Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
File: LxiqH1XWNcliBMp5qCmT-87BUSw.mft (raw, json)
Hash identifier: oxd2CawCUJwmbtdGE5S1Ik4X4MmVeTTU9r2f3Yae+Ts=
Subject key identifier: 4E:84:EF:E5:72:DE:4A:C9:DF:7C:38:05:B1:BA:12:46:C2:2F:0F:1D
Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Certificate serial: 01A159D4B39DD4F25A7CD1E8673015E90920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
Manifest number: 1AB4
Signing time: Tue 20 Oct 2026 15:01:14 +0000
Manifest this update: Tue 20 Oct 2026 15:01:14 +0000
Manifest next update: Wed 21 Oct 2026 15:01:14 +0000
Files and hashes: 1: LgLEIgozDh6ZtieL7JWKGQ61yzE.roa (hash: BgRl5tIbVsSwLTDHr7kVBjnhqq09mtoEkAcyM+VA2Ws=)
2: LxiqH1XWNcliBMp5qCmT-87BUSw.crl (hash: pWC2uEIcIlxm3mI6e7pBCyPz4dQLbqKqeBYkKtwBm5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:d4:b3:9d:d4:f2:5a:7c:d1:e8:67:30:15:e9:09:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Validity
Not Before: Oct 20 15:01:14 2026 GMT
Not After : Oct 21 15:01:14 2026 GMT
Subject: CN=4e84efe572de4ac9df7c3805b1ba1246c22f0f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ab:a0:19:1b:a4:d2:34:a8:32:a9:4d:8d:24:
bf:ce:5b:98:c6:dc:a4:8f:9a:f0:61:e6:13:69:36:
c9:e3:a9:39:0a:36:b8:10:24:8e:94:a7:6d:95:dc:
8e:6c:90:1c:db:35:de:3e:79:00:ca:63:78:fa:02:
7d:6d:b5:59:c5:f1:f5:9d:1c:02:27:77:60:3b:ad:
74:2a:3a:e9:c8:0e:f6:e4:df:e0:86:9c:4c:a3:75:
86:2c:9f:b4:1e:a8:f5:1c:e5:90:83:bf:c8:dc:46:
19:41:4f:40:99:fc:39:42:2f:d4:5f:f3:f2:62:03:
73:cc:dc:ca:b1:f8:4b:65:36:d9:fc:49:da:76:ad:
80:c4:23:c2:88:4f:c2:f4:c8:e5:26:05:c7:6d:8e:
2e:c0:5d:4a:7e:b2:e3:5a:6e:d3:90:75:82:97:e3:
d4:a2:e9:bd:7e:ca:2e:50:e1:c5:7f:7b:0f:8e:14:
93:29:db:71:26:c6:27:ed:02:ef:3c:8d:c4:a9:1b:
b5:b1:ba:d1:98:0a:2c:f3:6d:cd:89:ea:15:a6:0b:
92:77:09:43:b5:d4:05:bd:e1:c6:9b:2e:f0:03:69:
02:01:66:35:41:16:c5:1a:e7:4c:b6:22:b5:03:be:
d2:20:39:5e:16:6e:24:af:7d:9c:24:f6:a3:60:ba:
0c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:84:EF:E5:72:DE:4A:C9:DF:7C:38:05:B1:BA:12:46:C2:2F:0F:1D
X509v3 Authority Key Identifier:
keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:9f:a0:ef:4b:94:94:1b:1d:57:a4:b6:b1:c7:d1:cf:77:a5:
d8:43:94:e8:57:4f:55:7d:cd:d1:cf:97:7b:ce:18:50:4c:bb:
af:7f:6b:4a:02:c9:5f:8e:a2:3e:a8:eb:48:56:ec:dd:0a:89:
82:74:23:13:98:b2:b3:52:34:f1:a9:c2:d8:4b:b1:13:5c:3f:
ec:0b:1a:d5:9d:89:a9:b3:91:93:c0:e5:3f:dc:38:9e:c7:c5:
c0:7d:ed:f6:72:8e:47:c0:9b:26:13:93:39:28:7a:08:1d:b0:
63:a1:49:2b:ce:2a:36:69:43:6f:3d:c8:f7:f7:df:7d:37:de:
7f:aa:f5:ae:28:74:a9:cc:a7:fb:df:91:98:65:a4:eb:14:26:
22:a0:eb:6d:23:13:59:ce:16:7e:2a:12:2b:f6:ba:91:ec:dd:
33:b4:eb:c2:17:7d:77:7e:ec:fd:de:1d:78:73:59:f6:8d:f5:
dc:52:62:a4:72:c5:54:56:b6:2f:5e:ea:c7:fc:09:d4:43:74:
aa:04:ae:7f:ab:9d:24:ad:37:53:f2:cd:a0:29:be:3a:1e:d3:
90:a7:0d:6f:b0:44:b7:92:5b:6a:e0:a5:46:e0:97:53:a4:f2:
ba:47:be:d2:ee:29:91:16:66:bb:dd:41:93:9d:2f:2a:dc:0e:
5b:98:87:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:46:37 2026 by rpki-client