Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
File: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft (raw, json)
Hash identifier: a1q0gqyComRIaDxGcDhPVTM31csne4bstIAyK+1yQds=
Subject key identifier: 60:93:57:F7:EE:DA:6A:DB:22:F7:98:12:28:A2:4B:19:AA:F4:E9:B3
Authority key identifier: 97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
Certificate issuer: /CN=971a799c6a663439d74450dfb38993571f98e15d
Certificate serial: 01A03B955448AD28FA3BCBA9731B6FEA6D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
Manifest number: 1A22
Signing time: Wed 26 Aug 2026 01:00:36 +0000
Manifest this update: Wed 26 Aug 2026 01:00:36 +0000
Manifest next update: Thu 27 Aug 2026 01:00:36 +0000
Files and hashes: 1: FsdxCBsSPhgrqj2DSICdPcHdelg.asa (hash: eEvqQgi+lzyKHFjO4TryDYnkbMBQ3ARIXRQH0ITgfu4=)
2: dZ_v3Mc_jaWXuBe3BXvQFPLEuQU.roa (hash: QKHkKHHTIdqqahwWOaIvsm5JVVVXqX2D3ZMdSwEaAZk=)
3: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl (hash: c4WZhEoTtx54eQpt6mkeLDQlTIrub2f60ci0i2sv/8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3b:95:54:48:ad:28:fa:3b:cb:a9:73:1b:6f:ea:6d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a799c6a663439d74450dfb38993571f98e15d
Validity
Not Before: Aug 26 01:00:36 2026 GMT
Not After : Aug 27 01:00:36 2026 GMT
Subject: CN=609357f7eeda6adb22f7981228a24b19aaf4e9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b0:32:1b:32:17:26:81:8e:27:87:73:4e:bb:
17:c9:b7:60:e6:c9:f9:97:c9:75:51:6d:89:86:2e:
4b:95:91:20:c0:61:34:af:fc:48:17:d9:63:28:4a:
36:a2:41:cf:06:09:de:8e:cf:a5:06:22:70:53:d1:
32:df:cf:e2:8a:c2:a5:5c:23:2e:7f:aa:c0:cc:37:
e2:ad:4d:7a:07:ac:d1:e2:2b:01:f8:4d:18:ec:33:
c8:76:c8:77:8e:54:6d:01:a4:5d:d8:86:2c:55:2b:
b1:fd:16:ef:93:14:fb:8a:71:90:00:5a:6c:f0:9e:
d1:92:e6:61:f0:28:69:2f:a2:94:1b:17:d0:6a:e5:
48:e6:8a:8b:8c:c6:e8:6d:90:c8:1b:74:b0:75:c0:
1e:a6:5d:21:7e:d6:d3:3f:9a:1d:ee:07:e4:1d:2a:
5a:dc:8a:d2:50:6a:f3:cf:64:a5:eb:d7:eb:45:58:
4b:39:b3:e8:74:5b:93:5f:06:d0:7b:e6:60:4f:a2:
86:3d:54:21:a2:8b:39:75:d4:78:cd:37:c7:63:9f:
45:41:bb:a9:bb:81:95:8e:1b:ee:c4:73:1f:c4:17:
3a:a0:b5:1c:1d:e5:dc:93:31:0c:52:b8:55:6c:28:
1d:de:7d:c1:47:d5:92:27:70:ef:60:ba:18:48:c2:
89:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:93:57:F7:EE:DA:6A:DB:22:F7:98:12:28:A2:4B:19:AA:F4:E9:B3
X509v3 Authority Key Identifier:
keyid:97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:38:48:75:2a:e1:84:00:90:e1:1a:75:af:e9:ac:fd:12:75:
73:56:6c:2f:bc:d2:9b:0d:8d:f4:8f:56:37:63:1f:0c:df:3d:
11:89:06:82:f6:80:31:e3:ae:86:2d:8e:eb:87:c4:28:bb:4d:
a8:af:e9:9a:04:e7:60:b0:01:9a:06:9a:ca:b8:78:83:fe:7c:
53:0e:37:94:85:18:b2:a3:87:82:ce:6d:6a:ee:f8:28:c3:4d:
b0:13:28:e0:08:7a:74:41:04:2c:28:7e:7e:72:09:81:ab:13:
58:1a:ed:07:54:cc:32:ee:c8:44:a3:fd:bd:82:d3:86:e3:37:
85:2f:e2:66:d5:19:58:b2:53:ec:8c:4e:92:a3:2f:2b:7e:eb:
eb:4b:e6:f0:a4:6b:b0:1e:4a:74:af:de:76:2e:6b:f2:e3:60:
85:f7:9b:dd:9b:ba:6e:71:ec:5f:5f:7d:b9:b7:86:07:06:b2:
0c:a0:10:b7:b2:10:e1:c4:73:cb:cd:1e:7a:76:e2:5a:33:a1:
75:97:ab:40:22:29:13:15:40:02:08:33:5c:e2:ee:64:73:c1:
c7:f0:c6:13:d4:c0:4e:d9:59:1f:c7:db:11:65:88:3f:27:2d:
ce:cc:5f:d8:2b:6f:d2:4d:83:63:12:3d:61:b4:3e:08:68:fe:
23:94:e3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:06:21 2026 by rpki-client