Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
File: lxkrZdZTQfNy8GdjTxH_PJbESrM.mft (raw, json)
Hash identifier: 73o1wyMOEGPSsQDy7dNbjGWBSr1sN98rvNCSXVfg6Ho=
Subject key identifier: 66:1A:C9:88:04:31:67:23:7F:18:AA:0B:12:74:53:80:AB:9B:E8:BC
Authority key identifier: 97:19:2B:65:D6:53:41:F3:72:F0:67:63:4F:11:FF:3C:96:C4:4A:B3
Certificate issuer: /CN=97192b65d65341f372f067634f11ff3c96c44ab3
Certificate serial: 01A178F16DD0FF12A73F5260990426A395FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
Manifest number: 01F5
Signing time: Mon 26 Oct 2026 16:00:50 +0000
Manifest this update: Mon 26 Oct 2026 16:00:50 +0000
Manifest next update: Tue 27 Oct 2026 16:00:50 +0000
Files and hashes: 1: lxkrZdZTQfNy8GdjTxH_PJbESrM.crl (hash: /eYIXAmvqjWOgKR6kYt09fANRUsj/ihmOhFOjNNCjfE=)
2: wn0IY0Am8dbWKWFYL-XocK9wI1M.roa (hash: f5YL150E3HRR/Y+EFdyKEJdNywzJxXemEPh++b/gfAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f1:6d:d0:ff:12:a7:3f:52:60:99:04:26:a3:95:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97192b65d65341f372f067634f11ff3c96c44ab3
Validity
Not Before: Oct 26 16:00:50 2026 GMT
Not After : Oct 27 16:00:50 2026 GMT
Subject: CN=661ac988043167237f18aa0b12745380ab9be8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7e:d7:b9:df:8e:b7:57:08:57:93:7c:dd:c2:
20:e0:34:d2:e1:2b:9d:b9:89:f6:50:41:89:cc:d1:
1f:7d:b8:24:5c:ce:98:0a:bd:40:07:7d:6f:b8:fc:
4e:b3:d5:93:8f:f8:f4:f1:5e:32:01:ba:e9:c0:15:
29:91:68:62:c0:9f:d9:de:23:dc:58:5b:8b:cb:fc:
4b:d1:23:d4:5f:0e:33:27:c3:5c:fb:92:76:d4:39:
c4:89:a9:f8:3a:7d:61:53:c0:56:f6:39:71:c5:c1:
64:76:e8:34:81:4e:8a:6b:84:5f:47:fc:1b:21:83:
b8:65:b0:ca:70:6f:ec:98:9a:12:7a:75:ba:42:6b:
3b:65:00:d1:72:52:ad:ed:34:8d:41:21:8f:26:e2:
8f:e8:1d:c0:cb:bc:66:f4:62:45:23:38:fa:01:ca:
54:99:86:f4:55:91:87:d3:24:04:f1:9b:45:69:6e:
65:02:0e:27:f7:9c:6b:2a:d1:cc:30:df:ce:15:64:
e8:fd:02:5f:59:2d:fd:b2:6a:86:50:2b:ff:4b:88:
0c:4f:56:20:2c:84:0f:96:8d:6f:3b:40:74:89:bc:
a4:cb:b2:98:e7:77:99:04:6e:b2:4b:10:fe:f3:f3:
14:a4:e2:95:2b:33:47:7d:35:c3:18:9f:11:24:df:
df:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1A:C9:88:04:31:67:23:7F:18:AA:0B:12:74:53:80:AB:9B:E8:BC
X509v3 Authority Key Identifier:
keyid:97:19:2B:65:D6:53:41:F3:72:F0:67:63:4F:11:FF:3C:96:C4:4A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxkrZdZTQfNy8GdjTxH_PJbESrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/512f64-20a5-4c37-9b6b-81104758c93c/1/lxkrZdZTQfNy8GdjTxH_PJbESrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8a:b1:6c:d7:d3:21:1a:3e:fc:c0:a8:a3:35:22:23:af:02:
da:c6:67:07:c5:4d:0e:fa:45:a4:8b:55:1e:18:9b:3f:be:a8:
ca:0b:c0:f7:54:7a:4f:b3:56:07:29:2e:d0:40:13:cd:66:29:
ae:ff:aa:14:a9:91:e3:f6:73:e9:85:7d:4c:c8:9d:61:ee:f1:
c1:e9:6e:1c:7b:76:a4:f4:c9:b1:d9:34:4b:21:72:c5:3e:d5:
b8:7a:85:60:4a:6e:ff:c4:be:9e:6e:4b:b7:d0:96:83:a0:bc:
9d:68:95:a8:3a:3e:31:72:78:2e:2d:07:01:f0:75:16:0d:19:
76:ef:d1:dc:cb:dc:8b:cb:51:f1:f9:8d:29:15:01:e7:00:25:
bb:f2:a5:f6:87:31:fb:f8:72:a1:d7:70:8a:6c:b2:8b:21:36:
b4:82:ad:6a:e6:3a:59:3f:21:df:4c:bc:d7:20:b2:99:1d:aa:
d4:63:21:68:89:83:6e:ef:ec:c6:04:b1:86:50:fc:92:0a:67:
4a:46:1f:6a:90:83:5a:d8:c6:46:ec:a6:1a:35:93:77:55:42:
45:17:ea:ca:03:78:b1:33:71:60:4a:c3:2a:f4:72:e2:51:b1:
58:51:ec:c5:87:d0:35:0b:1b:cc:9b:8d:5b:2f:de:92:0c:19:
bf:10:23:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF48W3Q/xKnP1JgmQQmo5X7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MTkyYjY1ZDY1MzQxZjM3MmYwNjc2MzRmMTFmZjNjOTZj
NDRhYjMwHhcNMjYxMDI2MTYwMDUwWhcNMjYxMDI3MTYwMDUwWjAzMTEwLwYDVQQD
Eyg2NjFhYzk4ODA0MzE2NzIzN2YxOGFhMGIxMjc0NTM4MGFiOWJlOGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3n7Xud+Ot1cIV5N83cIg4DTS4Sud
uYn2UEGJzNEffbgkXM6YCr1AB31vuPxOs9WTj/j08V4yAbrpwBUpkWhiwJ/Z3iPc
WFuLy/xL0SPUXw4zJ8Nc+5J21DnEian4On1hU8BW9jlxxcFkdug0gU6Ka4RfR/wb
IYO4ZbDKcG/smJoSenW6Qms7ZQDRclKt7TSNQSGPJuKP6B3Ay7xm9GJFIzj6AcpU
mYb0VZGH0yQE8ZtFaW5lAg4n95xrKtHMMN/OFWTo/QJfWS39smqGUCv/S4gMT1Yg
LIQPlo1vO0B0ibyky7KY53eZBG6ySxD+8/MUpOKVKzNHfTXDGJ8RJN/fqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYayYgEMWcjfxiqCxJ0U4Crm+i8MB8GA1UdIwQY
MBaAFJcZK2XWU0HzcvBnY08R/zyWxEqzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhrclpkWlRRZk55OEdkalR4SF9QSmJFU3JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81MTJmNjQtMjBhNS00YzM3LTliNmIt
ODExMDQ3NThjOTNjLzEvbHhrclpkWlRRZk55OEdkalR4SF9QSmJFU3JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81MTJmNjQtMjBhNS00YzM3LTliNmItODExMDQ3NThjOTNj
LzEvbHhrclpkWlRRZk55OEdkalR4SF9QSmJFU3JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYqxbNfT
IRo+/MCoozUiI68C2sZnB8VNDvpFpItVHhibP76oygvA91R6T7NWByku0EATzWYp
rv+qFKmR4/Zz6YV9TMidYe7xweluHHt2pPTJsdk0SyFyxT7VuHqFYEpu/8S+nm5L
t9CWg6C8nWiVqDo+MXJ4Li0HAfB1Fg0Zdu/R3Mvci8tR8fmNKRUB5wAlu/Kl9ocx
+/hyoddwimyyiyE2tIKtauY6WT8h30y81yCymR2q1GMhaImDbu/sxgSxhlD8kgpn
SkYfapCDWtjGRuymGjWTd1VCRRfqygN4sTNxYErDKvRy4lGxWFHsxYfQNQsbzJuN
Wy/ekgwZvxAj/Q==
-----END CERTIFICATE-----
Generated at Tue Oct 27 01:00:06 2026 by rpki-client