Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
File: lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json)
Hash identifier: wKfzHW5TPmZCTUg1KREJ1j+MGBSS1yCGuvnvHG2+pPY=
Subject key identifier: A7:AC:2D:2A:6E:30:F3:80:2B:13:85:C4:A7:36:CE:F8:C1:AC:24:3C
Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
Certificate issuer: /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Certificate serial: 019FAB9A4E736FFEAF761A1475933EF9E20B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 02:00:44 +0000
Manifest this update: Wed 29 Jul 2026 02:00:44 +0000
Manifest next update: Thu 30 Jul 2026 02:00:44 +0000
Files and hashes: 1: ZF0nGmPtxtkDUZtYeSMT07Pwz_c.roa (hash: q2DrD4GQJdtgGN/2Czf9hDRS5eBg2LiwOsSKK4NE0Ks=)
2: k6BAsgY_7U_KIwQG-JQSaHDxB9c.roa (hash: mykJoSrib037xaFcqg06p/Ay95dFVkUOY6oQwzMXt3Y=)
3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: 1nYKSQNRHbk9xB6o5JuvGmJAWbMIygB4WjiSxuZ8gjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:4e:73:6f:fe:af:76:1a:14:75:93:3e:f9:e2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Validity
Not Before: Jul 29 02:00:44 2026 GMT
Not After : Jul 30 02:00:44 2026 GMT
Subject: CN=a7ac2d2a6e30f3802b1385c4a736cef8c1ac243c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d0:fd:9f:8e:7e:22:cc:66:f0:bc:a1:9c:bd:
cb:2e:01:cc:82:73:12:28:98:aa:64:fd:a5:d9:0a:
46:1e:04:b9:0a:95:88:ea:19:58:38:50:16:18:f9:
16:ff:ad:4b:3a:85:26:37:9e:6c:41:5d:9c:85:ff:
0a:e9:db:a8:fa:38:2b:d0:d1:78:51:85:46:d9:c8:
f0:94:6a:00:ec:99:e7:f3:60:78:4a:03:92:d0:59:
c8:03:b9:7f:50:6a:54:70:57:c1:54:7c:c7:2d:4e:
e2:75:8e:c4:7b:21:31:43:86:8a:69:09:68:1f:62:
6c:77:b3:47:72:99:60:86:95:f0:70:78:45:24:97:
8b:a3:72:a1:4f:1e:88:a0:89:aa:22:0c:17:b6:9b:
74:80:e9:7c:6e:5b:c3:ce:03:29:35:5a:56:cc:8b:
f7:ab:5e:5a:19:8d:05:32:4e:af:d2:dc:59:4a:f2:
e2:83:08:3c:2b:91:5e:46:ff:b7:68:c2:30:b7:cf:
d0:41:d2:07:24:db:c2:17:42:94:e0:ef:3a:41:8c:
b8:f9:be:7a:af:ce:d1:d8:dd:d8:99:95:d0:89:73:
b2:89:1f:08:74:92:e7:ac:55:f6:12:3f:1c:09:a9:
b3:16:35:df:c7:9a:89:61:fc:29:c9:35:3e:4d:ef:
41:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AC:2D:2A:6E:30:F3:80:2B:13:85:C4:A7:36:CE:F8:C1:AC:24:3C
X509v3 Authority Key Identifier:
keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:08:88:b9:2c:4e:f2:b7:5b:29:f4:61:70:ad:58:8b:64:89:
aa:f9:61:1a:37:83:4d:9c:9b:30:5a:47:19:52:f9:48:a1:c7:
64:2a:39:b2:bb:77:74:cd:e4:f6:a1:40:e3:0b:29:75:51:49:
ca:1d:3f:18:b6:64:95:3f:ef:b9:17:8f:46:57:6e:c9:e7:8d:
22:a1:00:ca:1d:95:3c:6f:2b:29:31:15:c5:8c:cb:47:f7:2f:
c4:f4:9c:63:29:78:e4:b4:a6:9c:ef:22:df:08:8f:d0:e4:e8:
40:b1:c8:d4:5b:85:3a:a6:54:8d:b0:a3:2e:65:48:ad:ea:79:
40:0b:de:03:f4:01:b2:b9:9c:b4:de:20:91:75:d7:02:26:dd:
87:c8:f3:cd:c9:cc:91:5d:6a:8b:cf:7a:91:e5:15:0e:ce:ce:
75:6d:b4:0b:8f:82:a3:23:45:ab:f5:c0:d5:ed:e4:8e:e0:f0:
41:c9:7c:77:60:0b:7a:78:bf:c0:33:62:f1:43:3a:39:55:0d:
24:ba:c3:27:af:bb:22:38:a5:24:14:24:10:39:0d:e4:63:ba:
f9:c6:95:94:65:68:0b:f4:05:28:a2:77:6b:90:1a:48:4d:1a:
d2:ec:50:01:90:9f:be:d0:ad:de:e2:ab:5d:c4:b6:d3:b9:35:
38:54:be:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:13:30 2026 by rpki-client