Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
File: LxrJ8JTYMY8wiNymgwGGX0YF6do.mft (raw, json)
Hash identifier: WelFyzuwbuqDqVX6HK88KcxvToM+QQFsA2qAaDZU0ig=
Subject key identifier: 40:EB:EF:92:9F:CF:04:25:C9:5F:1C:AE:F0:8E:45:85:AD:1D:28:CE
Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
Certificate issuer: /CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Certificate serial: 019EBB1040215BA56BD5E8A63EF364011957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
Manifest number: 131F
Signing time: Fri 12 Jun 2026 09:01:04 +0000
Manifest this update: Fri 12 Jun 2026 09:01:04 +0000
Manifest next update: Sat 13 Jun 2026 09:01:04 +0000
Files and hashes: 1: LxrJ8JTYMY8wiNymgwGGX0YF6do.crl (hash: 4yniJ1iUINcrfpMhh8yuanqsmTSHR3EzGNn5uTsbUQg=)
2: R4EyQfq47lKcSi7lGsbXI4F8tPI.roa (hash: tdmT4SygVfTwG2tATcY87tl2PKsMrLDS/k3VojLg3Q0=)
3: U2Z1XV8o3uSKFqctNf3JUk-H5Ts.roa (hash: FRVvHMEadriOkR83sQ2tDLvX3mVKMsDHHQh/IgHBVFQ=)
4: UYxFngClnykqTHTfuXuiS4afmY0.roa (hash: qhH8eU5uzACUHVTAmy6bDaqx30+kPSiCPRvL6eNWthc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:10:40:21:5b:a5:6b:d5:e8:a6:3e:f3:64:01:19:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Validity
Not Before: Jun 12 09:01:04 2026 GMT
Not After : Jun 13 09:01:04 2026 GMT
Subject: CN=40ebef929fcf0425c95f1caef08e4585ad1d28ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:02:50:62:4d:36:c2:8d:cf:8b:ce:9a:ef:
15:8a:b1:8b:5b:87:45:69:63:fb:52:92:02:ae:3a:
18:03:2d:e2:5e:a2:52:01:76:a3:16:9b:7a:f8:2c:
d2:74:c1:c3:c9:6d:f6:d5:af:33:28:e7:a7:3a:7c:
05:23:b7:ee:a2:3d:92:44:f1:f8:fe:9a:2a:f8:ff:
9d:9e:37:1f:3a:c5:0f:29:a9:d3:9b:da:30:15:40:
12:76:87:69:1e:58:e8:f1:d3:cf:84:87:57:59:03:
fc:9d:53:d1:74:72:9f:fc:a4:22:fc:db:29:6f:81:
4b:ee:c4:7e:4d:38:fc:6e:40:9e:1f:d5:ec:a3:de:
61:4d:4c:34:60:0d:4e:e9:08:2f:65:df:b5:38:ea:
49:4e:2d:70:88:8c:5c:74:97:e5:42:93:85:a3:e0:
c1:5f:50:1e:07:b3:77:25:4a:a4:58:b1:c7:e0:a6:
1e:52:35:9e:2b:fa:84:af:19:27:76:74:36:e5:ae:
53:a7:5a:7f:a2:c9:47:d8:64:59:db:5c:32:28:15:
f3:21:f0:68:d1:11:af:5b:0c:57:96:ac:d9:0c:16:
9e:5a:e4:b6:38:42:ed:f2:84:27:c2:af:12:db:55:
80:0f:64:a5:de:64:e0:48:ce:ca:b0:49:8c:d6:bf:
cb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EB:EF:92:9F:CF:04:25:C9:5F:1C:AE:F0:8E:45:85:AD:1D:28:CE
X509v3 Authority Key Identifier:
keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1b:8f:7e:07:c5:cd:96:56:39:bb:b6:f1:6c:22:73:9e:7c:
67:74:90:4d:d5:48:04:3f:16:cf:ae:76:4d:bc:59:08:64:ab:
39:9d:86:e9:18:4c:6a:10:b1:61:2b:00:fd:9a:0c:9a:4a:bd:
16:8c:51:f3:49:7f:18:b3:52:cb:7a:7e:a8:1f:24:08:09:d8:
e2:ed:bd:97:f5:b3:00:e5:99:b9:75:20:c2:be:eb:4d:b3:79:
bd:eb:40:d1:dc:9a:78:2f:53:77:0f:6d:33:a3:8d:5c:47:2d:
06:3b:5d:a7:72:45:83:f7:8f:31:88:34:1f:80:f0:69:2e:e8:
68:86:21:3b:49:8f:69:e4:cb:c8:8a:c3:b7:c8:70:cd:16:d3:
8b:85:44:b9:29:87:c4:aa:cb:f7:84:ae:18:34:b2:26:8e:5f:
7e:70:a9:da:39:39:56:bf:ee:70:25:a2:de:81:2f:61:c8:e1:
d5:fe:1b:e2:b9:cf:e0:bd:db:9f:b9:d8:f9:58:09:56:07:37:
e5:fc:f9:71:54:ca:7d:a6:f5:8a:89:5d:d6:1f:bc:c1:97:c3:
f9:6c:97:ae:aa:71:a6:d6:ec:75:61:36:a5:0d:44:cf:c9:9c:
50:6f:29:37:50:eb:df:7a:ad:5a:af:f0:c8:bc:03:7b:5a:f9:
c5:5e:d2:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ67EEAhW6Vr1eimPvNkARlXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMWFjOWYwOTRkODMxOGYzMDg4ZGNhNjgzMDE4NjVmNDYw
NWU5ZGEwHhcNMjYwNjEyMDkwMTA0WhcNMjYwNjEzMDkwMTA0WjAzMTEwLwYDVQQD
Eyg0MGViZWY5MjlmY2YwNDI1Yzk1ZjFjYWVmMDhlNDU4NWFkMWQyOGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOECUGJNNsKNz4vOmu8VirGLW4dF
aWP7UpICrjoYAy3iXqJSAXajFpt6+CzSdMHDyW321a8zKOenOnwFI7fuoj2SRPH4
/poq+P+dnjcfOsUPKanTm9owFUASdodpHljo8dPPhIdXWQP8nVPRdHKf/KQi/Nsp
b4FL7sR+TTj8bkCeH9Xso95hTUw0YA1O6QgvZd+1OOpJTi1wiIxcdJflQpOFo+DB
X1AeB7N3JUqkWLHH4KYeUjWeK/qErxkndnQ25a5Tp1p/oslH2GRZ21wyKBXzIfBo
0RGvWwxXlqzZDBaeWuS2OELt8oQnwq8S21WAD2Sl3mTgSM7KsEmM1r/LSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDr75KfzwQlyV8crvCORYWtHSjOMB8GA1UdIwQY
MBaAFC8ayfCU2DGPMIjcpoMBhl9GBenaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wNDE5NjgtMTVlYi00Mzg4LTk4NWEt
YzIzYzgyOWRiOTM3LzEvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wNDE5NjgtMTVlYi00Mzg4LTk4NWEtYzIzYzgyOWRiOTM3
LzEvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRuPfgfF
zZZWObu28Wwic558Z3SQTdVIBD8Wz652TbxZCGSrOZ2G6RhMahCxYSsA/ZoMmkq9
FoxR80l/GLNSy3p+qB8kCAnY4u29l/WzAOWZuXUgwr7rTbN5vetA0dyaeC9Tdw9t
M6ONXEctBjtdp3JFg/ePMYg0H4DwaS7oaIYhO0mPaeTLyIrDt8hwzRbTi4VEuSmH
xKrL94SuGDSyJo5ffnCp2jk5Vr/ucCWi3oEvYcjh1f4b4rnP4L3bn7nY+VgJVgc3
5fz5cVTKfab1iold1h+8wZfD+WyXrqpxptbsdWE2pQ1Ez8mcUG8pN1Dr33qtWq/w
yLwDe1r5xV7SMg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 14:21:04 2026 by rpki-client