Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
File: lxkrZdZTQfNy8GdjTxH_PJbESrM.mft (raw, json)
Hash identifier: v0cC7NzYD6/5MmwbzHbO18GQ3vxergbI+aS5oTcFHjM=
Subject key identifier: CE:47:A4:45:D2:D3:C0:4A:40:CB:D7:DC:15:B5:EA:E8:89:F2:C3:71
Authority key identifier: 97:19:2B:65:D6:53:41:F3:72:F0:67:63:4F:11:FF:3C:96:C4:4A:B3
Certificate issuer: /CN=97192b65d65341f372f067634f11ff3c96c44ab3
Certificate serial: 019FA1BC141450C5DBE428EFB29D7C13417C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
Manifest number: 0101
Signing time: Mon 27 Jul 2026 04:01:25 +0000
Manifest this update: Mon 27 Jul 2026 04:01:25 +0000
Manifest next update: Tue 28 Jul 2026 04:01:25 +0000
Files and hashes: 1: lxkrZdZTQfNy8GdjTxH_PJbESrM.crl (hash: IMjA41LDuxp1bjlENywS76B84DYOioacmiWo6D4bLbQ=)
2: wn0IY0Am8dbWKWFYL-XocK9wI1M.roa (hash: f5YL150E3HRR/Y+EFdyKEJdNywzJxXemEPh++b/gfAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bc:14:14:50:c5:db:e4:28:ef:b2:9d:7c:13:41:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97192b65d65341f372f067634f11ff3c96c44ab3
Validity
Not Before: Jul 27 04:01:25 2026 GMT
Not After : Jul 28 04:01:25 2026 GMT
Subject: CN=ce47a445d2d3c04a40cbd7dc15b5eae889f2c371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:9f:b3:18:06:b1:db:fa:d1:9d:35:62:f5:
39:35:cd:f5:0e:c9:c8:99:55:46:fa:c2:eb:7f:18:
2f:c1:e3:9d:a6:71:da:7b:eb:fd:77:af:62:6e:dc:
b2:b6:58:35:43:12:b2:c9:68:1f:f5:fd:79:e8:c1:
68:cd:33:dc:5d:16:07:ce:2a:a6:ab:5d:2d:1d:f2:
d3:6a:13:47:52:7d:62:69:49:e2:26:e6:27:39:8f:
43:7b:9f:d3:83:38:75:31:41:b3:e2:13:f4:2a:49:
1d:99:20:9a:9d:4a:1e:b2:f1:b7:33:cc:19:76:0c:
bc:13:f2:98:7f:b7:df:cc:39:f0:4c:7c:80:99:55:
7d:b4:af:4e:8d:c7:21:f9:e5:47:1e:b9:7c:9c:f9:
ec:d7:ed:37:41:36:b1:d7:6f:de:68:d4:d5:b0:59:
0f:41:da:aa:70:b7:70:37:7d:32:b6:6c:19:93:96:
0a:37:0e:11:c9:90:dd:a5:51:03:f1:a4:80:e3:8c:
e0:a2:3b:71:32:eb:54:91:b8:51:69:96:b7:0a:df:
47:e4:44:3e:61:28:6c:96:e6:b6:22:57:55:06:ff:
19:41:17:65:d7:b2:fa:85:a5:fa:76:63:0a:2b:8c:
cb:2e:4e:c4:a7:4e:cc:04:54:d8:d7:71:1e:fd:9f:
d3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:47:A4:45:D2:D3:C0:4A:40:CB:D7:DC:15:B5:EA:E8:89:F2:C3:71
X509v3 Authority Key Identifier:
keyid:97:19:2B:65:D6:53:41:F3:72:F0:67:63:4F:11:FF:3C:96:C4:4A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0b:70:c0:32:b9:b1:07:30:e0:83:8c:30:e1:b7:03:c1:57:
c7:80:cb:4c:9c:de:62:38:74:15:ee:75:46:56:0e:2f:56:5c:
f8:06:b7:08:91:9a:eb:f8:7b:43:23:53:05:7f:c8:82:8d:9b:
60:dc:98:50:02:f1:7a:09:e0:2a:d1:80:bd:37:d7:44:f9:7c:
4c:2b:92:ab:34:cf:89:88:a7:44:fe:2e:c9:3d:a3:81:e9:89:
b4:c5:44:53:0e:3d:10:25:49:2e:16:19:35:58:61:fe:51:8b:
f7:23:73:43:d9:a9:94:ec:50:49:fb:05:59:b1:c2:26:42:4b:
b8:b5:79:1c:28:2c:ba:16:5d:58:01:3f:e7:49:5b:5a:e6:7b:
21:b3:9d:aa:3a:24:6b:ae:14:a1:1a:15:11:06:01:6b:79:ec:
89:fc:98:21:69:96:d7:36:f6:b3:fe:64:65:5a:51:1e:4e:ab:
c2:e6:df:91:c0:5f:0f:a5:49:2e:3e:40:45:01:56:f1:0a:bf:
00:66:2e:2f:0c:6f:f2:ad:17:e8:ea:c2:65:af:f1:75:52:a3:
39:01:1b:cd:fe:68:22:a5:00:cf:43:23:88:03:95:1a:65:f7:
cc:2a:82:f2:2c:4e:a9:c0:67:27:f7:49:54:ca:0d:09:e7:0a:
ba:0a:71:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:49:48 2026 by rpki-client