Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
File: LxiqH1XWNcliBMp5qCmT-87BUSw.mft (raw, json)
Hash identifier: 4O7oG86SjsnuiWG5cpU7QxMPjCKgdcmx0Fcb2UoG2bA=
Subject key identifier: FC:68:DC:BC:72:31:1B:DF:21:E3:E6:98:BB:18:29:AE:35:87:5C:84
Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Certificate serial: 019EFD60508B84D4FCD1E8335099348ED814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
Manifest number: 197B
Signing time: Thu 25 Jun 2026 06:03:28 +0000
Manifest this update: Thu 25 Jun 2026 06:03:28 +0000
Manifest next update: Fri 26 Jun 2026 06:03:28 +0000
Files and hashes: 1: LgLEIgozDh6ZtieL7JWKGQ61yzE.roa (hash: BgRl5tIbVsSwLTDHr7kVBjnhqq09mtoEkAcyM+VA2Ws=)
2: LxiqH1XWNcliBMp5qCmT-87BUSw.crl (hash: Ebj0RIni9lH7zOW1MOZm4yXThqaH7xlwQ5/HBCwI2U8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Jun 2026 06:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:60:50:8b:84:d4:fc:d1:e8:33:50:99:34:8e:d8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Validity
Not Before: Jun 25 06:03:28 2026 GMT
Not After : Jun 26 06:03:28 2026 GMT
Subject: CN=fc68dcbc72311bdf21e3e698bb1829ae35875c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:11:d6:4e:72:a7:f1:fe:64:8e:bf:31:fa:
82:88:99:bc:e0:bf:97:d4:18:11:2b:0d:5b:ec:8b:
10:d9:de:a3:64:2e:98:88:7b:e3:b4:41:4a:58:c0:
e9:cb:46:94:38:bc:19:83:a1:43:4a:67:ae:18:f3:
24:85:11:81:59:0a:4d:c6:e3:2e:28:23:1f:f8:10:
81:0f:25:5f:32:85:bf:33:bf:2c:86:11:e6:67:7a:
9e:21:15:44:36:a6:9e:82:c1:a8:ee:66:b7:6f:38:
58:7a:96:2a:56:c3:38:24:ed:2a:bd:16:dd:74:6d:
cd:e0:7d:7b:6a:33:e7:78:18:f4:fc:d0:a8:44:a6:
03:6c:94:0e:f4:39:8d:21:cd:c9:6a:73:71:be:df:
dc:b3:29:19:07:82:b7:21:c7:53:96:9c:a5:8f:4b:
25:6b:ff:14:ce:90:5b:21:26:ba:e7:e4:1c:7e:ca:
96:8c:c3:06:51:3c:35:9a:1a:cd:a6:04:9f:3f:b7:
81:04:9e:b1:8d:9b:9f:c2:b8:a0:44:ca:81:31:92:
dd:ec:e2:75:08:44:d4:0e:6d:d0:a5:bc:5c:d7:92:
2a:c9:f6:0c:fc:d5:1e:1b:13:ae:ae:4c:31:8c:a8:
cb:20:c3:63:4c:18:9b:2d:c8:30:45:94:16:1b:19:
ff:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:68:DC:BC:72:31:1B:DF:21:E3:E6:98:BB:18:29:AE:35:87:5C:84
X509v3 Authority Key Identifier:
keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b3:1b:00:8f:1c:f0:b6:be:92:cb:71:a8:71:4a:f1:41:99:
1c:d2:ee:1c:2b:7f:13:20:2e:a4:c4:30:11:fb:dc:42:1d:15:
0f:3c:8b:3f:38:66:2b:56:c0:06:0f:c6:5d:04:25:38:0d:ad:
83:4a:d2:53:d5:8e:4b:1a:84:21:fd:1e:49:4e:45:2b:b8:9c:
53:7d:e5:04:ff:20:ee:ec:83:fe:ae:6e:b9:1a:0f:cb:47:db:
de:77:5a:29:8e:b3:00:af:18:7f:10:b3:a5:ab:35:6d:0d:cf:
f4:35:37:0b:5c:1b:11:7c:1e:29:60:d6:2f:b5:c9:b7:83:34:
6e:e3:13:cd:32:b2:42:43:7b:dc:b5:ac:c0:2e:26:eb:5c:83:
d5:36:5e:d0:bd:58:04:fa:4c:1e:08:af:2b:e8:2d:a5:20:81:
35:e7:92:5d:3e:ff:83:0c:fb:2f:83:83:44:32:3e:25:57:ba:
9f:97:03:f1:0d:5d:6b:d0:60:4a:7f:9d:40:e0:e2:87:53:7e:
68:a5:15:7e:4a:69:f1:0c:9e:ad:7e:36:41:10:61:8d:45:2c:
cb:e6:75:40:71:2b:4d:ed:7f:0d:58:a9:08:d0:c0:66:58:f2:
b2:0b:87:c5:d5:eb:7c:f8:6c:34:e6:22:b9:91:95:1a:56:e9:
6b:db:89:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ79YFCLhNT80egzUJk0jtgUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMThhYTFmNTVkNjM1Yzk2MjA0Y2E3OWE4Mjk5M2ZiY2Vj
MTUxMmMwHhcNMjYwNjI1MDYwMzI4WhcNMjYwNjI2MDYwMzI4WjAzMTEwLwYDVQQD
EyhmYzY4ZGNiYzcyMzExYmRmMjFlM2U2OThiYjE4MjlhZTM1ODc1Yzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1UR1k5yp/H+ZI6/MfqCiJm84L+X
1BgRKw1b7IsQ2d6jZC6YiHvjtEFKWMDpy0aUOLwZg6FDSmeuGPMkhRGBWQpNxuMu
KCMf+BCBDyVfMoW/M78shhHmZ3qeIRVENqaegsGo7ma3bzhYepYqVsM4JO0qvRbd
dG3N4H17ajPneBj0/NCoRKYDbJQO9DmNIc3JanNxvt/csykZB4K3IcdTlpylj0sl
a/8UzpBbISa65+QcfsqWjMMGUTw1mhrNpgSfP7eBBJ6xjZufwrigRMqBMZLd7OJ1
CETUDm3Qpbxc15IqyfYM/NUeGxOurkwxjKjLIMNjTBibLcgwRZQWGxn/DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxo3LxyMRvfIePmmLsYKa41h1yEMB8GA1UdIwQY
MBaAFC8Yqh9V1jXJYgTKeagpk/vOwVEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHhpcUgxWFdOY2xpQk1wNXFDbVQtODdCVVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81MmU5OTctNmQ5YS00NWFlLWE3YzIt
MGQyMDVmYjFhZDA1LzEvTHhpcUgxWFdOY2xpQk1wNXFDbVQtODdCVVN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81MmU5OTctNmQ5YS00NWFlLWE3YzItMGQyMDVmYjFhZDA1
LzEvTHhpcUgxWFdOY2xpQk1wNXFDbVQtODdCVVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7MbAI8c
8La+kstxqHFK8UGZHNLuHCt/EyAupMQwEfvcQh0VDzyLPzhmK1bABg/GXQQlOA2t
g0rSU9WOSxqEIf0eSU5FK7icU33lBP8g7uyD/q5uuRoPy0fb3ndaKY6zAK8YfxCz
pas1bQ3P9DU3C1wbEXweKWDWL7XJt4M0buMTzTKyQkN73LWswC4m61yD1TZe0L1Y
BPpMHgivK+gtpSCBNeeSXT7/gwz7L4ODRDI+JVe6n5cD8Q1da9BgSn+dQODih1N+
aKUVfkpp8QyerX42QRBhjUUsy+Z1QHErTe1/DVipCNDAZljysguHxdXrfPhsNOYi
uZGVGlbpa9uJqA==
-----END CERTIFICATE-----
Generated at Thu Jun 25 15:32:27 2026 by rpki-client