Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
File: lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft (raw, json)
Hash identifier: UrlXd6WFnSRHQyzsT6rb2DfIVv1Kkq/kokMBVflMtms=
Subject key identifier: C6:98:64:C0:69:7C:53:28:72:93:F6:97:02:AB:18:3F:22:DD:EA:54
Authority key identifier: 97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
Certificate issuer: /CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Certificate serial: 019CAC473DD52AE6D89423D35CD5FAA9ABAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 02:01:15 +0000
Manifest this update: Mon 02 Mar 2026 02:01:15 +0000
Manifest next update: Tue 03 Mar 2026 02:01:15 +0000
Files and hashes: 1: DE4eWYMqD_V_TW9RHCPnXwS869o.roa (hash: B3QCN3c0NtaCxyXkiY1LF3q86AMCDmY0V4HgIvdlpZw=)
2: QHQB5R-_IHEKwwGTKDoZ2Ksm3ts.roa (hash: RSCo2PpN2aVf+mUteSJphpe4hoO5sJZI7c95rlwWbrM=)
3: lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl (hash: uXjgOeKOZsP52Nw5F1giyDujZekz/OHbmyC0bSzj3yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:3d:d5:2a:e6:d8:94:23:d3:5c:d5:fa:a9:ab:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Validity
Not Before: Mar 2 02:01:15 2026 GMT
Not After : Mar 3 02:01:15 2026 GMT
Subject: CN=c69864c0697c53287293f69702ab183f22ddea54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:7b:73:e2:9c:6f:93:ef:b4:57:2f:42:51:
e2:7c:68:33:ec:4b:d2:33:21:b4:15:42:80:41:d9:
55:fb:aa:1d:5a:21:80:96:7d:f8:51:9c:8b:de:00:
7d:07:ab:5c:25:2f:a7:5e:b3:f9:91:a0:87:f9:45:
96:5d:27:72:4a:4e:fe:ab:66:ce:36:aa:3c:39:64:
c9:05:fa:aa:f7:9a:4c:2d:d7:5c:b3:8e:38:db:7e:
60:4a:1a:c8:6c:a6:b5:77:ae:8c:59:bd:ac:58:d5:
47:c4:b4:76:52:e0:67:ce:e0:ec:50:2f:02:ec:3d:
02:14:77:d1:8b:70:05:d7:e5:9c:a7:23:b5:5a:72:
2f:d2:dc:f1:0a:d7:d2:b7:d9:30:64:8c:71:31:e4:
2e:96:43:1a:84:ca:d8:c2:23:a9:cc:59:10:0d:84:
cf:b2:d2:7c:59:93:43:a1:f0:30:8f:8d:ef:40:84:
a5:00:4b:df:18:28:5b:a0:04:0f:c2:2f:cf:f1:71:
e5:6b:dc:01:01:dd:db:5d:61:69:08:a6:56:b5:55:
3c:c1:0a:72:e4:ee:66:15:4c:54:42:b0:41:f3:83:
00:de:e0:30:3f:91:32:11:9e:22:b6:1e:4d:0b:2b:
23:09:33:6a:5f:a2:a0:46:c7:e1:9d:74:9e:e7:82:
dc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:98:64:C0:69:7C:53:28:72:93:F6:97:02:AB:18:3F:22:DD:EA:54
X509v3 Authority Key Identifier:
keyid:97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:bd:06:38:aa:57:2f:f0:72:81:da:8e:72:af:27:1e:1c:35:
b0:38:75:eb:1d:df:33:d7:69:92:df:2f:15:ed:92:92:a6:d0:
87:6e:fe:da:2f:8d:68:e9:31:1a:f6:7c:c5:c2:61:b4:29:ee:
a7:3d:7c:bb:ee:44:9c:b5:26:4b:b0:bb:22:db:6f:75:b6:2e:
fa:b3:cd:c1:bf:98:cb:3f:3d:81:7b:1d:87:e1:c6:68:50:7f:
86:80:27:c9:df:47:42:57:c8:65:5b:6c:20:7e:e6:e8:4b:d3:
0b:d7:55:5a:85:f1:a7:5b:99:da:75:c5:83:7a:8f:85:ef:3a:
98:e8:5e:ae:31:51:6e:fb:9c:23:70:34:a0:ca:df:38:18:21:
db:c2:4d:c2:fd:bd:48:5f:6a:5b:7e:87:5b:69:b7:c8:95:18:
e0:01:5a:f3:f3:61:a7:a1:d7:e3:55:05:13:32:4f:fd:77:50:
65:02:ab:92:94:45:c6:25:cf:b7:cf:59:b6:cc:8b:39:cf:5f:
56:dd:4d:c4:3d:0d:4e:c8:6f:79:6f:3f:38:9e:af:9f:77:e5:
09:cb:98:cd:d6:5c:0a:67:3a:63:f1:c2:c1:5f:dd:9b:85:d1:
09:54:c4:72:bc:7e:cf:d3:74:3e:99:3a:f0:2f:3b:db:50:44:
ed:e1:16:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:52:03 2026 by rpki-client