Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
File: lxru6oeY927JpDTnVjfs2IEJLsI.mft (raw, json)
Hash identifier: PtCxAUvJLypFkdeiypmuKIIrC/mkfJXLjPhcJxmpxdU=
Subject key identifier: F3:19:EB:96:35:C8:D4:08:D0:1B:92:A8:B0:D5:37:30:DD:7E:8E:C4
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 01A199FD23B208BCEEF0D4142C2CE6EB8C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
Manifest number: 1AD7
Signing time: Mon 02 Nov 2026 02:01:06 +0000
Manifest this update: Mon 02 Nov 2026 02:01:06 +0000
Manifest next update: Tue 03 Nov 2026 02:01:06 +0000
Files and hashes: 1: 2uNDbwtfUg0oqPlUc8lhDDpx6yk.roa (hash: hfi/j4EWgLwjWUSsCuefjRfa/BssALMFARKPvD55F/k=)
2: 9g8xNFb2G40vpUgQ83M1qATo9IM.roa (hash: XlOOaS5ddXCcXrWbzYLtTuliD0nsTkmll8658pyGZu4=)
3: SNfUmvo9gx0Hj-JIlZR7sTnFtr8.roa (hash: bEueUt0KeZkVFHBGPAC+SWmZ1lXgE8wtxEC97wabMR0=)
4: cJ3CSy6b-K7_SvDOoh-SHmO50AI.roa (hash: ima6XXFyVR9RW0ytt/Ct7dNcbu+58VazOZOWGhgX3kc=)
5: jM-7nkDS5qjlb3w33JvghnsyuJw.roa (hash: d7SlxGUeBLsKibMsNC4PiGRQBSGoyvgsjw7sV20/+lM=)
6: lxru6oeY927JpDTnVjfs2IEJLsI.crl (hash: ahr8e2xKI4LzHXY8HpiwyuckuyJsR0+kczCDwEoAh0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:99:fd:23:b2:08:bc:ee:f0:d4:14:2c:2c:e6:eb:8c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Nov 2 02:01:06 2026 GMT
Not After : Nov 3 02:01:06 2026 GMT
Subject: CN=f319eb9635c8d408d01b92a8b0d53730dd7e8ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f7:d1:e9:9a:d3:62:67:90:38:b2:f0:86:91:
3a:e4:63:27:9e:72:5b:a4:ea:26:fa:0a:db:56:f1:
e3:b9:c7:19:53:94:cc:8c:47:95:79:b8:56:31:d5:
e4:06:82:fe:ed:ea:56:e6:fc:b6:72:b9:f6:e8:a8:
9a:47:b2:6b:11:72:84:b3:55:1b:d4:78:33:30:35:
46:84:8f:5e:0b:cd:fb:bc:c5:eb:1a:82:39:e6:cf:
0a:ea:24:83:9d:8e:85:c4:b7:a2:12:9d:f1:02:a8:
f9:ce:ec:77:91:87:9c:10:04:bc:e0:93:73:a6:89:
08:6e:1c:5f:08:d4:a4:8e:20:69:e4:ba:8d:5b:38:
f3:2a:0b:ea:d4:3f:14:17:00:28:d5:a0:50:b3:8b:
6c:16:3f:3e:56:0b:9c:db:fa:8b:f9:ed:1f:63:85:
4d:f7:6d:d7:4f:3d:ee:ab:59:3f:6f:c3:f2:98:00:
52:d0:38:13:3c:6f:22:26:9e:d3:93:0c:78:33:c5:
25:d4:70:85:c0:73:87:19:76:0d:3b:40:a5:63:1b:
c3:ec:2a:6a:a4:d9:eb:c0:9e:34:17:d6:e1:ed:77:
90:bd:bf:33:90:be:73:2b:cc:69:70:b5:c4:73:ca:
c9:eb:47:64:b0:ea:f1:1e:72:ad:9b:0d:b2:a1:f4:
a2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:19:EB:96:35:C8:D4:08:D0:1B:92:A8:B0:D5:37:30:DD:7E:8E:C4
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b6:5b:4d:10:88:04:1e:cf:f2:c1:dd:4d:0e:30:e2:66:8a:
03:85:83:06:9d:5d:be:59:b7:24:71:8b:cb:e7:17:f7:74:28:
7e:d9:9b:e0:b4:e3:d8:e0:ac:8e:b0:d1:5b:62:55:e5:29:75:
d4:e8:e3:91:e9:49:af:28:07:61:10:9f:0c:9c:b8:5d:15:dd:
e6:5a:73:d5:85:0b:97:9e:1e:21:0e:5b:18:71:e2:9b:8f:00:
e0:ff:48:07:7a:75:52:88:9b:b8:f8:10:22:84:f5:d2:c4:11:
23:52:9d:ac:b8:b9:7e:2a:05:dd:09:d5:df:ad:be:b2:cc:18:
87:ba:b4:31:70:6f:26:55:f5:b9:ba:b0:c3:92:ba:9d:38:96:
79:fd:cf:fe:de:0f:d3:7a:53:83:a8:cf:44:e9:7e:4e:a9:27:
bf:d9:3a:78:3d:5f:fa:06:0a:af:54:73:03:00:39:53:68:13:
11:46:b8:7a:1a:54:d2:f1:cc:62:18:c2:e2:84:6b:00:07:16:
a5:4b:86:51:3d:ed:af:27:31:60:4e:1b:85:65:d2:c2:42:c1:
af:b9:e9:fb:99:c7:ad:5a:92:28:36:c5:bf:9a:c5:d6:2b:11:
d5:1f:fc:5e:0c:d6:44:7e:50:24:83:8d:0b:28:eb:92:b7:57:
c7:30:b7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 05:53:16 2026 by rpki-client