
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
File: LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft (raw, json)
Hash identifier: 3JKAkxBJ6LPfaihqtxmnMai6vzlBNzopmfbddnqBvDY=
Subject key identifier: 4F:E9:20:04:51:5B:84:69:FB:47:BA:77:D5:0C:3D:61:76:F6:3B:81
Authority key identifier: 2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
Certificate issuer: /CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Certificate serial: 019CAB340A87117731DFACCCC142DC8357F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 21:00:40 +0000
Manifest this update: Sun 01 Mar 2026 21:00:40 +0000
Manifest next update: Mon 02 Mar 2026 21:00:40 +0000
Files and hashes: 1: LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl (hash: alPEJqslKRTw4zVC8WK+4a+IVDqLUqogZYe/9LSP+FY=)
2: xJrl572dGNTyomn-v8TCuFg7I1A.roa (hash: 2x5cy4pJUQbMIYLAtAfVd42ocgzotDRP+XX1VY3Dv3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:0a:87:11:77:31:df:ac:cc:c1:42:dc:83:57:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Validity
Not Before: Mar 1 21:00:40 2026 GMT
Not After : Mar 2 21:00:40 2026 GMT
Subject: CN=4fe92004515b8469fb47ba77d50c3d6176f63b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:39:dd:64:35:f3:0f:bc:bb:47:90:61:a6:ee:
43:9f:fa:fd:66:86:cf:c0:e2:52:7d:9b:ba:3d:b3:
29:92:df:7f:df:3e:54:cc:38:1f:83:0e:6e:91:4f:
f5:3f:af:6d:5a:17:aa:83:a5:05:7c:df:8d:98:77:
42:1f:a8:ee:a2:12:75:67:46:86:ac:14:21:9c:93:
73:6e:66:7d:5f:f6:97:7c:b2:25:11:22:08:6b:a1:
d8:37:06:ed:90:cd:7b:16:1c:d8:ad:67:3d:11:24:
d0:21:93:46:b6:74:f4:84:ed:91:8c:db:e3:65:5b:
a2:b2:24:43:77:95:43:a8:a6:09:ad:78:74:ee:e4:
8a:dc:24:3a:c5:8b:5a:1a:9e:6e:49:a3:90:6a:ee:
35:34:c7:1e:15:9a:a6:83:a9:81:2a:83:52:ba:8f:
00:6e:e8:3a:af:19:13:6a:de:04:a6:fb:b7:f7:f3:
c3:64:a2:40:ac:8f:3f:98:79:1f:8c:70:18:d2:cd:
6f:93:6f:4b:f0:82:88:01:42:58:c0:3a:8e:5c:22:
3d:17:3b:86:c5:6e:33:0a:19:47:c1:2c:f6:73:52:
4a:17:af:3c:7d:95:d9:58:ec:d2:11:65:b4:75:76:
12:83:58:4a:06:03:f7:ce:ba:e4:c6:59:e1:c3:7b:
dd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E9:20:04:51:5B:84:69:FB:47:BA:77:D5:0C:3D:61:76:F6:3B:81
X509v3 Authority Key Identifier:
keyid:2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1c:45:4f:63:28:39:84:17:06:64:a5:1a:3b:4a:5e:cd:75:
1e:47:b0:04:7c:86:80:1e:bb:ff:03:3b:a8:96:72:75:01:ba:
2b:9b:03:bb:1f:ec:50:92:51:1f:7e:07:12:d4:18:29:62:9d:
75:1e:04:f2:12:60:d4:7f:d3:07:a0:b7:0d:b7:e4:9a:2e:87:
68:c1:4f:c3:4a:94:22:94:75:6b:f8:e2:2d:c1:ea:4a:98:02:
48:87:f0:21:ad:15:79:84:df:8d:a4:35:5c:5b:c9:99:6c:c1:
3a:bc:9a:28:8b:3b:b6:cc:9e:13:cd:3d:41:03:57:66:3d:6e:
11:f8:41:35:01:5e:fd:c3:f5:70:08:f1:a7:66:f2:4b:b4:43:
61:86:45:94:a5:f4:12:a6:b6:16:d5:4b:a3:d9:85:de:df:28:
3c:4c:cc:1e:bd:9a:73:38:d7:22:a5:50:d3:e2:3b:a5:54:51:
81:ba:2f:10:dc:1e:4d:4a:cd:8e:f8:ec:af:3b:48:de:3c:6a:
1c:23:93:01:91:32:ef:98:11:1a:e6:52:6d:49:79:7e:6b:6a:
29:d5:75:66:da:d6:5c:d4:2d:42:1d:18:a2:13:02:ba:b2:be:
4a:e1:c8:af:dd:22:49:86:e2:00:71:c8:5c:7c:3c:90:f5:e4:
fb:42:60:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:35:48 2026 by rpki-client