Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
File: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft (raw, json)
Hash identifier: S9Q9qMwmBhPE4WgQ1pFwlgG6ynubvCHpuP1mtIDohxM=
Subject key identifier: 83:EB:41:8F:84:A3:45:E9:41:02:72:EC:EE:4A:DD:DE:33:79:44:7F
Authority key identifier: 97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
Certificate issuer: /CN=971a799c6a663439d74450dfb38993571f98e15d
Certificate serial: 019D389BE665CF07A4C612257B8D89696ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 08:00:34 +0000
Manifest this update: Sun 29 Mar 2026 08:00:34 +0000
Manifest next update: Mon 30 Mar 2026 08:00:34 +0000
Files and hashes: 1: ElmE07kq9LxUDEmmTyOo1MIpVtU.roa (hash: IMhS3Hg31zsSt4C+dpnb7kVneJ7jUTvLYNSo6j8gQwI=)
2: FsdxCBsSPhgrqj2DSICdPcHdelg.asa (hash: eEvqQgi+lzyKHFjO4TryDYnkbMBQ3ARIXRQH0ITgfu4=)
3: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl (hash: yKNQqxRBoHJANWIiHl3e2uD3meNeEBhcTjtipyoi6eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e6:65:cf:07:a4:c6:12:25:7b:8d:89:69:6a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a799c6a663439d74450dfb38993571f98e15d
Validity
Not Before: Mar 29 08:00:34 2026 GMT
Not After : Mar 30 08:00:34 2026 GMT
Subject: CN=83eb418f84a345e9410272ecee4addde3379447f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:63:c6:7e:ac:bf:c4:b9:dd:8c:75:0e:08:
12:45:ae:30:ff:69:7e:ba:70:ea:a5:1f:2c:6b:d1:
4e:a8:fd:9e:55:f3:d8:48:2f:48:96:95:45:6e:66:
f3:50:ad:ba:84:3b:09:5c:18:44:a5:67:95:2c:99:
9d:f1:1c:dc:3d:84:1e:18:9b:d4:82:96:2d:3f:a8:
10:a6:cd:a8:3c:51:5e:7f:eb:71:22:fc:71:57:53:
ac:80:b0:67:9b:90:b5:c4:11:9c:1b:d4:58:ec:dd:
b1:4d:f3:b9:1c:03:a0:2f:f0:54:7a:8c:50:85:4a:
2b:d0:11:96:8e:17:71:48:76:36:46:0c:d4:cf:8c:
1e:3b:9f:a3:dc:78:dc:81:24:7f:f4:87:38:c8:ea:
25:e9:42:78:10:aa:60:be:5e:43:b4:f9:48:ba:3c:
74:95:34:78:9b:62:76:5b:f0:cc:55:01:9e:df:98:
04:1d:e4:e0:dd:f6:b7:22:72:fa:5f:ff:96:27:26:
aa:6a:ec:41:b8:f4:d4:00:ed:4e:4c:e7:81:b5:e6:
13:68:a9:1a:15:76:69:7e:b9:3a:80:1f:be:0a:57:
f1:de:20:c0:72:f9:f3:e7:3e:40:61:ee:a0:f8:f7:
39:b3:6c:79:a8:b8:ff:ab:50:52:c0:b4:5a:87:21:
c4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EB:41:8F:84:A3:45:E9:41:02:72:EC:EE:4A:DD:DE:33:79:44:7F
X509v3 Authority Key Identifier:
keyid:97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4b:62:2a:1c:6b:e7:42:30:09:1f:17:e3:99:9c:0d:c9:b2:
19:a9:c0:9c:e7:04:6a:2f:8b:7a:f3:52:62:f2:56:ab:d3:b6:
f6:ac:b7:1d:2a:0a:4d:f0:34:5d:5f:22:9a:31:67:35:5b:6a:
55:9b:18:a3:80:10:13:03:b8:c6:d8:7e:67:94:1b:9e:e1:41:
44:3d:dd:53:ec:63:69:28:1a:69:10:1e:f9:a5:ab:40:b3:03:
56:ba:f8:86:4e:97:d4:08:96:68:06:24:68:13:c1:d3:db:28:
a8:a4:fb:1f:38:ce:08:34:6b:7b:ee:84:76:36:3b:4e:25:42:
01:38:21:f1:56:a2:ed:1f:53:6b:66:c7:84:be:d3:d9:b8:48:
4f:ca:e7:b4:a7:b4:b7:06:3c:26:60:52:0b:34:44:dd:5e:9d:
9a:03:87:2c:f1:ad:1a:dd:df:8b:aa:d6:91:d9:86:33:7e:4b:
0f:7a:da:f9:dc:aa:7e:a3:1e:60:e2:2a:f8:55:8c:0b:9c:28:
41:4c:d4:09:71:f1:26:c1:87:b7:12:e4:de:34:4d:6a:b9:62:
9c:fc:d5:80:aa:c8:9f:3e:f1:37:50:aa:f6:7b:08:3e:67:57:
0b:18:d4:4d:8e:18:26:b3:f2:4d:18:02:5e:7a:54:3c:98:ac:
c4:be:17:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:33:36 2026 by rpki-client