Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
File: lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json)
Hash identifier: k4E487rJIzNN79HrKVk7kj29SuWBodct/E2s1d1K7xg=
Subject key identifier: CA:53:A1:39:F4:D5:71:BD:D7:9F:88:46:FA:7C:75:D8:8B:B0:E2:4B
Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
Certificate issuer: /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Certificate serial: 01A12FC5C01C0812CD5C37E2C327F19AD334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
Manifest number: 1A9F
Signing time: Mon 12 Oct 2026 11:00:51 +0000
Manifest this update: Mon 12 Oct 2026 11:00:51 +0000
Manifest next update: Tue 13 Oct 2026 11:00:51 +0000
Files and hashes: 1: ZF0nGmPtxtkDUZtYeSMT07Pwz_c.roa (hash: q2DrD4GQJdtgGN/2Czf9hDRS5eBg2LiwOsSKK4NE0Ks=)
2: k6BAsgY_7U_KIwQG-JQSaHDxB9c.roa (hash: mykJoSrib037xaFcqg06p/Ay95dFVkUOY6oQwzMXt3Y=)
3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: h6bSVHUw8mDWx4Ow0sLDHly5nfSpUVTFSKhn6gy2HJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:c5:c0:1c:08:12:cd:5c:37:e2:c3:27:f1:9a:d3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Validity
Not Before: Oct 12 11:00:51 2026 GMT
Not After : Oct 13 11:00:51 2026 GMT
Subject: CN=ca53a139f4d571bdd79f8846fa7c75d88bb0e24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:19:b2:35:21:38:0f:7c:24:2e:44:13:8e:a5:
d6:a4:ff:64:a0:65:ae:b8:15:54:60:ad:c0:c9:13:
6b:be:51:86:d8:cc:8c:ad:78:58:e3:c0:56:3e:8b:
c8:72:a1:2f:98:b9:5d:8e:ad:88:24:19:61:b5:d5:
00:ca:d4:89:0a:a0:c3:b5:87:10:25:e2:e4:af:fe:
14:c0:79:dd:04:5d:44:7c:91:dc:aa:88:9e:46:91:
3d:59:a1:af:d1:ec:d3:7b:61:0d:6e:18:d5:46:f6:
de:e9:fa:fc:dd:d4:37:aa:46:28:f5:4c:a2:52:3f:
20:6a:1b:f7:6c:91:74:c4:23:5d:74:e1:ba:08:3f:
e6:da:89:47:22:8c:92:ac:0c:37:0e:3b:ed:1f:6a:
c1:3c:81:5a:47:8b:3b:3f:3f:1c:ba:22:a8:99:fc:
c5:df:a4:2e:38:78:78:3f:cc:17:88:65:f0:1c:b1:
50:73:3d:60:a0:76:c8:05:ac:66:0b:c8:c4:06:57:
28:bf:59:10:9d:bd:ee:54:e1:87:a4:6e:9a:a4:41:
41:8f:d6:7a:97:09:c8:d3:c0:24:7a:c3:39:fc:4f:
4d:b8:b2:ff:60:64:29:5d:3b:49:eb:c8:80:22:68:
5a:7f:16:7e:d5:da:8c:65:4e:a0:88:cf:10:44:ca:
35:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:53:A1:39:F4:D5:71:BD:D7:9F:88:46:FA:7C:75:D8:8B:B0:E2:4B
X509v3 Authority Key Identifier:
keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:0e:a2:ef:15:55:46:38:9a:ea:ab:00:09:17:51:d6:2e:21:
b9:9e:1a:a0:a6:1c:37:2a:40:0f:87:5c:53:89:55:ca:bd:c7:
bd:42:6b:e9:a5:22:95:81:f9:31:05:bb:77:a6:db:de:d2:fb:
07:ba:63:10:0e:de:f3:93:f1:58:55:5d:12:f7:53:6b:1c:10:
13:b1:26:c8:0f:dd:1c:a2:84:72:39:03:d6:86:11:b9:89:96:
dd:6e:5e:a9:d7:56:b2:e1:11:7a:b4:95:e2:53:e8:43:cb:81:
d9:66:a7:bd:b1:e0:5e:c0:da:90:c5:9a:d5:77:9e:3f:89:e1:
29:7e:9f:3d:dd:24:f1:d0:fc:19:2d:5e:27:7f:26:a8:94:a5:
3f:c2:ec:b1:fb:85:2d:6a:d3:00:8a:4c:e1:e6:d9:91:d8:67:
c1:db:87:cd:bd:f9:9a:01:f5:52:f1:1f:1d:58:bd:89:15:91:
00:31:6c:df:e3:3a:01:63:b6:2a:29:47:3a:18:39:f9:eb:19:
11:1f:7a:b7:1f:e6:a7:35:6b:6f:1f:3d:94:76:b3:92:2b:70:
e0:fe:e6:08:68:3c:63:de:96:7b:99:11:74:49:bb:43:77:d8:
03:43:2f:a6:2d:d2:56:7d:48:10:76:a9:09:09:b8:35:ea:83:
a6:7b:45:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:18:20 2026 by rpki-client