Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
File: lxkrZdZTQfNy8GdjTxH_PJbESrM.mft (raw, json)
Hash identifier: YYpgmI1V6E0Z4h2DQNyhuAu+P504IX5DltRkNdbMc1A=
Subject key identifier: 67:8F:7A:3E:EA:C1:90:E5:31:A3:12:80:85:D4:7A:7B:8A:13:52:6C
Authority key identifier: 97:19:2B:65:D6:53:41:F3:72:F0:67:63:4F:11:FF:3C:96:C4:4A:B3
Certificate issuer: /CN=97192b65d65341f372f067634f11ff3c96c44ab3
Certificate serial: 01A08B687DA3F983DC3DF1819C076806314A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
Manifest number: 017A
Signing time: Thu 10 Sep 2026 13:01:15 +0000
Manifest this update: Thu 10 Sep 2026 13:01:15 +0000
Manifest next update: Fri 11 Sep 2026 13:01:15 +0000
Files and hashes: 1: lxkrZdZTQfNy8GdjTxH_PJbESrM.crl (hash: B4x/XjVDyz4j8FJEYq71fm/5yxihqcVv9VByhtHq7vo=)
2: wn0IY0Am8dbWKWFYL-XocK9wI1M.roa (hash: f5YL150E3HRR/Y+EFdyKEJdNywzJxXemEPh++b/gfAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:7d:a3:f9:83:dc:3d:f1:81:9c:07:68:06:31:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97192b65d65341f372f067634f11ff3c96c44ab3
Validity
Not Before: Sep 10 13:01:15 2026 GMT
Not After : Sep 11 13:01:15 2026 GMT
Subject: CN=678f7a3eeac190e531a3128085d47a7b8a13526c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ba:8c:72:42:e1:7f:70:0e:85:79:5a:6b:4f:
94:60:22:37:f9:6a:b6:cd:2c:d7:15:94:7f:76:b5:
a8:ad:6e:5d:be:19:ab:07:f9:b4:82:2a:2e:e6:cb:
ad:af:f7:d4:86:a1:ef:8e:e8:a7:ba:29:0a:4e:d4:
12:50:4d:cc:18:65:7f:5c:cc:b7:9f:34:4a:51:71:
40:b3:d7:bd:c9:9e:f8:ef:01:11:aa:55:3c:22:a1:
ee:53:7c:e6:25:d0:0d:60:af:04:e7:c1:06:8a:e9:
12:42:d4:f9:78:42:19:c1:39:fd:75:b3:63:8e:fb:
21:1a:e2:45:5c:dd:5a:08:38:33:c6:4a:22:e0:85:
87:1a:ff:ca:ee:56:d3:80:f8:11:40:66:a4:ef:af:
98:3c:ae:98:9f:20:ec:a3:57:1a:22:54:67:9c:cc:
34:74:b8:a4:2d:c4:de:17:9c:33:e0:49:33:fa:93:
2d:99:14:16:69:d0:8b:fc:da:6f:06:de:5b:c2:1e:
50:4d:a4:e5:05:5b:98:20:ae:38:6c:aa:48:a7:9e:
6a:fa:93:b6:32:cb:19:9c:c0:ef:03:09:7b:92:01:
dc:de:17:39:15:23:20:4b:c3:64:bc:50:e9:c0:c1:
d7:80:31:72:1d:60:32:e0:bc:6a:47:39:c3:12:f3:
e1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8F:7A:3E:EA:C1:90:E5:31:A3:12:80:85:D4:7A:7B:8A:13:52:6C
X509v3 Authority Key Identifier:
keyid:97:19:2B:65:D6:53:41:F3:72:F0:67:63:4F:11:FF:3C:96:C4:4A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:2b:7b:88:08:2f:ab:4e:dd:0a:31:81:ae:d9:85:53:1b:34:
b5:73:a9:fc:6a:3d:f8:53:b0:16:67:d3:db:1d:c6:66:98:2b:
4a:9e:f3:c4:6d:98:28:21:a8:2f:53:e5:86:67:26:41:d3:b2:
d2:d8:dc:b7:49:d4:d1:56:a9:4d:12:33:5e:8c:99:cc:90:f2:
46:ee:3d:ee:7a:48:ed:15:e4:ce:1a:38:da:09:d8:87:8c:b6:
dc:a4:00:12:2d:77:55:6d:65:26:37:b3:cd:d7:f4:6c:82:54:
21:d6:fc:c6:96:ad:8b:16:4e:a2:8e:a7:d2:c3:33:82:2f:56:
5c:92:e4:01:f8:76:f4:60:61:c5:0c:94:fb:a9:2c:04:9a:d0:
d8:88:66:44:9e:70:f6:3e:7e:1c:22:97:24:a7:a5:ed:f8:31:
78:db:c8:66:27:7f:0d:2a:b4:b3:b9:7b:96:e4:34:75:67:c5:
57:03:80:dd:60:ea:c5:7e:33:fa:76:fe:af:43:a3:70:7a:be:
11:35:d3:56:76:63:9a:b5:75:78:5e:6e:8d:8b:37:bd:ab:af:
5e:52:ab:27:02:9b:49:87:ce:28:79:c1:87:b2:08:9b:34:f6:
fa:03:75:28:63:f9:bb:66:de:05:84:e9:0a:00:c2:98:a3:91:
6c:0e:aa:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLaH2j+YPcPfGBnAdoBjFKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MTkyYjY1ZDY1MzQxZjM3MmYwNjc2MzRmMTFmZjNjOTZj
NDRhYjMwHhcNMjYwOTEwMTMwMTE1WhcNMjYwOTExMTMwMTE1WjAzMTEwLwYDVQQD
Eyg2NzhmN2EzZWVhYzE5MGU1MzFhMzEyODA4NWQ0N2E3YjhhMTM1MjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7qMckLhf3AOhXlaa0+UYCI3+Wq2
zSzXFZR/drWorW5dvhmrB/m0giou5sutr/fUhqHvjuinuikKTtQSUE3MGGV/XMy3
nzRKUXFAs9e9yZ747wERqlU8IqHuU3zmJdANYK8E58EGiukSQtT5eEIZwTn9dbNj
jvshGuJFXN1aCDgzxkoi4IWHGv/K7lbTgPgRQGak76+YPK6YnyDso1caIlRnnMw0
dLikLcTeF5wz4Ekz+pMtmRQWadCL/NpvBt5bwh5QTaTlBVuYIK44bKpIp55q+pO2
MssZnMDvAwl7kgHc3hc5FSMgS8NkvFDpwMHXgDFyHWAy4LxqRznDEvPhjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGePej7qwZDlMaMSgIXUenuKE1JsMB8GA1UdIwQY
MBaAFJcZK2XWU0HzcvBnY08R/zyWxEqzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhrclpkWlRRZk55OEdkalR4SF9QSmJFU3JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81MTJmNjQtMjBhNS00YzM3LTliNmIt
ODExMDQ3NThjOTNjLzEvbHhrclpkWlRRZk55OEdkalR4SF9QSmJFU3JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81MTJmNjQtMjBhNS00YzM3LTliNmItODExMDQ3NThjOTNj
LzEvbHhrclpkWlRRZk55OEdkalR4SF9QSmJFU3JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsSt7iAgv
q07dCjGBrtmFUxs0tXOp/Go9+FOwFmfT2x3GZpgrSp7zxG2YKCGoL1PlhmcmQdOy
0tjct0nU0VapTRIzXoyZzJDyRu497npI7RXkzho42gnYh4y23KQAEi13VW1lJjez
zdf0bIJUIdb8xpatixZOoo6n0sMzgi9WXJLkAfh29GBhxQyU+6ksBJrQ2IhmRJ5w
9j5+HCKXJKel7fgxeNvIZid/DSq0s7l7luQ0dWfFVwOA3WDqxX4z+nb+r0OjcHq+
ETXTVnZjmrV1eF5ujYs3vauvXlKrJwKbSYfOKHnBh7IImzT2+gN1KGP5u2beBYTp
CgDCmKORbA6q0g==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:33:17 2026 by rpki-client