Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
File: lxru6oeY927JpDTnVjfs2IEJLsI.mft (raw, json)
Hash identifier: aXNnJUmZHjKEMyrfrMsh+92p8dgpDa/K2OQGreS1gyw=
Subject key identifier: C0:71:13:7B:8B:78:70:52:DC:6E:6F:15:B7:6D:36:F1:9B:7E:CD:B2
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 019E909346913E9E2ADD579EF4C0B9DFA418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
Manifest number: 1944
Signing time: Thu 04 Jun 2026 03:00:31 +0000
Manifest this update: Thu 04 Jun 2026 03:00:31 +0000
Manifest next update: Fri 05 Jun 2026 03:00:31 +0000
Files and hashes: 1: 9g8xNFb2G40vpUgQ83M1qATo9IM.roa (hash: XlOOaS5ddXCcXrWbzYLtTuliD0nsTkmll8658pyGZu4=)
2: cJ3CSy6b-K7_SvDOoh-SHmO50AI.roa (hash: ima6XXFyVR9RW0ytt/Ct7dNcbu+58VazOZOWGhgX3kc=)
3: jM-7nkDS5qjlb3w33JvghnsyuJw.roa (hash: d7SlxGUeBLsKibMsNC4PiGRQBSGoyvgsjw7sV20/+lM=)
4: lxru6oeY927JpDTnVjfs2IEJLsI.crl (hash: X6MhdN1BxmS1ysZj0lp6rLCpNamuCMfGUH83Sj5XN2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:93:46:91:3e:9e:2a:dd:57:9e:f4:c0:b9:df:a4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Jun 4 03:00:31 2026 GMT
Not After : Jun 5 03:00:31 2026 GMT
Subject: CN=c071137b8b787052dc6e6f15b76d36f19b7ecdb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:7a:e0:f4:49:c6:e9:85:73:cc:ad:18:3d:
bd:a4:0c:26:16:61:a0:54:50:57:41:a4:7a:03:e5:
fe:6a:50:e3:2d:48:06:ba:93:17:65:61:b1:58:13:
6e:6c:12:85:ac:8f:7a:b9:5b:2b:25:4b:b5:68:a5:
c2:32:53:32:cf:b2:54:08:cb:00:0e:04:d4:2c:dd:
91:4b:a5:85:43:a4:45:83:b5:cd:d0:50:bc:d3:9c:
01:51:35:02:4b:a5:48:a6:af:10:b4:9f:90:88:79:
64:c9:45:4d:1d:cf:f7:2f:44:3c:e9:e6:1f:fa:66:
48:8c:2b:93:45:91:64:b0:e4:09:98:f4:a7:92:d8:
46:a9:a1:df:d0:72:c7:0e:cb:8a:c8:98:c8:ea:3b:
92:30:81:c3:9f:a9:a6:83:0e:d6:4a:9f:34:b1:62:
de:94:83:0f:0c:53:a0:c3:69:e4:3b:9a:fb:a3:79:
29:54:27:ca:0b:6a:bf:e4:f5:ec:45:fe:a6:9b:f8:
ac:a2:69:9d:d9:58:97:95:b4:a4:6c:a5:ce:6f:cd:
06:2d:ab:b5:15:d4:70:39:7b:12:23:0c:f7:8d:d4:
15:ec:23:fc:26:b1:6c:f1:c5:66:28:bf:b8:5a:33:
0e:16:bb:4d:df:06:9e:dd:17:5a:94:74:bc:1b:eb:
5e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:71:13:7B:8B:78:70:52:DC:6E:6F:15:B7:6D:36:F1:9B:7E:CD:B2
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:52:4b:5a:7e:4a:3d:6c:87:b7:1b:48:b5:27:16:c7:42:56:
10:26:f3:90:76:c7:af:bb:4e:c2:4a:fb:13:18:74:f8:9d:ab:
18:ea:f6:5d:37:41:2a:38:b9:b8:25:a5:8a:98:eb:19:01:d4:
bc:75:58:9c:b7:75:17:d2:30:1d:9b:04:a6:9f:c4:26:8d:80:
9d:92:5b:85:07:13:fa:4b:74:9b:70:80:98:b7:84:28:29:23:
6a:26:5b:ed:b0:f9:d8:eb:a6:5d:a4:3d:13:8e:80:43:82:89:
c2:54:78:bf:4e:5f:da:51:a0:fe:fa:7d:e0:f6:6b:28:85:15:
f4:76:f9:3b:33:c2:ad:6f:69:31:38:05:18:ae:b8:d2:3b:a9:
b1:94:f9:3c:ed:ec:55:24:e6:ed:35:a3:7f:0b:b6:0c:ce:5c:
fc:ac:2b:42:4e:5e:46:62:9c:65:89:13:b7:1a:a0:64:08:b3:
9d:a0:83:c2:c3:10:50:e7:f6:4b:15:51:22:88:64:18:ca:82:
d8:93:bd:2d:55:51:63:19:4b:17:bf:00:86:3c:30:e8:49:db:
60:c8:92:77:95:d4:ba:0c:57:f9:0a:a2:cc:2d:02:c7:e7:30:
b1:a4:cd:3e:12:0e:08:2f:0e:b7:58:62:37:32:25:ae:95:00:
53:70:1f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:32:15 2026 by rpki-client