Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
File: lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft (raw, json)
Hash identifier: x0piIM17+EQyKwEHfc0LekX/UhNR6GNuY2DE8WPZiQ4=
Subject key identifier: 24:DD:1A:17:4B:8D:B4:FA:9A:96:C6:2D:53:53:66:17:77:A0:66:AD
Authority key identifier: 97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C
Certificate issuer: /CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
Certificate serial: 019D38D2B06CA2D0CC333CCE8AEAED00118E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
Manifest number: 1459
Signing time: Sun 29 Mar 2026 09:00:24 +0000
Manifest this update: Sun 29 Mar 2026 09:00:24 +0000
Manifest next update: Mon 30 Mar 2026 09:00:24 +0000
Files and hashes: 1: FoFknui6N7AV-MVsL0GcCguJMuY.roa (hash: zSrSbQATu/hSvIQfL/GtZLhgnMs95GytYnvic5x5vKc=)
2: lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl (hash: ngfu9QVqoShB4sJIjWN4Jwnb3I52Sgm2OcLbm/eWuyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b0:6c:a2:d0:cc:33:3c:ce:8a:ea:ed:00:11:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
Validity
Not Before: Mar 29 09:00:24 2026 GMT
Not After : Mar 30 09:00:24 2026 GMT
Subject: CN=24dd1a174b8db4fa9a96c62d5353661777a066ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:b2:f1:42:a2:46:db:2b:2e:72:ce:e3:5d:
56:b1:59:c2:07:d3:ad:b9:1b:c0:2b:3b:7b:5d:7d:
10:a9:ba:aa:ee:36:66:36:19:3f:83:ba:9c:04:ce:
20:62:bb:6e:b6:81:4d:6e:14:4d:f5:02:8f:d6:f2:
00:9d:66:48:db:75:01:9e:21:3b:5e:8b:d7:0a:ab:
e4:a2:ec:80:44:6a:84:75:05:dd:91:1e:3f:ad:35:
56:98:18:2e:69:c8:c1:5b:58:22:05:be:f2:17:54:
56:5a:2c:a0:1f:51:3c:e3:03:b6:f8:96:a2:0c:77:
b8:1a:2e:ec:04:bd:dc:c9:90:e2:b1:3d:6f:6b:87:
6c:71:31:66:75:69:6e:63:58:a9:0b:c2:a2:bb:5f:
59:5b:d9:da:cd:88:4d:f2:6f:45:cf:03:d9:fc:e8:
a7:b1:74:28:ec:79:96:6a:f1:86:de:59:3d:ff:f5:
80:ce:32:d4:93:76:b6:cd:73:a7:6e:a8:5b:a7:05:
c0:6e:38:86:b0:7a:bd:76:e0:65:2b:a4:ea:11:23:
33:96:2d:bf:16:5f:ac:a3:66:d9:2d:65:1b:c7:c1:
54:a4:ab:5c:6f:27:eb:16:0d:dd:0e:8b:1e:e7:8e:
11:26:84:ac:6b:3d:6f:37:15:45:ce:c4:82:a0:7a:
b1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DD:1A:17:4B:8D:B4:FA:9A:96:C6:2D:53:53:66:17:77:A0:66:AD
X509v3 Authority Key Identifier:
keyid:97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d3:f3:d7:3f:0f:42:ec:05:da:6f:cc:e3:20:c8:c0:f0:47:
57:e1:15:3b:5b:f9:39:2f:f4:04:52:94:46:72:6c:9b:91:d3:
ab:b9:08:81:a9:b6:59:0c:2d:20:34:ef:11:99:27:d5:bb:20:
10:c8:01:01:07:34:e7:f9:ef:5f:d3:01:c7:7b:0b:f0:61:b0:
e3:1e:17:2f:cb:ce:47:d0:84:8d:6b:c8:12:aa:a0:d6:8d:4c:
55:44:5c:59:67:63:e5:9f:3c:0d:a7:65:61:76:dd:5f:0d:c6:
a2:2c:aa:c4:3e:d1:6f:19:c3:2c:3c:5c:96:a4:f5:93:a8:be:
ac:d0:ce:f4:c0:be:39:db:45:ee:38:a0:1a:5d:1d:2b:29:16:
b2:5c:93:e0:04:39:71:77:8a:b7:b1:02:84:ce:4d:88:30:31:
14:ee:cb:a0:a6:e5:69:80:55:13:25:5e:db:0a:d8:f5:bb:e4:
4b:53:a0:8a:14:7a:70:61:b1:01:4f:96:d5:64:43:ec:3a:e8:
3e:d8:dd:fc:6f:41:6d:d7:a5:e3:45:99:c8:7f:23:e0:bd:09:
cc:f5:7e:4d:26:89:d0:e6:f7:b7:78:fd:dd:7b:aa:05:3e:1d:
c9:c2:95:59:bb:87:78:16:d7:0f:21:ae:12:7e:a6:23:ed:65:
be:23:08:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:14 2026 by rpki-client