Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
File: lxru6oeY927JpDTnVjfs2IEJLsI.mft (raw, json)
Hash identifier: 7wbsmLig6l5G4d1Pk1MYuo/JmOuh7n1kC4Y58Oe7fSQ=
Subject key identifier: 65:9B:FB:4A:08:A8:58:35:84:FB:10:5E:CD:91:ED:CD:3E:5C:65:78
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 01A090574C27C9B7E80E335DB56A12E2E056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
Manifest number: 1A4D
Signing time: Fri 11 Sep 2026 12:00:35 +0000
Manifest this update: Fri 11 Sep 2026 12:00:35 +0000
Manifest next update: Sat 12 Sep 2026 12:00:35 +0000
Files and hashes: 1: 9g8xNFb2G40vpUgQ83M1qATo9IM.roa (hash: XlOOaS5ddXCcXrWbzYLtTuliD0nsTkmll8658pyGZu4=)
2: cJ3CSy6b-K7_SvDOoh-SHmO50AI.roa (hash: ima6XXFyVR9RW0ytt/Ct7dNcbu+58VazOZOWGhgX3kc=)
3: jM-7nkDS5qjlb3w33JvghnsyuJw.roa (hash: d7SlxGUeBLsKibMsNC4PiGRQBSGoyvgsjw7sV20/+lM=)
4: lxru6oeY927JpDTnVjfs2IEJLsI.crl (hash: c911/HZAlDCkINGKwzzR3acrMckTZA85s/153zn9aj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:57:4c:27:c9:b7:e8:0e:33:5d:b5:6a:12:e2:e0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Sep 11 12:00:35 2026 GMT
Not After : Sep 12 12:00:35 2026 GMT
Subject: CN=659bfb4a08a8583584fb105ecd91edcd3e5c6578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:91:05:f5:4d:c4:41:37:4f:b2:e5:6c:7e:88:
f7:ff:ba:cb:61:79:e8:bd:1c:23:72:ed:8f:c6:3f:
2f:aa:de:d4:81:db:b6:54:73:44:84:0d:ad:67:d5:
c4:a8:b8:f0:eb:6c:87:05:06:6b:12:94:53:70:87:
79:f7:4e:29:ba:80:15:be:5b:e2:4e:a6:ab:a2:02:
95:d0:1e:f0:1d:36:08:69:44:bb:e2:37:57:8a:19:
2d:08:de:7c:0b:dd:4c:8c:63:65:c4:cc:99:af:d5:
94:d2:02:be:24:cf:33:66:0d:9c:44:1b:64:7f:c0:
72:77:5c:e6:f3:6b:e2:11:1f:7e:ec:74:07:e0:b8:
8f:96:c5:c0:5a:62:c1:53:93:d0:ee:ad:9b:1c:54:
85:cf:a4:45:eb:e6:8e:b0:23:e2:57:7a:b0:d0:4a:
b8:d2:dd:50:d5:65:ec:13:7c:86:1d:ba:25:44:eb:
ac:dd:9b:02:d2:58:a6:77:ff:35:e0:7b:fd:98:e2:
b3:3c:ab:e7:de:09:44:b9:33:57:e7:55:bf:53:54:
29:94:bf:c5:33:9a:08:f3:a3:98:08:ec:da:da:63:
28:2f:fb:4a:22:b8:9d:86:52:62:cb:02:3e:31:ef:
22:2e:94:fa:d5:e8:38:4c:8b:bb:32:8b:d7:1f:61:
26:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9B:FB:4A:08:A8:58:35:84:FB:10:5E:CD:91:ED:CD:3E:5C:65:78
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:f9:15:f5:65:c3:6f:ae:85:1d:3e:d9:ae:cc:ce:38:55:54:
30:1c:64:e6:2d:eb:4f:80:8b:24:0c:5d:56:a7:d6:a4:4b:84:
84:88:a3:a9:21:e5:6f:72:1c:46:40:74:3c:d1:6b:86:4f:e0:
10:22:08:c5:0a:90:bf:02:a6:07:f1:30:32:7a:7e:da:85:45:
e6:9a:64:88:02:fe:c1:a8:d4:b1:a3:bc:5b:a8:ee:dc:c5:57:
85:1e:21:ed:43:5e:33:47:2b:5e:93:9b:a6:bb:0b:4e:df:ce:
b9:c0:ee:e6:5a:ad:e7:3b:62:d4:17:52:f0:ab:85:e4:22:4a:
87:a4:16:44:86:2f:97:b8:de:4b:58:66:d4:3d:8d:4d:a0:13:
c9:9b:42:a0:21:f0:81:ea:69:24:e6:66:5f:69:72:95:c0:a0:
e7:50:6d:dd:11:d7:c1:fa:35:7f:d6:19:07:eb:61:a7:d1:e6:
7d:93:b6:ea:fa:16:dd:62:83:c1:45:f0:b5:db:2e:c8:ac:4e:
d8:fd:9b:19:cc:ec:cb:24:7c:8b:de:57:4a:96:12:db:95:cb:
57:85:5b:e2:90:fc:bd:cc:67:65:17:ff:43:70:fc:e2:ba:cc:
34:03:89:23:ba:55:90:a7:a2:07:98:5d:68:10:cd:f3:c0:40:
93:54:b9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:27:09 2026 by rpki-client