Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
File: lxkrZdZTQfNy8GdjTxH_PJbESrM.mft (raw, json)
Hash identifier: gPN7qKN4710nFbJK/xLiYFUTXkAJG1aqWJU8yRHjaCc=
Subject key identifier: 2C:79:01:46:CB:9B:CD:BD:56:97:D8:EF:40:89:A6:6F:7E:58:DB:79
Authority key identifier: 97:19:2B:65:D6:53:41:F3:72:F0:67:63:4F:11:FF:3C:96:C4:4A:B3
Certificate issuer: /CN=97192b65d65341f372f067634f11ff3c96c44ab3
Certificate serial: 019DD0514573B09570EB011FB4BEBE2E53BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
Manifest number: 10
Signing time: Mon 27 Apr 2026 19:01:20 +0000
Manifest this update: Mon 27 Apr 2026 19:01:20 +0000
Manifest next update: Tue 28 Apr 2026 19:01:20 +0000
Files and hashes: 1: lxkrZdZTQfNy8GdjTxH_PJbESrM.crl (hash: hGXH7gSlMYHTcKkFlcAJEaHualjJMUBQOAxWJpeB1DE=)
2: wn0IY0Am8dbWKWFYL-XocK9wI1M.roa (hash: f5YL150E3HRR/Y+EFdyKEJdNywzJxXemEPh++b/gfAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:51:45:73:b0:95:70:eb:01:1f:b4:be:be:2e:53:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97192b65d65341f372f067634f11ff3c96c44ab3
Validity
Not Before: Apr 27 19:01:20 2026 GMT
Not After : Apr 28 19:01:20 2026 GMT
Subject: CN=2c790146cb9bcdbd5697d8ef4089a66f7e58db79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b3:d0:46:18:18:2f:20:a8:54:cb:9a:ea:26:
3d:3e:da:0f:80:7b:e1:d9:04:5e:b0:af:a9:0f:54:
b8:64:9b:99:65:44:61:57:1f:67:3d:22:c1:f9:f7:
20:c5:ae:01:c9:5a:2c:fd:f5:d0:54:02:58:91:ec:
a4:de:06:50:c0:88:9c:ea:44:01:95:56:25:f8:57:
f3:85:b5:63:aa:3b:d1:3e:41:c1:7a:bc:9d:ec:7f:
6d:94:63:ce:e9:bc:9c:e4:0b:a3:50:a9:3c:ad:6b:
d4:6f:c7:5d:86:ae:a3:be:48:46:ea:d3:d7:11:29:
9f:eb:9f:a6:91:92:85:db:6b:f1:5a:64:e9:91:ea:
2f:26:77:fd:f1:1f:40:96:da:19:a8:cb:af:cd:2c:
9f:33:35:97:49:8d:0e:31:0b:a2:a7:00:f9:49:6b:
af:b6:3f:bb:99:4f:6e:9a:cf:bc:4a:e8:ab:14:4d:
bb:be:63:26:83:74:95:cb:2c:2d:04:9d:f8:41:e4:
f5:e3:e4:fc:9c:d1:f0:a7:db:7e:e7:c5:69:ad:ec:
26:f8:55:dd:34:ab:a8:7f:ed:5f:90:56:11:ba:f2:
23:43:4e:b0:aa:77:0a:c3:3a:30:11:98:0e:3e:5a:
de:e2:58:93:c1:ba:a6:e4:90:0e:59:8b:21:5b:62:
9c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:79:01:46:CB:9B:CD:BD:56:97:D8:EF:40:89:A6:6F:7E:58:DB:79
X509v3 Authority Key Identifier:
keyid:97:19:2B:65:D6:53:41:F3:72:F0:67:63:4F:11:FF:3C:96:C4:4A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7e:b2:00:1b:e5:f7:c9:b8:ab:c3:68:ec:0b:aa:67:a7:ce:
48:c2:ec:b2:e3:91:f9:99:58:27:e7:32:5b:5e:71:a5:5b:8d:
e1:9d:58:3b:eb:15:e9:04:c7:e1:84:8d:60:b9:6a:4d:06:ad:
a9:a1:f0:e4:86:42:11:02:ea:cb:7a:04:29:36:63:cd:f9:df:
ff:38:8f:92:37:23:bc:0c:46:f0:ba:0b:2a:75:86:2a:a9:84:
cb:35:db:19:7b:e0:b0:33:2a:d7:77:f9:c4:97:f4:82:f5:b1:
d4:36:29:0c:38:d6:24:39:ce:d1:2c:a2:bf:b1:20:d6:6e:16:
7e:73:fc:89:fb:77:54:f2:e4:af:a2:e2:6a:7a:63:a8:96:0d:
ad:d7:c5:2d:e5:0c:f1:ab:3f:33:3e:dc:98:8d:34:53:b9:e7:
e6:23:4b:f3:47:52:cf:88:e9:de:3d:a6:a9:86:e3:e8:f6:c2:
63:41:d4:83:63:18:10:8e:8e:4f:40:03:61:ee:72:dd:ee:ca:
68:c6:06:ef:ac:c6:c4:7c:ad:58:02:00:08:8c:0a:13:65:c0:
55:ac:05:a4:44:7e:8b:66:02:65:b1:f9:e0:a4:eb:95:3b:15:
6e:31:9d:0e:a9:e3:8a:b8:d6:a1:db:db:5b:b4:df:2d:2f:14:
04:dc:c9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:20:45 2026 by rpki-client