Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
File: lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft (raw, json)
Hash identifier: yg1jCQZLLwIwvqP+12ekzOyWWam66QAdePGMALGvv2I=
Subject key identifier: 8D:D8:D8:50:0F:7E:2F:0A:08:81:AD:0B:77:64:B2:6B:23:12:47:5B
Authority key identifier: 97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
Certificate issuer: /CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Certificate serial: 019FAC3EDC8D36599E3BE06FB2D2118289D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 05:00:28 +0000
Manifest this update: Wed 29 Jul 2026 05:00:28 +0000
Manifest next update: Thu 30 Jul 2026 05:00:28 +0000
Files and hashes: 1: H_aIB34XXRbiPvATUkCbAHJuZks.roa (hash: GmWrAgdFKtzaI9LiJNA5YbFMAcvIbrgKGLYesLFjTmw=)
2: QHQB5R-_IHEKwwGTKDoZ2Ksm3ts.roa (hash: RSCo2PpN2aVf+mUteSJphpe4hoO5sJZI7c95rlwWbrM=)
3: lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl (hash: NbGmfuV6aIopU1P1ix4QH9eLuNvvPo/5UbOmlUfUMGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:dc:8d:36:59:9e:3b:e0:6f:b2:d2:11:82:89:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Validity
Not Before: Jul 29 05:00:28 2026 GMT
Not After : Jul 30 05:00:28 2026 GMT
Subject: CN=8dd8d8500f7e2f0a0881ad0b7764b26b2312475b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:e8:0b:e1:7f:45:7e:8a:0b:3d:3b:6a:e9:
93:6b:88:6a:c2:cb:60:6f:7d:a4:06:ae:7a:96:16:
6e:08:f8:7a:0a:46:9b:9e:25:67:fc:76:6c:e0:78:
3f:29:33:fe:82:79:c4:d9:85:80:37:f0:fb:ec:54:
b2:3b:05:16:b9:c3:16:17:c5:30:11:58:dc:4e:4e:
1d:1b:52:21:88:d5:d3:ed:74:56:18:78:b9:b0:d7:
6c:97:4e:39:a3:b4:3e:72:ad:84:d5:7a:39:a8:e9:
4f:92:40:12:ae:21:92:28:a7:e6:9b:4a:3a:ae:43:
d1:b3:ff:41:5d:c4:05:59:31:59:9f:5e:1b:bc:96:
55:16:7c:5a:82:45:47:8c:81:1e:37:ed:99:4f:1c:
79:ef:4a:1c:20:bf:e5:18:3d:f2:34:d2:e2:34:29:
9e:a2:c7:5c:d5:ac:dd:f7:b9:13:11:f5:46:92:aa:
58:64:81:f7:c5:81:7c:4e:50:a9:1f:36:8a:1e:72:
ee:96:2e:93:9e:2f:7c:1e:9c:a0:5c:2d:a0:1a:cc:
72:03:64:a4:67:5d:f7:54:9d:e5:23:9b:ed:a9:6c:
88:65:f9:6d:52:84:fb:cb:95:0b:e6:7e:eb:cb:ae:
12:45:ea:36:7e:ba:7c:b0:bb:34:c4:12:40:e5:44:
a5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D8:D8:50:0F:7E:2F:0A:08:81:AD:0B:77:64:B2:6B:23:12:47:5B
X509v3 Authority Key Identifier:
keyid:97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:00:25:04:56:62:27:82:d7:c6:a6:0f:03:83:11:7c:97:d1:
7f:49:d3:19:6f:44:89:98:24:71:b2:a0:ae:1e:a8:6d:31:63:
c9:66:7a:f7:07:09:8a:18:1e:7a:63:e3:69:fa:89:38:27:57:
c5:d2:29:45:d5:1f:db:40:9d:97:b8:50:cd:c6:f0:80:b9:f3:
42:4a:a3:96:f5:e9:74:4a:2d:3c:9a:99:0e:c7:67:65:b5:39:
86:91:7e:f7:04:cb:c4:43:f3:c1:9b:27:ae:a8:db:c7:22:cf:
51:e2:3c:95:0e:14:8c:a3:e8:64:bc:71:a4:00:06:ad:c7:4f:
d3:37:1c:8f:91:44:26:5d:73:3b:da:f7:53:95:6c:de:3a:bb:
ab:ea:a8:8c:56:90:ad:58:f8:4e:3d:3c:cf:30:df:24:6e:92:
c4:94:34:e7:a7:35:72:3e:be:64:f6:e3:1a:a5:84:ad:29:dd:
00:b7:d4:45:a7:fe:41:74:87:34:b1:1d:88:bb:ac:8b:17:f8:
93:cb:bf:4b:87:db:e4:03:f2:2a:47:6b:0c:49:03:b9:90:bc:
2b:e7:44:81:e3:a3:d9:67:b1:8f:89:cb:90:a5:66:be:dc:e3:
93:03:5a:32:e0:44:7a:04:97:85:ac:eb:cc:64:b3:2d:89:bf:
fe:fe:e0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:00:34 2026 by rpki-client