Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
File: LxiqH1XWNcliBMp5qCmT-87BUSw.mft (raw, json)
Hash identifier: i6H6fZ+frDvsg3qO+Hi+ZTk6w2eOr5ZsEvDuOrsDpaI=
Subject key identifier: 46:C6:53:95:72:88:99:48:68:1B:F7:13:2E:E5:B3:24:3F:28:38:5F
Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Certificate serial: 01A05AE92A9EC4E7F3763B72A5F11EFC1768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
Manifest number: 1A30
Signing time: Tue 01 Sep 2026 03:00:25 +0000
Manifest this update: Tue 01 Sep 2026 03:00:25 +0000
Manifest next update: Wed 02 Sep 2026 03:00:25 +0000
Files and hashes: 1: LgLEIgozDh6ZtieL7JWKGQ61yzE.roa (hash: BgRl5tIbVsSwLTDHr7kVBjnhqq09mtoEkAcyM+VA2Ws=)
2: LxiqH1XWNcliBMp5qCmT-87BUSw.crl (hash: +Gn3NdCnCS3fevtQ5Hk8d8BiCgsYmJNE5bUtv9ISvq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:e9:2a:9e:c4:e7:f3:76:3b:72:a5:f1:1e:fc:17:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Validity
Not Before: Sep 1 03:00:25 2026 GMT
Not After : Sep 2 03:00:25 2026 GMT
Subject: CN=46c6539572889948681bf7132ee5b3243f28385f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:78:21:a1:f1:92:4a:4d:34:4d:eb:5c:94:
03:46:93:d7:9e:8a:56:06:df:31:12:9c:c0:c2:9d:
f2:38:f6:d6:06:98:ee:9f:9b:39:1c:b1:4c:ef:b5:
63:f7:99:71:5f:ee:18:1c:65:d0:4c:0c:b2:ef:6b:
db:f5:05:89:80:95:e0:d4:b5:58:d6:be:2d:7f:45:
2d:7c:0f:a4:10:4a:a9:65:7f:92:85:15:96:39:a5:
e6:30:87:94:99:c2:16:53:78:a0:19:e9:e0:67:b5:
77:d9:cf:1b:ae:1d:bb:81:e6:f8:60:17:8b:3a:db:
be:03:d9:59:29:03:7d:55:ec:a9:cc:fc:00:f2:10:
82:69:bb:5e:cb:23:57:61:4b:e5:9f:f0:11:53:af:
6c:4a:83:44:f8:c9:31:88:1c:02:64:05:f9:c5:22:
76:8a:0e:41:aa:15:74:6a:1e:21:ab:28:89:a8:5a:
5d:06:44:aa:e9:56:f1:b6:62:09:9f:15:60:64:8f:
c1:97:0f:41:e2:4a:a0:08:74:90:e4:c8:1e:46:a9:
78:9f:62:ef:d0:7c:d0:93:23:5d:b9:7a:61:7a:26:
6f:58:5e:b0:ed:95:be:13:9b:b5:42:22:c4:07:a8:
d2:20:0a:3f:3c:69:80:e0:2b:40:06:95:4b:9a:69:
ab:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C6:53:95:72:88:99:48:68:1B:F7:13:2E:E5:B3:24:3F:28:38:5F
X509v3 Authority Key Identifier:
keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:36:f5:24:1e:4a:b2:b1:94:d3:02:2d:91:29:f7:3c:87:ef:
c6:ef:bf:e2:95:9f:0b:41:e0:ad:4a:10:90:0d:a8:b0:74:60:
f8:ec:c2:df:95:6f:ca:2d:b0:e4:08:e4:93:90:64:33:0d:35:
2f:f2:36:dc:8e:f3:d4:f9:9d:9c:c9:da:fd:ff:de:ca:45:64:
0d:80:31:d7:96:23:7c:ca:b3:f0:17:b8:16:93:d1:c3:37:35:
fa:13:06:09:57:69:a7:9f:39:e3:6b:b5:3f:83:33:58:12:44:
39:ba:a9:d1:e3:e2:eb:0d:dc:01:ff:63:c3:30:77:14:5b:d9:
6d:aa:c1:68:92:be:94:22:27:d9:ad:6b:94:fb:93:9d:05:56:
87:a5:15:34:e9:c6:7d:9b:0e:52:17:ee:f3:aa:f7:27:51:7a:
c8:2d:ae:b1:e8:24:77:8b:c9:1f:bd:f6:b6:d7:d7:3b:60:0a:
c0:14:9c:95:e4:69:d9:dd:16:0f:60:d3:88:36:65:2a:55:9b:
86:2e:8e:7e:5f:8c:0a:5a:3d:86:c9:51:2c:57:86:87:b1:87:
28:06:55:e0:8c:b8:c2:4f:cd:f5:3f:8b:66:50:e0:4a:62:e2:
a7:c4:ef:46:a0:b7:60:92:e9:bb:34:bd:67:4f:98:83:57:45:
1c:a4:86:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:50:22 2026 by rpki-client