Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
File: LX893KDLOOx7CMaQKeIPUtxAjxc.mft (raw, json)
Hash identifier: mkwYbT0lAHhQ7+czym4HJConPFYdBwPnNkI8x7o4BpE=
Subject key identifier: 25:4E:C6:14:79:7A:CF:56:F4:6A:1F:65:63:19:B1:56:C3:AF:42:50
Authority key identifier: 2D:7F:3D:DC:A0:CB:38:EC:7B:08:C6:90:29:E2:0F:52:DC:40:8F:17
Certificate issuer: /CN=2d7f3ddca0cb38ec7b08c69029e20f52dc408f17
Certificate serial: 019D9B5143DAB18823D8354CD3CE97250FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 12:01:27 +0000
Manifest this update: Fri 17 Apr 2026 12:01:27 +0000
Manifest next update: Sat 18 Apr 2026 12:01:27 +0000
Files and hashes: 1: HBZIofhnEyGMafPIiZxVB_Ns56M.roa (hash: 49lIUj/HnnMzqTTFtrpK2NJtv/LRA6INi2P9F0Ad34E=)
2: LX893KDLOOx7CMaQKeIPUtxAjxc.crl (hash: ew2+VYf9QDrANbOsHX3AumxiSAf/n3p82qsgoha7Kq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:43:da:b1:88:23:d8:35:4c:d3:ce:97:25:0f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d7f3ddca0cb38ec7b08c69029e20f52dc408f17
Validity
Not Before: Apr 17 12:01:27 2026 GMT
Not After : Apr 18 12:01:27 2026 GMT
Subject: CN=254ec614797acf56f46a1f656319b156c3af4250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:1c:0b:ad:07:e6:7f:b7:39:1b:29:0e:ff:
6f:ef:e4:89:ae:86:60:9e:25:12:76:a2:a2:e9:6e:
56:c8:d7:13:55:88:97:8b:5e:f3:f5:3c:9b:d3:3c:
54:47:66:c0:4b:fc:3a:70:99:41:17:07:ec:dc:db:
ed:cc:16:4d:be:5c:05:b0:d9:dc:e9:7e:19:c8:d8:
af:ba:76:96:d5:4e:2d:93:5e:ed:ac:fe:21:47:78:
e8:cc:ee:5f:71:aa:98:7f:e1:d0:49:dc:44:42:91:
5d:4e:c9:94:6b:55:30:71:1a:97:ff:84:3f:4c:fb:
fd:0c:d4:79:d0:6b:cc:18:8d:2c:29:72:0e:aa:98:
a0:ba:28:22:7b:c2:0f:11:e5:02:5d:15:b6:67:0e:
50:b7:7b:cd:ae:3b:7c:3f:0f:3a:9e:75:8a:64:12:
a7:5a:8c:f4:62:77:f9:4c:c8:66:77:6f:c7:aa:6d:
78:bc:b9:b2:f5:dc:f9:04:c2:68:a3:d0:98:40:ae:
bb:94:d2:69:39:97:c3:a9:c1:56:c6:35:40:e3:c5:
3c:51:05:c2:20:0c:95:99:c9:51:e5:59:51:eb:32:
c6:30:bc:76:b6:18:4c:ef:22:c6:a9:a2:99:3b:22:
ca:bd:38:38:de:eb:9d:ce:08:4c:c3:c5:13:ed:5e:
46:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4E:C6:14:79:7A:CF:56:F4:6A:1F:65:63:19:B1:56:C3:AF:42:50
X509v3 Authority Key Identifier:
keyid:2D:7F:3D:DC:A0:CB:38:EC:7B:08:C6:90:29:E2:0F:52:DC:40:8F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ef:92:5d:13:9e:7c:29:19:80:6a:f1:43:b5:b4:90:c1:4e:
3c:70:08:81:92:0e:b5:59:42:46:58:ae:96:99:8c:96:c0:e4:
7e:d1:60:24:06:02:f8:ab:73:36:f6:59:3e:94:48:62:ca:4b:
88:a3:fd:a4:85:ab:99:d9:0d:17:4b:d1:22:68:08:b7:0f:ea:
57:aa:7c:ad:3e:08:6a:61:18:74:06:f3:37:15:b4:59:77:5d:
9d:a6:32:e2:1c:5d:2e:0b:62:02:40:d7:87:34:12:ef:8d:a2:
c3:a5:86:1b:c4:44:53:9b:22:15:49:1a:71:68:5c:d1:c9:3e:
95:f8:55:59:c0:d8:5f:1a:2f:b7:be:ba:f0:c3:08:a7:38:61:
e2:6b:3c:e3:35:ca:e9:46:7f:f0:57:77:b9:19:5d:33:e8:87:
f8:02:af:e4:3b:d2:79:e4:3c:b2:00:e9:cb:85:f5:a3:54:7e:
de:2a:36:22:b2:3f:a7:90:a5:0a:f5:35:f1:cb:23:c7:04:e1:
2e:1b:90:19:e9:44:d1:c5:1f:62:02:51:94:ad:be:15:d9:7a:
3c:03:ff:80:0f:d5:07:d0:a8:aa:f0:62:61:ff:de:1d:03:ee:
9e:0e:f4:3c:3a:fc:5d:04:99:bc:29:26:64:54:b5:8d:1c:c0:
49:3a:c3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:01:05 2026 by rpki-client