Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
File: lxru6oeY927JpDTnVjfs2IEJLsI.mft (raw, json)
Hash identifier: hmGKJL61eJR56FKKOeRALYnzEWrZG3z72yu/u9sU6rI=
Subject key identifier: E6:5C:46:F2:57:CE:B7:A7:BB:14:57:39:DB:25:17:9B:D5:38:05:2B
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 01A1878913A15903714233FB73C3EE4A8684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
Manifest number: 1ACD
Signing time: Thu 29 Oct 2026 12:01:09 +0000
Manifest this update: Thu 29 Oct 2026 12:01:09 +0000
Manifest next update: Fri 30 Oct 2026 12:01:09 +0000
Files and hashes: 1: 9g8xNFb2G40vpUgQ83M1qATo9IM.roa (hash: XlOOaS5ddXCcXrWbzYLtTuliD0nsTkmll8658pyGZu4=)
2: cJ3CSy6b-K7_SvDOoh-SHmO50AI.roa (hash: ima6XXFyVR9RW0ytt/Ct7dNcbu+58VazOZOWGhgX3kc=)
3: jM-7nkDS5qjlb3w33JvghnsyuJw.roa (hash: d7SlxGUeBLsKibMsNC4PiGRQBSGoyvgsjw7sV20/+lM=)
4: lxru6oeY927JpDTnVjfs2IEJLsI.crl (hash: PcVoaZlsr3LSkGYYXVwSWMeG7vEHBwfF7+Oq3rrAE5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:89:13:a1:59:03:71:42:33:fb:73:c3:ee:4a:86:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Oct 29 12:01:09 2026 GMT
Not After : Oct 30 12:01:09 2026 GMT
Subject: CN=e65c46f257ceb7a7bb145739db25179bd538052b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:82:77:24:f1:50:d2:48:e4:a4:7b:92:56:
fb:9d:72:85:fd:2b:32:e9:d1:b9:e1:e2:76:0a:19:
6f:d5:56:57:bd:16:40:6f:f4:77:61:88:68:92:a8:
ff:e8:8b:4e:ed:5b:be:d6:13:cb:ae:26:28:35:c3:
bf:be:12:6d:17:29:c7:62:eb:55:f0:1b:da:81:c6:
d2:03:3e:f7:92:9a:ce:5a:2d:a3:46:24:d5:71:0c:
67:3e:66:c0:c2:6e:85:15:50:cf:e0:0e:51:b0:aa:
35:da:4e:dd:f3:ef:d1:bb:fe:96:ef:45:c1:9a:3b:
89:7c:63:7b:17:08:61:36:48:e5:32:42:48:79:fa:
b5:c7:6a:fd:40:28:33:10:c4:88:bb:43:ab:b2:8f:
b4:f4:f9:4d:f0:a6:6e:12:b0:10:59:40:ac:69:bf:
f4:9c:ec:5a:3c:18:b1:ff:21:9f:06:00:e5:d7:84:
5b:a2:ad:d2:62:47:ff:f6:ee:2c:bf:56:d6:1e:93:
52:6e:5a:35:d3:5c:cf:a4:06:64:01:36:6e:4f:cb:
49:6d:f8:f4:c8:ec:89:65:14:b6:7c:3c:51:74:b5:
bc:ca:48:65:93:9f:c6:7c:53:72:46:a2:73:dd:2b:
dd:c5:e4:95:9f:c3:39:94:2c:89:58:c0:d7:6c:20:
76:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5C:46:F2:57:CE:B7:A7:BB:14:57:39:DB:25:17:9B:D5:38:05:2B
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:46:ee:92:6f:b3:48:58:10:7d:c2:4c:54:58:bb:d7:90:4c:
fc:94:4b:3d:af:12:d5:43:60:e2:db:79:50:fd:f9:e9:75:28:
fb:9d:12:29:95:be:fe:d8:97:e4:59:fc:51:56:c1:7e:ef:7e:
49:e8:f3:12:7b:ee:7e:fc:96:9f:e9:de:d4:cc:be:96:28:e7:
0b:67:19:01:ba:3e:20:53:fb:e2:7c:e8:35:14:75:2f:3f:e7:
93:35:41:c1:7e:a5:71:97:a8:80:25:7a:77:a8:86:c3:6d:ed:
b1:1c:b1:08:39:ab:7c:23:d1:80:c9:03:b1:f3:40:82:1a:3a:
c6:7b:ba:86:ad:66:93:86:c0:b2:b9:b3:06:d9:7d:d0:89:ab:
d3:a4:de:41:8a:2b:e9:e8:36:c9:fb:34:06:4d:b1:d1:30:f9:
2f:85:5e:30:53:de:45:78:dd:f0:fd:88:8c:b4:6d:91:fa:e6:
3b:c5:9f:d9:c2:18:c5:ca:fa:6a:c9:36:df:6e:d9:0a:1a:ec:
16:69:4a:f5:28:63:31:61:56:f2:a8:ed:b1:88:f2:d6:38:a7:
e1:ea:f0:d5:df:10:90:a5:a6:06:f8:d9:08:51:16:30:77:0e:
da:db:c1:29:bf:81:68:52:7c:64:df:d0:aa:de:ee:16:e2:54:
a5:38:eb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 23:03:40 2026 by rpki-client