4MM=
Subject key identifier: A3:EB:76:34:E0:42:D8:D8:62:57:F5:09:8C:1E:6A:1E:E9:C2:6D:6A
Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
Certificate issuer: /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Certificate serial: 019EC1EDB3C0B61C507150E24E3B42E6FBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 17:00:41 +0000
Manifest this update: Sat 13 Jun 2026 17:00:41 +0000
Manifest next update: Sun 14 Jun 2026 17:00:41 +0000
Files and hashes: 1: ZF0nGmPtxtkDUZtYeSMT07Pwz_c.roa (hash: q2DrD4GQJdtgGN/2Czf9hDRS5eBg2LiwOsSKK4NE0Ks=)
2: k6BAsgY_7U_KIwQG-JQSaHDxB9c.roa (hash: mykJoSrib037xaFcqg06p/Ay95dFVkUOY6oQwzMXt3Y=)
3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: Fdbs1/MtNkaX9QiC8nVUS8qMAO49QBw2vZj1L0zaR7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:b3:c0:b6:1c:50:71:50:e2:4e:3b:42:e6:fb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Validity
Not Before: Jun 13 17:00:41 2026 GMT
Not After : Jun 14 17:00:41 2026 GMT
Subject: CN=a3eb7634e042d8d86257f5098c1e6a1ee9c26d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:94:8d:0f:4a:ba:c4:a8:e0:cf:ba:83:19:a1:
a2:fc:6f:a6:95:a0:af:d6:c8:e2:fe:72:87:82:25:
f4:bd:87:d4:fd:fd:69:8c:7d:1c:05:34:92:01:fa:
18:31:e3:1a:0a:19:f9:16:8c:ab:0f:cb:3a:9d:ca:
98:a5:05:64:13:06:db:d0:bd:e5:87:fd:8a:e0:a8:
be:96:c6:e4:94:4d:91:c5:87:85:ff:cb:b0:1a:6f:
a7:b2:bf:c5:85:6c:32:e9:65:ab:96:62:9b:aa:41:
49:0d:a4:02:5c:3a:04:bd:a7:3f:a9:cc:2d:35:ba:
37:a1:5b:d5:e9:40:76:0d:80:70:35:e7:03:76:98:
55:91:48:e0:75:fc:75:8a:bc:91:e3:e8:28:2d:7d:
fe:e3:94:8e:2d:df:ec:ba:42:92:55:4c:d7:4e:11:
3b:17:fc:b0:b2:a2:eb:ea:88:13:1b:de:a0:32:8a:
a1:a6:61:d5:52:55:f3:93:ec:86:01:c7:32:68:33:
00:da:75:36:f3:7e:ae:91:fa:29:95:27:34:e8:a4:
33:24:38:9c:cb:23:30:79:74:04:3a:19:6c:13:48:
a1:05:46:07:d8:c5:5a:a1:2d:33:7d:72:9d:bc:e7:
22:9a:d1:07:e8:81:d3:48:33:7d:31:58:50:78:74:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EB:76:34:E0:42:D8:D8:62:57:F5:09:8C:1E:6A:1E:E9:C2:6D:6A
X509v3 Authority Key Identifier:
keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:34:c8:4a:68:3f:3f:ba:47:7d:1b:d5:9c:9a:65:0a:5e:ca:
52:74:ba:25:57:97:eb:ab:63:36:28:5c:cc:74:49:50:d1:e2:
43:48:af:22:46:49:09:96:db:41:5b:3f:1f:2e:a6:78:8e:76:
7f:04:8f:9d:59:41:34:4e:ef:ef:38:fc:82:91:99:23:4e:49:
74:8d:c4:e0:73:c1:e4:98:de:d1:2d:26:f2:71:76:9d:79:43:
8e:4e:11:ee:36:9c:36:b5:fe:d7:e1:ee:50:77:bd:ed:53:7c:
19:ba:30:6b:ca:44:73:c2:4c:e4:1b:9f:15:78:35:41:b1:17:
85:aa:43:6d:2c:26:94:2f:c0:86:3a:62:ab:94:34:8e:da:ca:
14:3e:e8:b1:e0:b6:89:82:ac:84:2c:64:88:8a:71:51:9b:69:
7b:62:af:b2:1f:b9:28:50:35:00:e0:3f:c6:63:5a:38:72:e1:
93:00:b7:46:a5:36:d0:db:b1:2c:fc:f2:d9:29:3e:85:8c:c9:
9f:fc:ae:ec:61:0b:9c:f9:6a:78:86:70:c2:15:0f:a6:c9:3e:
8c:e2:d0:f0:e8:3e:0f:26:e7:65:57:33:4e:ac:28:b6:d2:2b:
85:11:ff:39:3d:39:47:bd:27:aa:3b:4c:1b:c3:a2:73:98:8a:
e7:df:37:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:30:06 2026 by rpki-client