Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
File: lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft (raw, json)
Hash identifier: KLoMFc+gV8bRwry+h3gxHFL+Wji5XSXMKgm2RI6T5lk=
Subject key identifier: 21:8F:6A:15:A6:5B:2D:C1:D5:05:1C:5E:64:B4:86:DA:2B:66:72:5B
Authority key identifier: 97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
Certificate issuer: /CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Certificate serial: 01A0D983B9417FEDE8EA443D0B367E469FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 17:01:23 +0000
Manifest this update: Fri 25 Sep 2026 17:01:23 +0000
Manifest next update: Sat 26 Sep 2026 17:01:23 +0000
Files and hashes: 1: H_aIB34XXRbiPvATUkCbAHJuZks.roa (hash: GmWrAgdFKtzaI9LiJNA5YbFMAcvIbrgKGLYesLFjTmw=)
2: QHQB5R-_IHEKwwGTKDoZ2Ksm3ts.roa (hash: RSCo2PpN2aVf+mUteSJphpe4hoO5sJZI7c95rlwWbrM=)
3: lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl (hash: cEQhWGbryvkP0rPqyYDSAyAstToU4G9cIE9JvsCIyxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:b9:41:7f:ed:e8:ea:44:3d:0b:36:7e:46:9f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Validity
Not Before: Sep 25 17:01:23 2026 GMT
Not After : Sep 26 17:01:23 2026 GMT
Subject: CN=218f6a15a65b2dc1d5051c5e64b486da2b66725b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:30:4f:a1:22:f8:f9:cf:b4:64:4c:55:35:67:
3e:22:6b:5c:5d:de:57:f6:ef:31:f5:81:5d:fe:60:
cc:0a:c0:61:c5:18:9f:29:37:1d:e0:d1:5e:2c:68:
25:49:1b:d5:ec:04:0d:57:dd:41:ed:ac:32:01:96:
fa:ca:46:fd:3e:a4:f8:b4:aa:1a:d9:45:7b:dc:84:
ca:c6:94:5a:8f:66:93:25:c2:76:09:99:3a:91:14:
03:c1:21:3f:7b:12:4a:e5:5a:08:14:98:30:57:a0:
16:17:21:e1:b3:e7:79:f0:cc:1d:31:20:9a:10:53:
9e:8b:4e:ec:be:84:85:16:0f:20:dd:38:bc:9e:69:
18:08:c4:ce:37:8b:29:cb:45:26:f2:6b:72:12:37:
69:ce:10:08:1b:87:10:a2:61:90:73:ab:21:c6:68:
60:16:56:b3:59:47:52:f9:45:ff:57:65:5e:48:47:
05:c1:6d:34:db:16:0a:01:38:48:ea:1e:39:ca:7b:
96:a9:a5:7d:ba:4b:0e:60:4f:c1:fd:44:e7:af:59:
c1:b8:8f:f0:28:b0:6d:dd:9d:26:cd:5d:9b:24:a8:
04:0f:60:65:5d:95:ba:f7:b5:79:5b:49:48:b3:73:
b0:63:0b:c9:24:3a:66:99:5d:9c:3b:d9:6a:87:e9:
c1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8F:6A:15:A6:5B:2D:C1:D5:05:1C:5E:64:B4:86:DA:2B:66:72:5B
X509v3 Authority Key Identifier:
keyid:97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:33:39:87:21:24:aa:8b:4f:8a:ec:56:6b:a6:bb:39:d8:b8:
00:c9:41:fe:2f:61:f5:a5:60:5a:35:6c:a0:3f:22:04:17:4b:
96:2e:aa:19:26:a8:55:5f:34:19:6e:0c:f6:43:7a:fb:24:7d:
2a:c8:da:cc:36:82:d6:6f:89:8c:95:b2:82:78:49:d3:a7:61:
60:08:1d:96:ac:60:33:91:9d:ba:af:c5:f8:ad:55:30:50:35:
14:bf:38:49:70:fc:af:56:95:05:f0:d9:02:7c:40:75:38:82:
44:eb:42:08:02:ee:7a:3a:5c:15:4e:cc:9d:26:49:9b:5b:31:
7e:eb:22:17:5b:f2:bd:e6:f9:32:42:5e:47:5a:6f:22:fa:21:
27:bc:10:a8:0f:00:2c:27:a6:57:6c:cc:4b:88:dd:dd:9d:82:
16:19:da:df:6f:fb:00:cd:81:d4:38:34:0f:56:f9:7d:11:4b:
c9:c7:f8:1d:16:fe:94:44:06:5b:d7:6f:8d:3d:f9:16:5f:68:
57:d3:e8:51:ac:f8:bf:d5:57:5a:79:4a:e9:66:4a:98:fb:3f:
c8:bf:f0:50:fc:5c:5b:df:23:e9:f3:17:17:b0:a8:38:6e:35:
7c:62:57:fa:4b:53:66:6b:c4:2a:24:77:11:22:2a:3a:06:ed:
ce:16:7e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:20:16 2026 by rpki-client