Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
File: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft (raw, json)
Hash identifier: /okhnPBIFiHTSNc7p7Ld+wPmlYH8i+Q7ag9uuvkwbg0=
Subject key identifier: 39:37:AF:7B:7B:FF:F0:DB:75:07:CD:56:91:8B:AF:2A:CA:5D:64:C3
Authority key identifier: 97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4
Certificate issuer: /CN=971533cb7a6796ac5c382b38dcf459f9176931f4
Certificate serial: 019EB957FE888AA126204A4EDF7B1062745F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
Manifest number: 0A03
Signing time: Fri 12 Jun 2026 01:00:12 +0000
Manifest this update: Fri 12 Jun 2026 01:00:12 +0000
Manifest next update: Sat 13 Jun 2026 01:00:12 +0000
Files and hashes: 1: JmkFCABPoX7SZe-QwBD6PChOSGk.roa (hash: xzMASuZ9G8RWkd86x5BZTykE+oySkmLx0mmIPA2Mdbo=)
2: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl (hash: +r84PRFdDvtspQ921SgfYn4gR4HuVeZGH4wy9b8mHnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:57:fe:88:8a:a1:26:20:4a:4e:df:7b:10:62:74:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971533cb7a6796ac5c382b38dcf459f9176931f4
Validity
Not Before: Jun 12 01:00:12 2026 GMT
Not After : Jun 13 01:00:12 2026 GMT
Subject: CN=3937af7b7bfff0db7507cd56918baf2aca5d64c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d1:f7:02:d9:95:bf:e8:26:d0:72:dd:4c:cc:
b9:1e:44:1f:07:a8:ec:31:47:80:47:13:47:73:82:
fc:10:c4:97:6b:19:5d:de:1d:ae:52:4d:ab:09:fb:
c2:73:25:d0:bb:d3:9c:d1:69:f7:51:d5:d4:a0:fb:
90:1c:1f:77:06:3d:d4:75:73:63:61:97:da:92:55:
19:1f:b0:c7:3d:13:9d:66:65:e0:fd:fe:8b:8b:af:
a1:a9:5f:6b:bf:bc:d7:de:de:ed:e8:30:e0:dd:81:
cf:06:ce:71:e9:2e:96:4a:50:a6:1d:29:4c:ca:d2:
d6:6a:26:80:3e:53:a5:af:6a:8e:75:51:c6:63:92:
66:10:5a:f3:45:a5:48:b8:a1:89:42:93:ca:aa:6e:
13:16:be:ef:e5:fa:15:cf:68:d5:5e:e1:b3:3b:e4:
32:08:14:97:30:ed:40:06:4e:41:b9:8c:ed:04:87:
72:11:09:f3:34:6a:d6:49:8e:5e:98:83:11:3d:57:
57:c4:8c:86:f0:79:40:f2:7f:eb:0c:9f:fb:c8:d1:
8e:05:43:8c:6f:a4:f0:dc:4c:14:82:69:0e:0f:99:
e4:47:ab:b5:bd:23:83:88:d5:20:67:a7:26:7d:eb:
83:c5:69:fe:ed:1e:5b:58:98:a4:21:a6:d8:b6:68:
62:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:37:AF:7B:7B:FF:F0:DB:75:07:CD:56:91:8B:AF:2A:CA:5D:64:C3
X509v3 Authority Key Identifier:
keyid:97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d8:0f:86:82:79:b0:20:40:fe:3e:b1:d2:df:bf:25:d0:11:
0a:5b:0a:52:e7:2b:24:0a:b5:77:76:a2:09:4d:20:27:cc:28:
b1:53:32:6d:7a:37:d9:29:87:9d:1b:ee:04:7f:e3:35:03:85:
c2:40:78:cf:6d:65:12:b8:69:4e:7e:0f:eb:6f:2c:9e:6d:53:
3e:23:00:42:c3:0b:c7:95:12:39:95:f7:85:d9:dd:55:55:73:
9f:c5:5e:06:39:e1:62:c9:c1:52:11:37:cc:a8:b1:ef:1a:7c:
62:5f:fe:f6:6d:f8:69:6c:37:cf:65:75:43:95:45:8e:6e:34:
eb:39:77:17:96:12:01:45:51:a7:a0:43:46:c2:be:3e:aa:05:
ed:e2:68:1b:f8:a3:ac:ee:6d:35:90:2c:c8:84:2c:60:d0:3f:
6b:44:a8:34:75:e0:53:f3:1e:2b:4b:dc:cd:25:e4:4d:18:78:
40:d5:c4:d3:27:7f:af:d9:80:25:ba:97:25:59:61:ce:a4:11:
80:e8:91:80:ac:0c:18:0e:41:24:5d:25:9e:a8:69:15:0a:f9:
ca:5d:7b:d9:17:67:f8:2e:c7:a7:c9:6a:be:f9:d4:f5:f1:f8:
70:c4:0d:04:73:bd:d6:b3:07:58:66:bb:30:b7:19:29:a1:a8:
e1:99:9e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:09:53 2026 by rpki-client