Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
File: LXR59FZDorguENq_c-_vdwOx4tI.mft (raw, json)
Hash identifier: 6FluIK/NTmxHmdT0lJb+WnmE0Z35OeAJVybwB/TiRVE=
Subject key identifier: 95:E2:CE:FE:52:18:65:30:CC:54:ED:41:1F:A7:43:A9:3D:17:54:3A
Authority key identifier: 2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2
Certificate issuer: /CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2
Certificate serial: 019D39AEE6A436803A8E7E3F0C4513074232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 13:00:56 +0000
Manifest this update: Sun 29 Mar 2026 13:00:56 +0000
Manifest next update: Mon 30 Mar 2026 13:00:56 +0000
Files and hashes: 1: 7GKSUsC2-EZN7XkuEfWum4yKSTg.roa (hash: 0/D0ft4/Akr9FC1mkgoFrsHQKcBzONWj8zopSzgBrVU=)
2: LXR59FZDorguENq_c-_vdwOx4tI.crl (hash: 3wAAA+jHivJ6kYrYdSM8tdFkZfQp1ldIR+QRRpqJVeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:e6:a4:36:80:3a:8e:7e:3f:0c:45:13:07:42:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2
Validity
Not Before: Mar 29 13:00:56 2026 GMT
Not After : Mar 30 13:00:56 2026 GMT
Subject: CN=95e2cefe52186530cc54ed411fa743a93d17543a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:31:dd:c0:cb:18:05:48:26:22:64:e4:dd:
0d:26:e5:b3:e5:26:df:0c:12:4a:b9:ae:e1:44:88:
37:e6:03:ed:dc:09:c9:e4:f4:4c:09:25:7b:25:c7:
dc:f5:f9:b2:8f:d5:58:5e:ef:08:1e:b2:5f:9e:87:
4c:d6:2d:cf:3f:e8:b5:e8:54:6d:e1:8a:9b:da:39:
c6:c5:68:b3:4e:1a:e6:9f:ce:0a:59:7b:17:81:80:
8d:75:cd:35:fc:66:18:18:ae:63:67:d2:b6:c1:ca:
f9:24:44:0f:cc:74:5c:a4:6e:eb:05:aa:02:07:4e:
bc:35:f5:9b:b6:b0:41:7a:87:c6:00:19:49:3b:48:
0b:d2:2e:99:9f:88:90:71:0f:9d:fb:9d:07:a1:c3:
97:9c:f1:73:82:cc:ad:52:05:3f:e9:09:4f:5a:2f:
27:23:81:9d:99:7e:a9:85:7d:c6:96:51:60:1b:37:
99:b6:77:17:89:e2:8f:6a:8a:87:65:99:ca:33:32:
8d:50:c3:1e:00:1a:9e:e3:3b:c2:4b:0a:4e:0e:40:
9a:31:23:21:49:4c:5e:08:66:b3:53:71:4f:9b:4b:
9b:e8:76:12:75:bc:dc:d2:6a:06:77:6d:92:a5:da:
4d:b0:0b:8c:d0:50:44:25:16:e9:e8:fe:57:be:bf:
4b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E2:CE:FE:52:18:65:30:CC:54:ED:41:1F:A7:43:A9:3D:17:54:3A
X509v3 Authority Key Identifier:
keyid:2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:02:d1:a4:48:34:e5:bd:1b:96:8b:9a:6e:94:fa:98:21:a2:
1f:83:10:85:e7:67:3f:e4:c8:f5:40:e9:64:49:6a:79:b9:30:
b5:73:ea:3e:79:1b:e3:7b:4f:ba:c3:57:e5:c2:78:65:f0:a9:
6a:a2:19:c5:b4:77:29:1b:e2:33:3b:94:b6:a4:6a:ba:01:25:
05:95:2c:a8:87:5a:82:db:6e:88:d7:2d:4c:0e:54:af:af:ac:
b6:86:6c:3d:b7:4c:bc:74:87:ea:3c:ce:d0:86:2f:36:55:41:
c0:5c:23:f2:66:ba:0e:d9:0a:5b:8f:15:b6:34:4d:17:39:3f:
b1:83:09:76:f4:d2:39:28:45:79:34:f8:0a:1e:42:d3:5b:44:
6b:2d:ce:49:7c:6c:9a:2e:ee:11:ea:e1:77:2d:77:80:21:11:
b6:75:24:4f:0b:4f:1c:f4:64:86:38:d8:00:5a:e7:63:60:8d:
16:9c:eb:6f:74:14:c0:c3:9e:9e:7c:a8:e5:31:11:a7:78:80:
ea:fc:70:58:f3:fe:ed:da:f1:a4:d7:49:4d:cc:54:88:5f:28:
a8:21:ac:26:a8:60:77:bb:87:f3:db:18:c9:00:51:81:25:6f:
3e:1d:7b:b9:e7:ea:84:4a:ec:8e:82:20:70:db:ad:f7:25:cb:
9d:ae:e0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:28 2026 by rpki-client