Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
File: LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft (raw, json)
Hash identifier: pkGpnrTlDpqi69H985CPj+JnY1Is9y32HKX+wmIkZXI=
Subject key identifier: E7:44:4D:F1:77:AC:28:1C:69:BA:B7:1C:9A:D8:64:33:6F:1F:CF:63
Authority key identifier: 2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
Certificate issuer: /CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Certificate serial: 019D98BD91BDF8BED99D1577C87081AEA7C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 00:00:53 +0000
Manifest this update: Fri 17 Apr 2026 00:00:53 +0000
Manifest next update: Sat 18 Apr 2026 00:00:53 +0000
Files and hashes: 1: LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl (hash: kaLKWDRCMn+iz+kxyi0MHHUirJuSw4Skg34QQ7cQ3aY=)
2: xJrl572dGNTyomn-v8TCuFg7I1A.roa (hash: 2x5cy4pJUQbMIYLAtAfVd42ocgzotDRP+XX1VY3Dv3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:91:bd:f8:be:d9:9d:15:77:c8:70:81:ae:a7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Validity
Not Before: Apr 17 00:00:53 2026 GMT
Not After : Apr 18 00:00:53 2026 GMT
Subject: CN=e7444df177ac281c69bab71c9ad864336f1fcf63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6b:e7:6e:34:89:31:82:90:2a:82:6c:6c:69:
a4:3e:6b:a8:43:b9:af:05:5e:aa:bd:cc:b8:14:b3:
2e:0e:5d:32:70:e2:38:50:66:0b:05:6c:0f:2e:e3:
6a:a0:cd:5b:75:32:60:55:df:d3:04:05:60:c9:68:
da:d2:e1:fc:63:3f:93:01:3f:8e:ac:45:a3:36:e8:
33:51:99:0d:7e:09:50:34:fd:fd:08:0e:ba:89:bc:
88:cb:4e:59:26:d9:78:c5:2c:40:fb:cf:bb:6f:6e:
30:da:09:0d:46:a7:dc:54:fe:a5:3d:ef:c1:f2:66:
70:4e:bc:f7:9d:2a:ce:94:77:16:e7:4c:d0:8a:a8:
09:f0:0e:d9:56:82:1a:13:77:9a:40:4e:61:6c:35:
ae:49:ba:63:08:4a:03:cc:15:97:30:9a:64:c9:ad:
8d:22:b7:8a:4c:d2:cd:c6:7e:b3:f0:03:39:66:ba:
82:c0:4c:61:f5:1b:a0:71:50:95:2e:0f:0f:dc:89:
43:30:06:5a:e9:40:04:0c:9f:fc:65:f8:3d:5b:56:
6b:e7:ae:80:f2:d6:13:75:b8:32:56:d5:dd:68:92:
62:3c:c6:f1:ee:19:55:ba:df:df:da:33:bc:93:d3:
ce:c5:88:9f:8c:6e:86:f9:53:ca:b3:29:a5:f1:06:
4a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:44:4D:F1:77:AC:28:1C:69:BA:B7:1C:9A:D8:64:33:6F:1F:CF:63
X509v3 Authority Key Identifier:
keyid:2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c6:7c:f7:9d:fa:58:a5:89:35:da:e3:73:75:e0:1e:03:06:
68:af:b6:88:67:c5:ae:a2:17:83:65:55:f8:e6:54:3d:4e:d8:
20:e1:5e:a8:eb:2b:56:f0:4e:60:40:89:32:ec:76:01:17:9f:
10:e0:61:c3:66:bb:14:59:ac:fa:90:45:2c:67:07:8b:22:9f:
20:cd:4c:15:da:c0:81:18:29:97:1c:dd:a1:b8:de:f3:4b:09:
15:3b:50:90:cd:7f:9f:05:c3:c7:92:4b:1c:03:03:fe:16:23:
c2:b0:d7:e3:c2:6e:a6:c7:88:ad:ad:0a:fb:1c:81:50:9b:f1:
b1:d6:ed:d1:38:bc:dd:28:4a:d7:3f:8d:39:b5:04:a4:9e:69:
52:e1:8b:99:d5:d9:e9:6a:14:90:a0:24:85:83:46:a3:37:84:
a0:cf:84:54:b4:28:54:dd:8d:d9:4b:84:71:ce:a9:58:18:53:
1c:9a:58:1f:87:24:12:14:28:ed:e6:60:3b:0d:bc:83:32:aa:
f7:24:16:2f:a9:20:37:34:34:9f:42:99:4c:7b:cb:f7:e4:34:
fb:90:5a:b1:9b:4e:87:48:50:33:01:09:be:51:8e:33:2a:c7:
86:8e:a0:a7:eb:22:39:f4:8d:46:a0:85:69:51:35:cd:21:5e:
cf:2b:66:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:26:23 2026 by rpki-client