Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
File: lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft (raw, json)
Hash identifier: LHgdj3j2EX92RfJTeau4OfXHZvez3tYzmTPB6VYdl+w=
Subject key identifier: 89:3D:CC:3A:71:AB:F8:8A:17:5D:A6:C5:70:CD:C6:6F:DE:54:53:BF
Authority key identifier: 97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
Certificate issuer: /CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Certificate serial: 019DA378484523A1AD7E6C730E6F80E98F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 02:01:02 +0000
Manifest this update: Sun 19 Apr 2026 02:01:02 +0000
Manifest next update: Mon 20 Apr 2026 02:01:02 +0000
Files and hashes: 1: DE4eWYMqD_V_TW9RHCPnXwS869o.roa (hash: B3QCN3c0NtaCxyXkiY1LF3q86AMCDmY0V4HgIvdlpZw=)
2: QHQB5R-_IHEKwwGTKDoZ2Ksm3ts.roa (hash: RSCo2PpN2aVf+mUteSJphpe4hoO5sJZI7c95rlwWbrM=)
3: lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl (hash: pWJL3nuSY/S0H3WkxoOq3X0gXK0zCbFRJTNtYUOkLLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:48:45:23:a1:ad:7e:6c:73:0e:6f:80:e9:8f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Validity
Not Before: Apr 19 02:01:02 2026 GMT
Not After : Apr 20 02:01:02 2026 GMT
Subject: CN=893dcc3a71abf88a175da6c570cdc66fde5453bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b5:8a:f6:24:92:ec:5b:ab:28:79:6b:30:b0:
87:15:92:a9:12:c8:59:14:58:3f:6e:09:58:7e:9c:
0f:1a:ed:b3:1b:a6:5d:fc:03:c2:ec:10:91:dc:ea:
c5:38:3f:27:11:1b:96:14:51:dc:bd:14:42:ef:d0:
a5:3d:f7:33:c1:c9:c0:61:56:44:d6:39:af:bb:31:
d9:7c:27:d0:e5:df:2b:19:56:0e:6e:9b:05:d6:6f:
2d:83:61:b4:8d:28:ac:b8:06:3c:82:85:59:26:5f:
37:84:e6:00:e5:b6:24:06:41:18:35:76:5c:c4:7e:
a6:8c:0e:f3:98:09:fe:47:f3:1a:5a:c4:ae:d2:b3:
82:b2:77:3f:19:e1:a3:39:c5:e4:a3:4c:45:49:cb:
74:04:bc:54:00:1c:58:d3:90:93:36:8e:24:2e:1e:
8b:b9:37:54:04:69:b9:f6:2b:e0:d5:7d:b0:0b:3a:
4d:0d:a6:f0:9a:2c:3f:6e:d3:e7:f6:f3:9c:26:22:
72:45:37:f7:77:5d:7f:3c:b2:18:0f:0e:f9:03:7a:
8f:bd:2a:86:c0:d9:d0:bf:22:9a:47:52:42:71:04:
c6:bd:fc:28:a6:86:a3:e6:68:3c:90:d5:72:13:86:
65:7a:37:fd:bb:79:b5:8d:9e:c6:30:53:0f:9a:b3:
ec:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3D:CC:3A:71:AB:F8:8A:17:5D:A6:C5:70:CD:C6:6F:DE:54:53:BF
X509v3 Authority Key Identifier:
keyid:97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2a:6d:7a:4d:61:ac:d9:00:3d:f6:69:26:47:6c:ba:1d:49:
5c:54:6f:22:03:83:d8:3b:e2:3c:32:81:73:46:34:1d:87:26:
00:8d:63:9e:3b:9d:95:9e:04:b0:f2:ac:71:45:80:f4:f2:cf:
8d:76:5d:46:a6:d3:f1:86:c7:75:9b:4a:04:6c:8f:5c:45:79:
92:be:74:a8:8f:e1:f5:a5:e5:c6:38:48:a3:91:62:f3:4d:1e:
47:a4:e3:97:92:d9:76:82:b5:60:ee:c2:8c:e7:55:04:74:5d:
e6:cc:b6:bd:d5:b9:b6:25:30:56:7f:e5:c5:c0:e8:2e:b0:34:
fd:2e:bf:c6:3e:63:20:5d:bf:02:4c:d9:cf:60:6e:1e:59:85:
0d:ff:d6:dc:50:82:d3:5d:3b:a4:be:8d:75:b8:f8:eb:cd:b1:
95:83:e3:a5:cb:f9:be:d3:e6:93:20:47:59:2d:df:06:8c:48:
ff:99:2c:8e:19:38:20:31:78:1e:69:8c:b5:bd:10:d1:3f:98:
5b:49:5c:22:07:d9:1e:f7:b5:a2:56:c2:3d:ee:0e:21:d0:73:
eb:89:76:09:cc:47:79:df:a9:e1:a3:fc:d0:32:55:89:73:3f:
10:62:b9:a5:ca:52:a3:d3:5b:3d:cb:e1:4c:24:72:0d:e4:0e:
e6:ea:13:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:58:56 2026 by rpki-client