Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
File: LxXXiyVtKEWbhptybyMpSrP_Fz8.mft (raw, json)
Hash identifier: 9fxF82t6uixbhGKlRhoyZ3O8W7bJfDer7KTGGx096EY=
Subject key identifier: 2C:A8:BF:D2:24:9A:92:EA:F2:ED:C9:B2:5F:8F:DE:E1:B7:8E:BE:64
Authority key identifier: 2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F
Certificate issuer: /CN=2f15d78b256d28459b869b726f23294ab3ff173f
Certificate serial: 019D9A3ECA4226895729CA6CB095142018A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
Manifest number: 08E7
Signing time: Fri 17 Apr 2026 07:01:39 +0000
Manifest this update: Fri 17 Apr 2026 07:01:39 +0000
Manifest next update: Sat 18 Apr 2026 07:01:39 +0000
Files and hashes: 1: LxXXiyVtKEWbhptybyMpSrP_Fz8.crl (hash: lTd303BYZ0xdzmGlLZ5SeXyqepq+MkNQnEwd3BfxDMs=)
2: rOf-HDDDWUjLrbyMntCj7Zxr5hQ.roa (hash: nH33C7dbdrbXUnx2qhd+AcU6xtieasJAwf4EGexUyEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:ca:42:26:89:57:29:ca:6c:b0:95:14:20:18:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f15d78b256d28459b869b726f23294ab3ff173f
Validity
Not Before: Apr 17 07:01:39 2026 GMT
Not After : Apr 18 07:01:39 2026 GMT
Subject: CN=2ca8bfd2249a92eaf2edc9b25f8fdee1b78ebe64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:11:b4:09:19:02:20:d3:16:42:05:b4:ba:93:
64:f4:30:a5:0a:1c:9d:32:07:94:fc:6c:aa:bb:6b:
d8:40:93:2c:72:d7:9c:cb:27:b0:e2:eb:2f:bc:68:
e3:5f:16:bf:e6:a3:0c:08:81:3a:41:ed:ac:d2:26:
0b:9c:bd:86:06:20:cf:f7:29:1e:a0:47:df:ed:94:
5f:31:d1:74:9b:2a:5e:e7:f7:6b:d0:12:4e:a1:1b:
53:5e:fe:e2:14:a2:e1:90:19:c5:67:89:db:7c:ec:
5b:ff:29:d8:64:ca:d4:68:e6:22:2e:f1:66:c3:24:
db:8d:fa:50:4d:3e:41:5a:2c:6c:36:3f:6a:a0:23:
ad:92:c6:50:3d:fa:93:bc:57:32:15:02:d4:02:2a:
b6:4d:31:69:5a:72:ab:a9:1d:37:ce:e1:d0:62:3a:
3c:fa:35:c4:4b:ff:0e:21:11:9b:54:ad:08:eb:a9:
69:46:17:4a:e0:e5:e6:55:fb:1d:f7:f8:0a:25:6c:
90:fc:c6:56:57:db:79:fd:13:91:54:a0:59:88:f1:
dc:6d:57:94:f8:64:35:1b:1a:bf:89:c1:14:38:a6:
cc:94:fb:be:a5:90:3b:91:0c:26:0b:7f:15:57:14:
b4:86:6f:59:37:d6:be:96:6d:40:f8:99:27:13:24:
15:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A8:BF:D2:24:9A:92:EA:F2:ED:C9:B2:5F:8F:DE:E1:B7:8E:BE:64
X509v3 Authority Key Identifier:
keyid:2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:dc:1a:d0:e6:3d:45:79:7f:cd:f6:7f:dc:da:01:73:1e:3f:
f5:eb:c1:6f:e7:6a:c0:4a:ab:2c:01:af:5e:d5:3e:65:87:c4:
bc:25:12:23:fe:7a:c9:bd:58:b5:89:ab:51:1f:3e:a0:48:a3:
36:cf:99:a4:fb:6e:6b:ae:c5:6a:1a:de:10:49:30:94:97:98:
70:a8:58:23:9b:14:ec:65:e2:ac:82:c1:41:75:80:08:ae:4b:
db:d9:dc:ac:28:6c:4c:aa:9e:9d:5e:1d:01:70:23:fb:15:fd:
8a:1f:21:0a:13:dc:75:66:dc:e6:ce:00:3b:da:0b:fb:fc:30:
79:a2:93:cd:22:5c:d1:ae:8c:a2:b1:33:13:2e:9a:32:6d:d4:
a2:f7:18:e9:4f:20:90:81:26:a5:5a:30:fb:3c:ee:ff:da:c8:
f7:ca:b9:25:dc:8b:89:f8:4a:16:bf:f7:81:40:0e:0d:61:60:
07:da:b8:9a:4a:3e:4f:52:d7:8f:92:7d:aa:7b:7c:32:2a:07:
12:df:91:4b:47:a6:ee:ab:2a:3c:9a:eb:cf:a1:96:06:8f:ec:
c4:a9:fb:8d:a8:17:7f:4f:cc:6d:0e:2a:ab:ce:14:c9:0c:cf:
86:b2:c8:08:35:8b:42:43:97:1e:43:c4:55:88:11:81:5c:ad:
51:ad:5f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:38:29 2026 by rpki-client