Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
File: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft (raw, json)
Hash identifier: rkXs9OkaYufZuf9yBqbT2E8wWUE9M/utr1Ov18zntfs=
Subject key identifier: 1A:83:71:39:17:FA:20:7E:35:90:BA:49:38:A2:54:14:56:84:42:DE
Authority key identifier: 97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4
Certificate issuer: /CN=971533cb7a6796ac5c382b38dcf459f9176931f4
Certificate serial: 019FA1163CD1D7078C278087EB2E83EA71A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
Manifest number: 0A7B
Signing time: Mon 27 Jul 2026 01:00:16 +0000
Manifest this update: Mon 27 Jul 2026 01:00:16 +0000
Manifest next update: Tue 28 Jul 2026 01:00:16 +0000
Files and hashes: 1: JmkFCABPoX7SZe-QwBD6PChOSGk.roa (hash: xzMASuZ9G8RWkd86x5BZTykE+oySkmLx0mmIPA2Mdbo=)
2: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl (hash: MO3DMWpBI8q/EXnbVjImQ0L1Us5CAoZv/cdFp/lS2yI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:3c:d1:d7:07:8c:27:80:87:eb:2e:83:ea:71:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971533cb7a6796ac5c382b38dcf459f9176931f4
Validity
Not Before: Jul 27 01:00:16 2026 GMT
Not After : Jul 28 01:00:16 2026 GMT
Subject: CN=1a83713917fa207e3590ba4938a25414568442de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e3:fe:be:9c:ca:c0:dd:83:dd:55:40:6d:53:
c1:52:c4:b6:35:03:04:ac:42:c4:cd:ff:67:8c:93:
f2:4d:ff:c9:f3:48:ba:3c:f5:3c:50:4d:f4:13:b1:
70:29:55:1b:06:32:43:59:c5:84:00:11:09:d8:66:
ff:2f:be:e7:5b:0c:af:60:42:1a:bd:d7:86:f5:1d:
b3:90:c7:91:b4:65:6d:23:b2:a5:61:68:39:89:e9:
60:52:9e:f9:8a:a0:2e:83:88:f0:e0:98:4a:2d:b2:
d1:c7:52:2b:0a:9f:69:d4:c4:bf:2b:b3:bb:64:eb:
a4:dd:55:74:d1:32:4c:fe:42:28:a7:4a:7f:d1:bc:
89:3d:b2:bb:ae:ed:97:fc:0c:90:44:88:5d:41:4f:
d3:89:ba:99:ad:76:27:92:46:36:4f:4e:e0:13:57:
e9:08:7c:77:1a:b1:8c:a1:11:44:6e:7c:e2:8d:de:
0a:54:3a:87:5c:aa:8c:ee:0a:a9:0b:e5:f4:15:5e:
ed:86:8b:5d:29:e2:22:8c:7b:5d:17:98:4f:fa:8d:
6f:d3:8c:c2:24:eb:a3:f1:1e:ec:9d:fc:6a:5d:d4:
c3:ad:56:0d:17:9d:64:9c:24:2c:8d:00:aa:be:4c:
c7:cf:24:5b:da:c1:7b:c6:cc:a7:1a:d5:48:c1:03:
19:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:83:71:39:17:FA:20:7E:35:90:BA:49:38:A2:54:14:56:84:42:DE
X509v3 Authority Key Identifier:
keyid:97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7c:81:f8:bd:fc:9f:2c:8e:94:4f:cb:59:cb:1c:3c:bc:de:
52:48:e6:b9:2a:ec:4c:09:02:ac:30:35:7f:6e:4e:5f:65:27:
b1:cd:33:b8:93:e9:ea:46:ea:0d:26:24:fb:12:2c:a6:87:c2:
e5:96:46:11:b2:2d:61:76:b8:b2:98:37:a8:f5:18:d6:c6:b2:
04:87:a5:64:9d:3e:61:9a:6f:54:e9:ce:90:fd:60:c3:ec:79:
bf:8f:f7:c5:ec:b0:18:b9:41:15:05:6b:86:7f:1c:29:2a:d0:
28:90:8a:e3:e1:e2:15:4c:62:a4:dc:64:2e:ab:c0:05:6c:c6:
74:67:23:5a:be:2a:60:b8:31:81:e0:05:6a:20:6b:c2:b6:e0:
5a:b0:31:50:d6:ec:bb:26:5d:3c:da:3e:4d:6c:dd:90:8b:5d:
dd:ff:d2:c3:33:a1:20:c9:29:23:5e:ab:6a:dd:b6:5e:9c:16:
17:03:db:ac:20:58:71:b0:ef:e8:2e:ca:98:e2:00:38:2c:4c:
40:d5:32:22:73:1a:cc:77:45:b5:96:64:0e:89:ab:b1:f7:e0:
cd:5a:cc:93:ec:21:e6:ad:b1:b7:46:f7:d8:b0:f0:71:00:f8:
4b:4f:71:bb:f4:af:e0:e1:9e:46:33:f5:50:aa:be:68:24:f5:
f6:5d:4b:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hFjzR1weMJ4CH6y6D6nGiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MTUzM2NiN2E2Nzk2YWM1YzM4MmIzOGRjZjQ1OWY5MTc2
OTMxZjQwHhcNMjYwNzI3MDEwMDE2WhcNMjYwNzI4MDEwMDE2WjAzMTEwLwYDVQQD
EygxYTgzNzEzOTE3ZmEyMDdlMzU5MGJhNDkzOGEyNTQxNDU2ODQ0MmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOP+vpzKwN2D3VVAbVPBUsS2NQME
rELEzf9njJPyTf/J80i6PPU8UE30E7FwKVUbBjJDWcWEABEJ2Gb/L77nWwyvYEIa
vdeG9R2zkMeRtGVtI7KlYWg5ielgUp75iqAug4jw4JhKLbLRx1IrCp9p1MS/K7O7
ZOuk3VV00TJM/kIop0p/0byJPbK7ru2X/AyQRIhdQU/TibqZrXYnkkY2T07gE1fp
CHx3GrGMoRFEbnzijd4KVDqHXKqM7gqpC+X0FV7thotdKeIijHtdF5hP+o1v04zC
JOuj8R7snfxqXdTDrVYNF51knCQsjQCqvkzHzyRb2sF7xsynGtVIwQMZmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqDcTkX+iB+NZC6STiiVBRWhELeMB8GA1UdIwQY
MBaAFJcVM8t6Z5asXDgrONz0WfkXaTH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhVenkzcG5scXhjT0NzNDNQUlotUmRwTWZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kNjU3N2QtZjJkMi00NTMwLWI5ZDIt
MzllY2E0NzI2NjhiLzEvbHhVenkzcG5scXhjT0NzNDNQUlotUmRwTWZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9kNjU3N2QtZjJkMi00NTMwLWI5ZDItMzllY2E0NzI2Njhi
LzEvbHhVenkzcG5scXhjT0NzNDNQUlotUmRwTWZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHyB+L38
nyyOlE/LWcscPLzeUkjmuSrsTAkCrDA1f25OX2Unsc0zuJPp6kbqDSYk+xIspofC
5ZZGEbItYXa4spg3qPUY1sayBIelZJ0+YZpvVOnOkP1gw+x5v4/3xeywGLlBFQVr
hn8cKSrQKJCK4+HiFUxipNxkLqvABWzGdGcjWr4qYLgxgeAFaiBrwrbgWrAxUNbs
uyZdPNo+TWzdkItd3f/SwzOhIMkpI16rat22XpwWFwPbrCBYcbDv6C7KmOIAOCxM
QNUyInMazHdFtZZkDomrsffgzVrMk+wh5q2xt0b32LDwcQD4S09xu/Sv4OGeRjP1
UKq+aCT19l1LXg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:26:11 2026 by rpki-client