Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
File: lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json)
Hash identifier: Ns6KztbiNT7juwdeo8mcoBgriJhEeXPTNR+C3mDEoDY=
Subject key identifier: 16:48:D5:35:3E:E2:8E:80:4C:67:E8:3B:9A:5E:22:61:EB:89:93:19
Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
Certificate issuer: /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Certificate serial: 019D9A74AC105252F8F04DE09E5BC622F367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 08:00:30 +0000
Manifest this update: Fri 17 Apr 2026 08:00:30 +0000
Manifest next update: Sat 18 Apr 2026 08:00:30 +0000
Files and hashes: 1: ZF0nGmPtxtkDUZtYeSMT07Pwz_c.roa (hash: q2DrD4GQJdtgGN/2Czf9hDRS5eBg2LiwOsSKK4NE0Ks=)
2: k6BAsgY_7U_KIwQG-JQSaHDxB9c.roa (hash: mykJoSrib037xaFcqg06p/Ay95dFVkUOY6oQwzMXt3Y=)
3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: ia4v21abZSel+3IQVnMF91pEoWjGW39n3znzauZCmeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:ac:10:52:52:f8:f0:4d:e0:9e:5b:c6:22:f3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Validity
Not Before: Apr 17 08:00:30 2026 GMT
Not After : Apr 18 08:00:30 2026 GMT
Subject: CN=1648d5353ee28e804c67e83b9a5e2261eb899319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:32:f3:1e:1c:80:c8:32:63:2b:e1:bb:76:09:
2b:6a:24:2c:17:89:89:8e:60:46:4c:80:6e:85:e1:
ba:e5:36:10:64:57:21:74:48:2c:6d:66:b8:fd:2b:
ea:24:93:25:4f:e9:bc:82:b2:b4:87:34:33:01:c7:
c1:ac:37:cf:7c:27:fd:ad:8f:0b:0b:fa:b3:48:2f:
f3:1f:87:ed:0b:b5:28:52:5f:80:d8:44:ef:76:e0:
f9:8f:1c:87:88:62:42:94:a3:7f:84:30:cf:60:9a:
da:c4:33:bb:71:72:08:80:26:cf:04:ea:39:07:8b:
40:d9:6e:09:cf:cb:c7:f6:29:ba:3e:14:27:33:d7:
56:a3:01:10:e7:f5:27:3e:31:e4:a0:8e:8a:2a:14:
f1:42:a5:46:83:e0:a1:9a:8a:86:f4:4e:7d:2d:e9:
49:90:79:5c:99:85:f4:d6:83:35:48:bc:15:cc:32:
bb:69:1a:f2:28:54:36:65:98:ef:ee:e3:02:38:2a:
b3:cc:f5:a4:0a:d0:0c:3e:08:b7:70:39:68:60:80:
68:2d:c3:e9:c2:ac:d5:af:c9:7d:53:84:ab:dd:5c:
17:5b:d4:c2:90:7c:27:89:70:fa:b2:a1:2f:bd:b4:
61:8d:1a:5b:05:e6:e8:5c:32:27:4e:83:d1:26:e7:
97:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:48:D5:35:3E:E2:8E:80:4C:67:E8:3B:9A:5E:22:61:EB:89:93:19
X509v3 Authority Key Identifier:
keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ca:b8:f1:be:3f:c2:cb:05:27:d5:10:f9:ac:61:3a:a3:41:
65:0b:1c:ec:aa:c3:ef:e5:b9:f0:08:4d:7e:f2:89:fc:0b:da:
32:f6:00:7a:32:4e:de:ea:73:21:83:f7:91:50:b2:45:7b:32:
e5:11:e2:1f:a7:2f:84:e4:7c:3b:4b:41:68:1f:cd:d1:03:e7:
e3:d5:bf:9e:cc:40:33:01:52:df:21:9a:92:6c:e7:74:d0:a0:
b6:d6:eb:f8:0d:85:2a:3f:37:c3:8c:a8:68:74:88:8f:86:a5:
a2:8b:fb:25:8a:95:07:56:a8:50:1a:e4:7d:bc:bd:a1:50:3a:
4f:48:6b:0a:6a:8d:4b:10:c9:49:e8:7e:26:11:56:cd:d3:24:
33:67:89:1f:d8:4d:98:e0:c2:d5:fd:13:7f:23:b1:65:43:72:
5d:49:e6:b3:a3:2a:cf:bc:24:87:6d:19:2f:7f:5d:98:26:01:
c6:a7:56:54:f7:63:2f:fe:a3:f9:6f:98:e9:0b:7f:48:2e:22:
cf:c7:5e:48:2b:81:49:dd:65:fc:d6:b8:c8:0f:a7:83:32:95:
b5:30:8c:03:4f:dd:47:0c:8b:2a:19:56:58:7d:f3:fb:54:1a:
16:92:e5:5b:db:1f:ff:14:96:1d:17:7b:3c:b6:fa:39:2a:97:
38:d5:27:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adKwQUlL48E3gnlvGIvNnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MWE2Y2JiMmRmNmU3ZmFjY2M1ODUzYmE1NDAwZjFmNDcw
ZWFiMTYwHhcNMjYwNDE3MDgwMDMwWhcNMjYwNDE4MDgwMDMwWjAzMTEwLwYDVQQD
EygxNjQ4ZDUzNTNlZTI4ZTgwNGM2N2U4M2I5YTVlMjI2MWViODk5MzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjLzHhyAyDJjK+G7dgkraiQsF4mJ
jmBGTIBuheG65TYQZFchdEgsbWa4/SvqJJMlT+m8grK0hzQzAcfBrDfPfCf9rY8L
C/qzSC/zH4ftC7UoUl+A2ETvduD5jxyHiGJClKN/hDDPYJraxDO7cXIIgCbPBOo5
B4tA2W4Jz8vH9im6PhQnM9dWowEQ5/UnPjHkoI6KKhTxQqVGg+ChmoqG9E59LelJ
kHlcmYX01oM1SLwVzDK7aRryKFQ2ZZjv7uMCOCqzzPWkCtAMPgi3cDloYIBoLcPp
wqzVr8l9U4Sr3VwXW9TCkHwniXD6sqEvvbRhjRpbBeboXDInToPRJueXmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZI1TU+4o6ATGfoO5peImHriZMZMB8GA1UdIwQY
MBaAFJcabLst9uf6zMWFO6VADx9HDqsWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83ZDNmMDAtZDQ4Yy00MTZmLTkxOWUt
ZGMwMzg5ZjkxNjdkLzEvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS83ZDNmMDAtZDQ4Yy00MTZmLTkxOWUtZGMwMzg5ZjkxNjdk
LzEvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMq48b4/
wssFJ9UQ+axhOqNBZQsc7KrD7+W58AhNfvKJ/AvaMvYAejJO3upzIYP3kVCyRXsy
5RHiH6cvhOR8O0tBaB/N0QPn49W/nsxAMwFS3yGakmzndNCgttbr+A2FKj83w4yo
aHSIj4aloov7JYqVB1aoUBrkfby9oVA6T0hrCmqNSxDJSeh+JhFWzdMkM2eJH9hN
mODC1f0TfyOxZUNyXUnms6Mqz7wkh20ZL39dmCYBxqdWVPdjL/6j+W+Y6Qt/SC4i
z8deSCuBSd1l/Na4yA+ngzKVtTCMA0/dRwyLKhlWWH3z+1QaFpLlW9sf/xSWHRd7
PLb6OSqXONUnjA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:56:50 2026 by rpki-client