Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft
File: LXjkrg653KxiXZEGzohcW0mAddc.mft (raw, json)
Hash identifier: LGhwWN+eyM/3PJuMdYN1mxss7kokwtE03TZyN7MzX94=
Subject key identifier: A0:00:B0:76:48:F7:F1:6D:6F:AB:B0:AD:51:4B:84:1E:EE:DD:39:24
Authority key identifier: 2D:78:E4:AE:0E:B9:DC:AC:62:5D:91:06:CE:88:5C:5B:49:80:75:D7
Certificate issuer: /CN=2d78e4ae0eb9dcac625d9106ce885c5b498075d7
Certificate serial: 019DA41D3033ACA784191053292463F86046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft
Manifest number: 0229
Signing time: Sun 19 Apr 2026 05:01:09 +0000
Manifest this update: Sun 19 Apr 2026 05:01:09 +0000
Manifest next update: Mon 20 Apr 2026 05:01:09 +0000
Files and hashes: 1: 55_ifAwTrqSRB0aOLB49nTVctSI.roa (hash: 4G0y1MW280JpB4GB7lc4Qiad6u1T/uOmjGofSaEn2fo=)
2: LXjkrg653KxiXZEGzohcW0mAddc.crl (hash: tWwq7cqYFau2qUp5UUAE0L2Ge7We25vOqUtZUvLra+8=)
3: O7uwantDjntNvlRH8RUE6UKocdY.roa (hash: TDMoKyC/SFI/TVzEIonzTVVbB4aesDSgkumTRMLegVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:30:33:ac:a7:84:19:10:53:29:24:63:f8:60:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d78e4ae0eb9dcac625d9106ce885c5b498075d7
Validity
Not Before: Apr 19 05:01:09 2026 GMT
Not After : Apr 20 05:01:09 2026 GMT
Subject: CN=a000b07648f7f16d6fabb0ad514b841eeedd3924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0e:2b:1c:2e:bd:ab:e1:f7:04:1d:48:cd:c3:
83:41:3a:97:d3:51:5a:af:c2:17:e4:de:27:8d:c4:
50:61:8d:76:3a:c0:aa:01:45:3f:6e:f0:1a:f7:65:
f4:f3:2e:4c:23:7e:61:eb:30:3d:12:c8:94:09:38:
7a:2d:fa:86:f8:2c:81:7c:50:5b:03:3f:1d:63:54:
5f:c5:fe:1f:ab:5f:d1:6d:f9:5d:15:e4:4f:24:e5:
e8:67:1f:a6:b3:83:77:2f:92:24:d1:30:81:fd:5b:
18:bb:f0:85:29:d0:08:d2:78:40:67:71:6a:ad:d0:
4e:47:ea:66:c9:32:16:99:8a:59:43:86:09:32:91:
7a:c8:eb:3e:7d:f1:bf:1e:c8:8d:2e:7a:f2:bd:dc:
2d:81:14:bb:35:2b:83:8c:e9:32:b5:60:8a:70:18:
01:1e:9d:bd:84:48:de:a2:78:74:6c:93:b3:18:77:
08:73:5c:92:9c:a6:00:10:11:9e:fb:7e:0f:1d:28:
d2:4b:f8:38:5f:9f:5d:eb:7f:13:42:39:80:aa:13:
f1:5d:8b:df:e2:ff:fd:ab:e6:78:28:3a:72:52:70:
f1:68:f5:09:e1:37:97:5e:44:bd:04:4c:40:1d:34:
f6:2a:13:f3:24:88:6c:ef:8a:a8:69:b6:68:af:98:
8b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:00:B0:76:48:F7:F1:6D:6F:AB:B0:AD:51:4B:84:1E:EE:DD:39:24
X509v3 Authority Key Identifier:
keyid:2D:78:E4:AE:0E:B9:DC:AC:62:5D:91:06:CE:88:5C:5B:49:80:75:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fb:ef:de:d6:8c:fd:5e:69:7f:0d:ec:1d:8e:a7:db:47:9f:
8a:3a:ca:07:d6:70:6f:f3:97:6e:d3:df:67:fc:54:62:0b:7a:
6e:e5:62:cd:a0:4e:fa:42:2e:2a:10:c1:e4:77:c8:ff:71:1f:
56:ff:61:c2:f6:45:82:6f:6f:79:11:92:5a:a5:61:1f:97:fb:
11:cd:29:5f:53:ef:cf:63:9f:ba:61:69:1e:61:bd:a4:bc:c4:
9d:83:64:fc:71:5f:15:4a:77:f6:35:a0:ca:ee:13:76:06:c9:
04:f3:5c:39:db:7a:4f:b4:93:9e:b1:f5:bc:fd:de:c5:c6:0d:
f4:8d:7e:5d:6d:c2:21:f7:7c:30:13:9b:f5:ac:a7:dc:20:e5:
5c:f4:53:ff:05:96:1b:65:0b:e4:ac:22:67:58:ec:8c:e8:8b:
28:e6:a0:1a:1e:9d:b1:d4:61:ec:9a:8c:c6:ca:5f:d1:55:c5:
fc:61:76:84:35:85:fe:7a:af:6e:64:6c:20:1b:67:bd:6d:30:
76:8a:5e:cf:cf:d6:03:ac:d6:1d:5e:61:e5:26:a8:ac:ba:39:
a2:86:ac:eb:80:25:17:8e:f2:b4:c5:f1:98:97:c7:26:1e:2c:
5a:e4:b6:18:30:5f:5f:41:84:20:06:26:91:9f:22:62:ca:39:
b9:95:57:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:12:08 2026 by rpki-client