Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
File: lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json)
Hash identifier: DrFaW2hbIdsYqVV9UiTGvEiKHXwCdL9AO2A+vstArsE=
Subject key identifier: EE:E7:60:64:57:82:F5:A7:B8:13:C1:DA:31:DA:FC:0E:68:A2:EA:46
Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
Certificate issuer: /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Certificate serial: 01A17EF3EE1F6CC7E1936FD76C6D65B8116B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
Manifest number: 1AC8
Signing time: Tue 27 Oct 2026 20:01:17 +0000
Manifest this update: Tue 27 Oct 2026 20:01:17 +0000
Manifest next update: Wed 28 Oct 2026 20:01:17 +0000
Files and hashes: 1: ZF0nGmPtxtkDUZtYeSMT07Pwz_c.roa (hash: q2DrD4GQJdtgGN/2Czf9hDRS5eBg2LiwOsSKK4NE0Ks=)
2: k6BAsgY_7U_KIwQG-JQSaHDxB9c.roa (hash: mykJoSrib037xaFcqg06p/Ay95dFVkUOY6oQwzMXt3Y=)
3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: 2AqDi9CEytFZ20CgFTF4Ni5E8IKzaPKUh6AteTFpvok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f3:ee:1f:6c:c7:e1:93:6f:d7:6c:6d:65:b8:11:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Validity
Not Before: Oct 27 20:01:17 2026 GMT
Not After : Oct 28 20:01:17 2026 GMT
Subject: CN=eee760645782f5a7b813c1da31dafc0e68a2ea46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:c3:5b:9c:52:d5:be:ca:eb:ff:5f:fc:27:
86:83:84:50:ae:a1:70:70:13:16:5e:36:de:c7:4e:
d2:be:69:b1:ca:bd:b7:8d:79:d0:7a:2d:94:bb:5e:
4a:e3:a1:cf:aa:c3:1b:f0:d7:3b:9b:bf:23:14:84:
a5:05:f7:99:b5:8c:6b:5e:46:d2:2e:bc:1e:9e:89:
8b:4f:9e:7e:ef:6f:6d:ed:22:e0:49:43:01:2a:5b:
3f:23:29:80:88:82:2c:1a:24:73:25:9d:72:6f:6e:
7c:c5:b0:6c:f1:11:b5:f6:31:58:c7:83:47:6d:8a:
35:a6:13:7a:b8:c7:c0:0e:5e:c1:f2:3b:e0:66:bf:
c0:53:1e:5b:7e:09:d4:30:73:23:96:35:ab:7c:1f:
c6:fd:e2:89:85:ab:6f:9b:d5:d1:e6:77:8a:ea:b7:
41:ed:69:70:f0:5f:1e:bd:5d:9c:74:cf:3d:37:8c:
33:26:6a:33:4b:97:a6:c2:08:02:84:e0:e6:70:a4:
ea:1e:91:f5:5b:76:86:83:44:20:b5:7c:ed:f4:be:
5d:90:b7:02:b0:4c:29:69:7c:06:04:50:bb:3c:24:
72:09:3f:35:28:dd:a5:7b:e8:58:83:f8:4a:f9:d7:
fb:f8:ac:d1:81:96:4d:69:a8:05:8d:e2:4b:a9:38:
95:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E7:60:64:57:82:F5:A7:B8:13:C1:DA:31:DA:FC:0E:68:A2:EA:46
X509v3 Authority Key Identifier:
keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ff:a0:50:78:57:9e:63:f8:9a:b8:a5:5e:cc:56:c1:8e:2e:
cc:b8:b0:80:89:72:8a:26:a2:23:5a:cd:1e:d5:26:a4:30:38:
37:87:e6:cb:3c:c7:27:ac:99:cc:f3:80:19:78:f0:d2:8a:2c:
9a:6c:58:d7:5c:5c:b0:fb:49:b3:60:ba:3d:74:33:6a:b2:ec:
0a:79:9b:12:98:51:a7:dd:41:f6:a6:dc:48:8c:8a:eb:a0:b4:
e0:55:40:b6:76:b0:2c:01:71:9e:dc:6c:28:2c:5e:2f:b1:a7:
2f:3e:48:f4:c1:d0:95:94:24:44:75:72:ba:89:74:e3:90:14:
f4:1f:32:07:d0:19:09:10:21:fd:2c:fd:a9:a0:39:d9:c4:3f:
d3:d7:9c:c5:65:13:a3:e1:d4:48:d4:ff:95:e7:ac:46:dd:6a:
9f:71:f5:90:3b:c6:c3:1e:57:8e:9a:3f:d1:b2:31:c3:d2:7f:
6c:33:4f:5d:c2:66:9e:c4:2b:99:fd:35:49:b4:56:60:7c:fc:
36:70:f1:bb:28:0b:89:23:d0:56:55:8e:be:39:18:d0:9a:28:
4c:00:35:85:81:43:64:f0:a0:37:36:f8:90:61:a7:4d:73:14:
f4:8b:82:b2:c0:16:99:c9:64:c6:94:63:25:10:c2:e6:69:4a:
72:6b:58:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:27:19 2026 by rpki-client