Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
File: LX893KDLOOx7CMaQKeIPUtxAjxc.mft (raw, json)
Hash identifier: pwR4wlFilvpZcTEJICextcy+3yPsV2MHrUXoYnW9+wo=
Subject key identifier: CC:8D:43:18:AE:51:AA:E9:71:B9:9B:4B:48:D0:49:0F:C8:C8:6E:55
Authority key identifier: 2D:7F:3D:DC:A0:CB:38:EC:7B:08:C6:90:29:E2:0F:52:DC:40:8F:17
Certificate issuer: /CN=2d7f3ddca0cb38ec7b08c69029e20f52dc408f17
Certificate serial: 019CABD8FACA00C9821F26FDB35F45C13AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:00:49 +0000
Manifest this update: Mon 02 Mar 2026 00:00:49 +0000
Manifest next update: Tue 03 Mar 2026 00:00:49 +0000
Files and hashes: 1: HBZIofhnEyGMafPIiZxVB_Ns56M.roa (hash: 49lIUj/HnnMzqTTFtrpK2NJtv/LRA6INi2P9F0Ad34E=)
2: LX893KDLOOx7CMaQKeIPUtxAjxc.crl (hash: auhoMXGKHKWtfv3kAkmJ8ynABPKXEGZXJ0wxrwXURrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:fa:ca:00:c9:82:1f:26:fd:b3:5f:45:c1:3a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d7f3ddca0cb38ec7b08c69029e20f52dc408f17
Validity
Not Before: Mar 2 00:00:49 2026 GMT
Not After : Mar 3 00:00:49 2026 GMT
Subject: CN=cc8d4318ae51aae971b99b4b48d0490fc8c86e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:26:64:e8:6c:dd:5a:3a:96:5b:8c:53:01:
80:66:bd:4c:96:2e:a1:cb:8c:00:7c:c6:33:62:95:
11:d4:9d:4b:3f:b4:79:0b:37:b9:24:c4:56:03:f6:
e0:4c:57:70:89:76:28:1a:97:23:0e:ca:0e:ab:ce:
e2:3e:a7:aa:3b:75:7c:01:f1:a3:6e:78:69:b0:ef:
ca:2f:ee:3d:0f:e3:d5:ae:4d:73:0d:03:b3:68:6a:
d1:97:2c:dc:7b:cd:b0:ac:06:1e:0d:b7:37:8a:ed:
ca:db:d9:24:42:a8:d1:32:d8:66:bd:f6:1c:aa:eb:
b2:c1:8b:49:9c:e3:f2:ad:b8:6b:41:44:41:9c:79:
05:a8:bd:51:5c:00:5a:15:e4:bf:fd:4a:fc:ca:a0:
e4:d2:92:9c:a3:f1:65:10:79:dd:f3:80:62:d9:c5:
b1:a6:63:b2:7c:e7:2b:1f:86:a8:07:01:b8:b6:b1:
b3:a6:3a:94:b0:48:c0:c6:53:12:90:5a:4e:96:c3:
44:47:bc:26:93:1e:7a:cd:75:5a:11:00:9c:b6:27:
52:91:a7:26:b0:15:c1:d8:d4:59:92:96:2b:a9:27:
a9:32:68:36:16:96:b2:7e:c4:68:4b:22:45:a4:6d:
d2:e1:85:34:d0:bf:4e:f7:11:4c:10:b8:9f:34:bc:
90:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8D:43:18:AE:51:AA:E9:71:B9:9B:4B:48:D0:49:0F:C8:C8:6E:55
X509v3 Authority Key Identifier:
keyid:2D:7F:3D:DC:A0:CB:38:EC:7B:08:C6:90:29:E2:0F:52:DC:40:8F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:63:b6:60:a7:8f:eb:5a:e5:54:7a:c7:06:25:08:56:83:eb:
3b:24:0a:8f:b6:c2:97:e6:1c:b8:fc:63:94:d9:d0:38:4f:34:
26:e2:e3:b8:ce:53:70:99:d1:5e:5f:ef:8d:fa:a3:72:5a:98:
d0:71:92:e4:66:47:2a:96:5e:96:0f:38:ad:cc:66:e8:cb:8d:
7e:61:ae:3d:91:b9:8e:08:03:aa:f2:37:0f:ad:d8:ef:7c:e4:
c8:c6:75:df:c3:ee:e4:6a:ee:85:6b:da:16:fc:cf:de:82:a8:
59:7f:58:2a:33:aa:6d:bf:7c:e8:6c:9b:1f:c9:93:26:2f:97:
d9:18:94:90:5a:3c:19:54:63:04:f0:aa:1b:f5:19:3b:5f:b0:
46:e8:23:b2:03:f2:51:a9:51:62:82:a9:57:b3:ac:c8:1b:45:
55:f6:7d:af:44:8b:dc:b7:88:8c:6e:53:85:49:54:7a:bc:66:
e8:34:91:c0:97:2a:84:c0:31:7a:8a:c5:8b:72:d5:4d:31:fd:
e0:3c:9a:f4:bb:7d:fd:e1:d3:3c:19:44:7c:ed:64:98:5a:61:
dd:66:fb:d8:a7:70:53:0e:0d:b7:05:3b:32:dd:5b:cd:32:56:
c6:9f:fe:30:c6:a1:55:3e:54:ba:07:3c:47:bc:c8:65:45:db:
ef:38:34:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:30:17 2026 by rpki-client