Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
File: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft (raw, json)
Hash identifier: eT4NvTwWk6XGN+PlpBKSOJjOLvr5gWUrYeU2C6qyLO0=
Subject key identifier: 50:A6:BB:DB:6A:47:C9:95:64:29:10:BE:56:D0:15:08:F0:B1:65:A5
Authority key identifier: 97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12
Certificate issuer: /CN=97102c693af3a090f8f94ba1fd082db0924eaf12
Certificate serial: 019D378952A2DACF8D999EC87729D886A356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 03:00:39 +0000
Manifest this update: Sun 29 Mar 2026 03:00:39 +0000
Manifest next update: Mon 30 Mar 2026 03:00:39 +0000
Files and hashes: 1: Gv_wNpXfpWq-q_UPRh3AwBy396o.roa (hash: mb+6Z361/RYrR2bM4P/XCXIcCPG1uTGsxi5EGv9l1NI=)
2: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl (hash: iIMkXjhTrjV0eyNOk96XoOxYOn/tAMuzAKIBP5g0EGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:52:a2:da:cf:8d:99:9e:c8:77:29:d8:86:a3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97102c693af3a090f8f94ba1fd082db0924eaf12
Validity
Not Before: Mar 29 03:00:39 2026 GMT
Not After : Mar 30 03:00:39 2026 GMT
Subject: CN=50a6bbdb6a47c995642910be56d01508f0b165a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:5e:5c:ee:1f:3b:92:fe:39:2a:a4:03:8e:56:
74:26:6a:6c:ff:72:63:6a:3d:2b:64:f6:2b:e6:f2:
55:e9:19:31:ad:15:5c:c3:e2:55:74:88:c6:69:7c:
36:da:90:db:cf:3b:f1:c4:f6:7c:8c:3b:6b:27:68:
d7:e4:36:68:07:79:85:9a:2c:d9:10:0c:25:fa:d6:
3e:27:95:30:0a:5e:28:c8:44:6c:67:bb:60:ab:b4:
d1:bb:9a:2f:c6:34:6f:dd:5e:85:ec:20:7b:a3:24:
8c:54:d4:67:5c:58:db:4c:be:c8:96:73:d8:7e:30:
a3:a0:56:b0:b5:0a:6b:da:d2:24:ab:0b:86:a7:36:
f3:b2:77:e7:00:ea:4d:ee:20:c4:09:56:cb:44:03:
f9:9c:0e:f3:85:25:2b:2e:9a:b7:8a:7c:f7:a0:0c:
2b:d5:a5:30:d2:a0:11:16:f0:be:02:0a:81:1b:d4:
3a:d7:da:2c:e8:3a:8f:f2:83:fe:13:00:ab:62:7d:
0e:51:3d:19:dc:7e:56:46:9c:61:82:83:b8:36:64:
f5:ac:54:1f:16:cb:2b:a0:c8:04:8f:e7:76:ea:75:
ac:2d:bd:0d:a3:2a:b9:93:14:a1:8d:92:9e:d6:6d:
90:27:b7:2a:35:15:a1:f6:02:a3:e2:be:cf:04:39:
f3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A6:BB:DB:6A:47:C9:95:64:29:10:BE:56:D0:15:08:F0:B1:65:A5
X509v3 Authority Key Identifier:
keyid:97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:bb:96:29:22:78:5d:55:ea:1a:58:bb:14:28:5a:70:9e:a0:
f5:ff:2a:9a:12:dd:4a:94:e1:3b:12:5b:da:6e:cf:8e:09:71:
0a:02:a9:31:b9:15:68:f8:25:a9:2d:61:c3:2d:7f:e7:be:f7:
6b:b9:ad:7c:80:71:7d:68:f6:ef:96:9d:0c:84:21:88:4d:30:
8b:f6:a0:fc:42:c3:b8:d2:75:bf:36:b6:f6:3e:e4:fc:cb:73:
97:ce:4b:de:9d:c8:0a:d8:a5:d8:ce:b0:d8:93:51:cf:5e:ea:
02:f4:a6:9d:eb:0c:98:f4:3c:ad:62:04:bf:6b:8c:be:16:9e:
eb:63:2a:26:dc:3d:7b:e0:8a:bb:4c:a3:e4:60:4b:c5:ed:71:
5d:f1:74:2d:d4:8e:ec:96:eb:96:a1:2b:f5:98:41:79:6c:ee:
36:e3:4b:5b:ef:60:b2:8c:ba:2d:b8:c7:78:3a:41:cd:2e:b8:
98:90:09:78:ef:6e:fb:1c:3b:ec:a7:a8:03:1d:e6:8a:97:47:
22:88:bc:cd:f2:f9:87:4b:7c:31:ce:d9:ba:ca:6c:cc:fe:9d:
1e:52:52:38:47:c5:5d:e8:5d:27:4f:28:36:4c:ce:46:7a:35:
9f:b9:56:3d:1f:49:77:97:ef:04:a9:1d:ad:39:0e:5f:3b:86:
39:84:c5:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iVKi2s+NmZ7IdynYhqNWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MTAyYzY5M2FmM2EwOTBmOGY5NGJhMWZkMDgyZGIwOTI0
ZWFmMTIwHhcNMjYwMzI5MDMwMDM5WhcNMjYwMzMwMDMwMDM5WjAzMTEwLwYDVQQD
Eyg1MGE2YmJkYjZhNDdjOTk1NjQyOTEwYmU1NmQwMTUwOGYwYjE2NWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8F5c7h87kv45KqQDjlZ0Jmps/3Jj
aj0rZPYr5vJV6RkxrRVcw+JVdIjGaXw22pDbzzvxxPZ8jDtrJ2jX5DZoB3mFmizZ
EAwl+tY+J5UwCl4oyERsZ7tgq7TRu5ovxjRv3V6F7CB7oySMVNRnXFjbTL7IlnPY
fjCjoFawtQpr2tIkqwuGpzbzsnfnAOpN7iDECVbLRAP5nA7zhSUrLpq3inz3oAwr
1aUw0qARFvC+AgqBG9Q619os6DqP8oP+EwCrYn0OUT0Z3H5WRpxhgoO4NmT1rFQf
FssroMgEj+d26nWsLb0Noyq5kxShjZKe1m2QJ7cqNRWh9gKj4r7PBDnzeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCmu9tqR8mVZCkQvlbQFQjwsWWlMB8GA1UdIwQY
MBaAFJcQLGk686CQ+PlLof0ILbCSTq8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84ZGRhNDgtZTg0Yi00Y2E3LWFhZjQt
ZjUzZWY1MjFkYmUwLzEvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS84ZGRhNDgtZTg0Yi00Y2E3LWFhZjQtZjUzZWY1MjFkYmUw
LzEvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPruWKSJ4
XVXqGli7FChacJ6g9f8qmhLdSpThOxJb2m7PjglxCgKpMbkVaPglqS1hwy1/5773
a7mtfIBxfWj275adDIQhiE0wi/ag/ELDuNJ1vza29j7k/Mtzl85L3p3ICtil2M6w
2JNRz17qAvSmnesMmPQ8rWIEv2uMvhae62MqJtw9e+CKu0yj5GBLxe1xXfF0LdSO
7JbrlqEr9ZhBeWzuNuNLW+9gsoy6LbjHeDpBzS64mJAJeO9u+xw77KeoAx3mipdH
Ioi8zfL5h0t8Mc7ZuspszP6dHlJSOEfFXehdJ08oNkzORno1n7lWPR9Jd5fvBKkd
rTkOXzuGOYTFhQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:55 2026 by rpki-client