Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
File: LxiqH1XWNcliBMp5qCmT-87BUSw.mft (raw, json)
Hash identifier: 2t46kDUypiVmITK51+G8VaSrd1BP0GGLJB2uMfqOE0w=
Subject key identifier: D7:7C:C0:DC:62:A9:E2:D7:5D:6D:3F:CF:4E:10:7A:3C:E3:78:EA:DF
Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Certificate serial: 019D378998DAF96F5E3316A6B5E9C2B085BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 03:00:57 +0000
Manifest this update: Sun 29 Mar 2026 03:00:57 +0000
Manifest next update: Mon 30 Mar 2026 03:00:57 +0000
Files and hashes: 1: LgLEIgozDh6ZtieL7JWKGQ61yzE.roa (hash: BgRl5tIbVsSwLTDHr7kVBjnhqq09mtoEkAcyM+VA2Ws=)
2: LxiqH1XWNcliBMp5qCmT-87BUSw.crl (hash: 7cxwRNBh8gFCfpKASZ/N4Y8bBXeP1ixl7413E5z8ifA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:98:da:f9:6f:5e:33:16:a6:b5:e9:c2:b0:85:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Validity
Not Before: Mar 29 03:00:57 2026 GMT
Not After : Mar 30 03:00:57 2026 GMT
Subject: CN=d77cc0dc62a9e2d75d6d3fcf4e107a3ce378eadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:f7:b2:c5:89:61:b5:ec:41:66:96:17:c3:
0f:a9:93:7a:29:82:56:01:dd:bf:37:c7:73:88:da:
3f:2c:ba:b3:cb:2a:d4:29:7e:de:0c:9a:cc:93:01:
79:62:a9:af:17:21:26:ce:fd:5e:0c:b6:73:98:dd:
6a:62:78:d8:c0:59:22:a2:ce:86:78:71:82:39:df:
16:ab:9f:ce:94:bf:be:b6:e6:0d:b8:a5:60:18:aa:
26:fa:74:c5:eb:24:f2:f2:de:ba:0b:61:37:d0:d3:
82:48:69:a1:36:65:18:ea:48:e0:b5:4c:a3:dd:a3:
4a:b1:bb:01:84:de:e4:34:01:b3:e7:ea:7c:63:ce:
5a:8a:67:e6:35:6c:c5:4e:8b:67:eb:70:4b:1a:80:
24:d5:cf:aa:ad:3c:35:4e:64:85:8d:78:f4:cd:0b:
31:99:ae:84:c0:7d:a8:b4:07:c8:e0:4c:7a:42:cc:
c3:01:7f:ef:2d:70:ea:2a:27:7a:53:52:7d:4b:a7:
42:b0:99:e6:75:f1:29:e0:86:72:91:8f:e1:45:d3:
d2:b5:32:c7:6d:54:d4:a1:69:cc:85:52:55:16:0a:
6e:05:22:b8:cf:a9:84:19:77:3f:59:07:6f:bd:7f:
99:ac:14:11:fb:38:29:bc:d9:e4:8a:65:4b:a4:8f:
ff:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7C:C0:DC:62:A9:E2:D7:5D:6D:3F:CF:4E:10:7A:3C:E3:78:EA:DF
X509v3 Authority Key Identifier:
keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:cd:d7:ed:9d:db:e8:ac:ba:8b:6b:df:41:f3:e1:dd:9d:f7:
b4:64:e7:ea:cd:fb:e0:93:17:bb:b1:7b:c5:31:6c:c3:3f:78:
31:e1:c8:3b:27:b5:65:3c:74:7d:6c:c9:1a:27:6d:88:4e:0f:
d9:a4:12:a2:6a:53:62:0a:07:5d:0d:d9:30:46:02:c2:91:30:
5a:22:de:e5:74:0a:7b:83:f0:6e:26:62:74:b6:f2:1b:14:f0:
e4:67:43:7a:e2:8f:af:96:c0:46:f7:5a:06:1d:b7:0f:1f:4f:
e9:ee:5e:e2:fc:50:8d:d4:95:6a:79:52:ef:ab:84:35:18:be:
02:c0:d9:3f:cf:c8:07:ee:0b:77:6e:2f:b6:33:7f:3f:08:17:
8b:10:29:57:c9:7d:8b:34:9c:4c:33:8b:2a:91:fe:ae:0d:33:
39:5a:02:cf:2a:71:be:d1:53:af:d5:df:44:8c:8c:cc:c2:16:
24:73:de:85:8e:ce:3d:8a:10:22:83:72:f0:d1:dc:2d:c4:5b:
20:ff:78:f7:ce:3b:ac:af:d1:18:ce:8f:b8:a8:98:21:72:8b:
e1:2a:e7:fb:f4:8c:98:be:b3:ab:be:5d:8e:42:1a:b2:55:ab:
d2:e1:9e:0f:1c:95:ec:85:54:c4:a7:47:1e:36:df:bf:43:d1:
53:a6:af:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:56 2026 by rpki-client