Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
File: lxru6oeY927JpDTnVjfs2IEJLsI.mft (raw, json)
Hash identifier: 0Sj9dt21n/gMPy7xSTa6KDmKhaRDQMCD/OYE71hfn9A=
Subject key identifier: D4:0D:DC:F4:90:C9:01:E8:4D:37:9D:7F:38:BE:53:94:47:5E:AF:D4
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 019D38D3B74D72589DCBBBD7863B53ABCB67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:01:32 +0000
Manifest this update: Sun 29 Mar 2026 09:01:32 +0000
Manifest next update: Mon 30 Mar 2026 09:01:32 +0000
Files and hashes: 1: 9g8xNFb2G40vpUgQ83M1qATo9IM.roa (hash: XlOOaS5ddXCcXrWbzYLtTuliD0nsTkmll8658pyGZu4=)
2: cJ3CSy6b-K7_SvDOoh-SHmO50AI.roa (hash: ima6XXFyVR9RW0ytt/Ct7dNcbu+58VazOZOWGhgX3kc=)
3: jM-7nkDS5qjlb3w33JvghnsyuJw.roa (hash: d7SlxGUeBLsKibMsNC4PiGRQBSGoyvgsjw7sV20/+lM=)
4: lxru6oeY927JpDTnVjfs2IEJLsI.crl (hash: zTBKUvfFCrI/b0ODeqOlLS3xusi9aGkRsxz+igj29a0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b7:4d:72:58:9d:cb:bb:d7:86:3b:53:ab:cb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Mar 29 09:01:32 2026 GMT
Not After : Mar 30 09:01:32 2026 GMT
Subject: CN=d40ddcf490c901e84d379d7f38be5394475eafd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:59:90:6c:1c:98:b5:3e:22:fe:e2:30:36:c1:
26:a1:06:ce:c7:7f:fc:d7:73:48:c6:f6:98:c8:25:
1c:fd:2f:0c:cd:23:42:50:9b:05:e7:f7:bd:c4:c2:
50:8a:d6:5d:2d:0c:71:b6:dd:bc:97:1e:c9:2f:c3:
2b:17:f4:fe:c5:a6:a7:a9:cd:25:73:36:2f:fd:cf:
17:50:d5:6c:ae:f5:da:9f:b6:58:15:da:cc:3a:60:
47:90:f1:7d:f9:3b:ca:57:37:43:f9:14:15:e5:78:
3a:c5:24:ca:7b:57:3d:8a:7a:7e:b0:0e:2e:3f:e5:
e7:33:3f:ad:90:f3:be:91:89:6a:d5:a3:91:a7:15:
0d:af:d8:fe:34:33:64:1a:f5:7c:cc:83:3f:18:67:
8a:36:2d:59:d8:91:cb:4d:91:76:81:8a:5b:35:fc:
b4:fe:6f:ea:8b:1d:28:7f:a1:c6:03:eb:0f:ba:4d:
fc:43:85:67:e1:b5:dd:dc:f8:8d:72:3f:05:d8:ec:
50:5b:47:aa:1d:24:bc:c2:bb:60:c8:cc:8f:32:ca:
8f:b6:96:67:03:62:5e:09:83:cf:7f:02:f8:25:e5:
ef:db:24:d4:69:40:50:7c:df:e3:6e:68:da:a8:a4:
ed:e1:fc:99:da:b0:e1:2f:a3:b5:b4:2a:48:cd:4b:
35:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0D:DC:F4:90:C9:01:E8:4D:37:9D:7F:38:BE:53:94:47:5E:AF:D4
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:cc:a3:08:f8:87:04:58:38:bb:dc:53:11:8f:99:1a:9d:80:
61:1d:df:8a:b0:03:5c:f3:5f:c9:56:0d:f5:26:88:26:00:c1:
b8:88:f7:ff:03:13:b9:e8:3c:b7:b7:08:c9:2e:c2:92:48:51:
59:fc:da:70:1c:a3:fd:45:25:55:f3:77:a9:d0:6c:68:29:f0:
b6:c6:50:ac:31:5b:9e:00:11:d3:aa:8b:25:60:09:c8:72:9d:
ae:98:7c:78:24:c9:78:af:5b:f6:3e:0f:ed:4c:f3:2b:72:c8:
ff:f6:6c:f3:90:5f:5d:4a:31:84:75:e7:ca:6a:e2:4d:af:ff:
d8:83:35:c2:24:ba:ee:15:8e:fc:48:cc:a6:2b:c9:72:c7:07:
a6:1c:86:05:25:5e:fb:42:d3:f2:e6:01:03:2f:6e:99:4d:83:
0b:75:80:ba:a9:22:9a:59:53:6f:0d:82:42:cf:0f:99:ba:5b:
4a:db:b2:f1:1b:8e:5f:c7:8f:38:30:78:12:bc:c9:6e:54:50:
48:95:05:e5:14:da:e8:2f:d3:46:40:2e:52:3b:38:ba:ff:9f:
f2:00:ef:13:1b:77:3f:2d:74:ae:2f:43:0a:f5:6c:d3:b5:2b:
80:b4:c4:99:79:11:6d:64:cc:6d:22:cd:59:0b:0e:60:58:9c:
c9:01:d9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:02 2026 by rpki-client