Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
File: LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft (raw, json)
Hash identifier: x59Sv+okzLeRjZZAoHvTbBu6QkJSak/8uohaSnBIeqA=
Subject key identifier: 8F:54:BE:F4:51:FC:AA:A2:60:A3:DE:C8:D6:6D:DF:73:99:4D:11:E5
Authority key identifier: 2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
Certificate issuer: /CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Certificate serial: 019ECA4BD7C39717DB3696FCB9A4D5636522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
Manifest number: 0121
Signing time: Mon 15 Jun 2026 08:00:28 +0000
Manifest this update: Mon 15 Jun 2026 08:00:28 +0000
Manifest next update: Tue 16 Jun 2026 08:00:28 +0000
Files and hashes: 1: 0xXbCURhYGAah-ub3QgpVnkd5sc.roa (hash: Q0oF/ybiwcu5gijOk6b+e5zoOovn/M1MtfwaMpdjGcE=)
2: 9yvmVURUkLMHk20MVeDjqLMtnVE.roa (hash: /RYvywBfKnZxdvL0x6U6DMMb9MrbE+OssqTLAfPCxa8=)
3: LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl (hash: mr9v7NutPD39q4L1nDSBtQiRjciXQsj2shxQ4tJt10k=)
4: Nequ1Lfv45A-4d-1Vk4dCZmbP8I.roa (hash: bLVnDdjoc9G1dickoCoDDOI7CZ2glnUV81dCe9iXEnE=)
5: eFeaVaRSBkGil76pjqqdgdUkbzI.roa (hash: mK68NwlgziX7HL5QUueavEEpH7AmEQ0bjY5gVUd0cuc=)
6: rxqd0Gry-OP0vQizZ8B0iUOlhQk.roa (hash: YqR2/1gTcjcRib7Q7eC6pgNPFlvqofC4cwX5ccdPO5s=)
7: sk6WLXVZEkboXRVPMZBoeqCrxVY.roa (hash: 4xjEoOdVMoXraD+ur+OZrTrLjOFEYcxLVFCWWAfHvz8=)
8: uIxLvhO87cm4uLEN6CRbiRRAprg.roa (hash: /WkNAUA3svepJJ+1z611s33eGYD9olxUjtZpjS5M7lk=)
9: uhrvAuxzS5aftx3VHfde8tRACMk.roa (hash: 8t8x2EpQlFENAHhuFsJA0XsBIYVQrZTRSbhmAKKQQcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:4b:d7:c3:97:17:db:36:96:fc:b9:a4:d5:63:65:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Validity
Not Before: Jun 15 08:00:28 2026 GMT
Not After : Jun 16 08:00:28 2026 GMT
Subject: CN=8f54bef451fcaaa260a3dec8d66ddf73994d11e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:56:66:f1:20:bf:05:8b:8a:64:0d:00:9a:01:
90:92:7d:7e:c7:a0:35:3c:f7:9a:a0:16:6c:91:cb:
cb:9e:41:5f:36:02:56:ec:df:42:37:34:5a:a0:3f:
5c:27:45:52:5e:3d:2a:cc:fd:85:c7:86:1e:e1:33:
b4:63:c8:f8:bb:38:3a:0e:10:95:94:52:36:08:90:
4d:69:a4:ef:42:dc:e2:12:57:8b:23:2b:7f:59:99:
84:55:a8:04:20:00:66:c6:55:e6:71:93:2b:45:f0:
03:18:fa:f6:f7:64:cd:1f:cc:10:3b:be:0c:93:3f:
3b:95:4d:36:12:5e:3f:69:08:ae:ef:ef:82:b8:51:
28:4a:14:1a:51:12:2d:b0:1b:ff:58:9c:47:bf:c7:
20:df:f1:c1:00:a6:ac:01:33:9a:4d:fc:7f:67:1e:
0c:dd:e2:32:a0:2d:1d:4a:cf:e8:8c:81:d5:a8:38:
b3:7c:c3:84:23:d6:ef:b8:83:e7:d3:c2:a4:1b:6d:
42:ff:41:2e:d6:80:3c:d7:c6:98:6f:a7:0e:92:cd:
a0:63:96:ef:c1:80:47:9d:dd:82:ad:3f:67:0d:03:
28:50:34:d8:e4:3c:3a:ac:67:e4:6c:e2:fa:fe:52:
7f:2c:3b:0f:26:73:fd:92:dc:55:75:a3:03:8f:76:
bb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:54:BE:F4:51:FC:AA:A2:60:A3:DE:C8:D6:6D:DF:73:99:4D:11:E5
X509v3 Authority Key Identifier:
keyid:2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:78:c0:01:a7:5e:9a:56:5a:95:a5:f3:12:9a:45:8d:1e:8f:
f1:36:2c:15:cb:4e:7c:a7:92:a5:d1:f7:50:e0:39:c3:9a:33:
e2:88:d0:d3:bb:63:f0:42:2b:b6:39:05:34:e4:2c:36:48:0b:
64:4b:e5:ac:a2:37:fe:23:1e:3e:72:16:8b:fa:67:6c:7c:02:
44:66:2c:98:b6:ff:02:76:c1:0e:8a:cf:27:39:50:41:4a:0c:
63:0f:93:62:68:2a:7e:db:1d:a9:3b:5c:1a:54:b2:e4:da:95:
2a:fb:05:4a:c1:c0:4e:7a:77:8b:c8:62:7d:96:ad:14:a0:a2:
11:d0:8a:3b:8e:4d:d0:24:31:93:17:05:a6:8a:a7:fe:37:0e:
32:f4:d9:c1:ef:20:87:68:c2:d3:7c:ee:ec:bd:26:c2:b0:26:
d3:1f:63:eb:c9:38:d5:9d:17:6c:e1:67:3e:a5:4b:4b:ba:10:
91:54:2a:8a:a8:ce:fc:ca:8b:c7:9b:96:41:7f:62:1f:ca:82:
1b:5d:7c:12:1c:bc:73:9f:64:6a:71:c9:b4:ee:cf:8d:8d:40:
67:bf:8f:8a:a8:72:1c:b6:a8:c2:c2:d6:53:2b:ea:3c:82:46:
3a:2d:60:34:6e:6a:0d:ee:90:3e:17:36:51:7a:85:cd:f5:28:
4f:8a:d8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 12:42:22 2026 by rpki-client