Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
File: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft (raw, json)
Hash identifier: Prsr/+qBRnmRnUadL1OAXJCxbSE2MOMt4d4U0V53TVA=
Subject key identifier: 23:94:29:F1:F5:55:EF:85:60:56:C0:03:8B:A3:59:9D:8D:C8:E9:54
Authority key identifier: 97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
Certificate issuer: /CN=971a799c6a663439d74450dfb38993571f98e15d
Certificate serial: 019F122E7F72805E6625AB1A216C02CE7ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
Manifest number: 1988
Signing time: Mon 29 Jun 2026 07:01:04 +0000
Manifest this update: Mon 29 Jun 2026 07:01:04 +0000
Manifest next update: Tue 30 Jun 2026 07:01:04 +0000
Files and hashes: 1: FsdxCBsSPhgrqj2DSICdPcHdelg.asa (hash: eEvqQgi+lzyKHFjO4TryDYnkbMBQ3ARIXRQH0ITgfu4=)
2: dZ_v3Mc_jaWXuBe3BXvQFPLEuQU.roa (hash: QKHkKHHTIdqqahwWOaIvsm5JVVVXqX2D3ZMdSwEaAZk=)
3: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl (hash: /dY6ab4XBI/sfVvyhi2Y7j1TyscZaRA52DoG4dArnQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:7f:72:80:5e:66:25:ab:1a:21:6c:02:ce:7e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a799c6a663439d74450dfb38993571f98e15d
Validity
Not Before: Jun 29 07:01:04 2026 GMT
Not After : Jun 30 07:01:04 2026 GMT
Subject: CN=239429f1f555ef856056c0038ba3599d8dc8e954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2d:6f:fc:9d:f7:c5:bb:88:21:90:0d:fc:54:
d7:0b:36:cf:cf:91:fa:d1:f3:78:25:94:24:d7:23:
cf:ee:82:8d:51:cf:aa:f0:9c:20:0c:ee:43:bf:32:
95:be:66:7b:28:28:db:c0:1e:99:01:21:6e:15:da:
88:93:e3:3c:df:a3:5c:7c:ae:99:78:b7:fb:ed:e7:
40:b6:d2:fc:90:8c:89:0c:f4:ab:5c:61:d6:78:6c:
89:58:b7:a3:54:0d:ea:3b:a6:8a:16:51:9f:e6:38:
e8:b2:60:1b:64:7d:a1:0f:fa:dc:20:e9:5d:d3:c1:
e3:a4:b5:55:22:fc:4c:ed:f0:59:2a:7f:6f:89:92:
56:78:2b:48:9c:96:6a:d0:1c:eb:b8:d6:9a:ba:53:
94:67:4f:27:d4:03:11:8c:1f:5b:4e:54:5e:4b:9a:
c8:ae:95:3a:53:c7:d6:da:c9:09:a3:f3:49:a7:de:
d6:7b:e3:19:d5:3e:a6:f3:e6:67:1c:2d:f2:29:11:
4e:35:eb:0b:19:21:56:6a:5b:1d:fa:7b:45:a9:93:
8c:40:33:1f:cd:ee:65:b9:d8:c9:f1:53:a2:7c:ac:
04:30:e0:5f:75:80:8a:03:28:f3:7d:b6:55:61:6d:
f9:ce:31:08:e0:bf:5b:86:07:72:62:12:e9:0c:ad:
e6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:94:29:F1:F5:55:EF:85:60:56:C0:03:8B:A3:59:9D:8D:C8:E9:54
X509v3 Authority Key Identifier:
keyid:97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5c:f8:44:ba:32:3e:ed:32:06:ad:fe:4e:ae:0f:f4:9f:94:
ef:a3:2f:38:ad:a9:d3:cd:7e:d3:1c:5f:65:f4:49:62:d0:c2:
c8:d6:4c:d6:3a:41:65:a4:92:c5:3a:a5:34:e0:33:6e:ef:73:
96:75:06:9e:a7:9c:00:38:a3:1e:f7:2a:7b:bf:43:6c:fe:37:
4b:aa:c9:d8:0c:c0:3a:04:64:5b:39:2b:63:c8:10:e4:9c:d2:
b8:81:f7:6e:a2:78:60:e5:ec:59:55:2b:d5:b9:a4:6d:be:4f:
70:90:b5:8f:da:c7:13:51:5e:c1:42:36:05:40:60:33:43:b9:
f1:1e:8f:9c:6d:8a:e2:2b:9f:5d:34:06:e7:ee:05:d9:01:93:
c4:1b:e3:17:99:7b:5f:b0:b5:07:52:2f:98:db:3a:53:6a:fe:
0c:a7:2c:ef:d2:dd:42:12:9a:5d:14:c1:2d:1e:e2:5a:63:cd:
ae:6d:06:ca:3f:4f:96:64:ba:55:9d:bb:d7:28:16:ed:19:e0:
30:c7:7d:e7:00:ad:31:eb:0c:29:9d:2c:2f:5f:9a:9b:ae:46:
b2:c4:42:e0:40:e8:6e:12:70:6d:3e:97:af:7b:96:ed:fe:46:
88:43:7f:d0:82:15:c1:73:1a:3b:98:1b:38:98:1d:e5:57:db:
07:f4:92:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:06 2026 by rpki-client