Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
File: lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json)
Hash identifier: csJ+Kv6yj/IWOJpL/HIBTn1TexS2qSyiZ4c72NSsmZM=
Subject key identifier: 31:16:67:03:DA:3A:EA:C9:22:60:AA:8E:92:2C:0A:02:F0:AF:1D:D3
Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
Certificate issuer: /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Certificate serial: 019CE6DAF5EF8E3D5D4235FD88348AC30E5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
Manifest number: 1867
Signing time: Fri 13 Mar 2026 11:00:35 +0000
Manifest this update: Fri 13 Mar 2026 11:00:35 +0000
Manifest next update: Sat 14 Mar 2026 11:00:35 +0000
Files and hashes: 1: ZF0nGmPtxtkDUZtYeSMT07Pwz_c.roa (hash: q2DrD4GQJdtgGN/2Czf9hDRS5eBg2LiwOsSKK4NE0Ks=)
2: k6BAsgY_7U_KIwQG-JQSaHDxB9c.roa (hash: mykJoSrib037xaFcqg06p/Ay95dFVkUOY6oQwzMXt3Y=)
3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: i0ES6LJkdtUaASxmrgDWEOCzFPJTU997rhTuKU8ONYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:da:f5:ef:8e:3d:5d:42:35:fd:88:34:8a:c3:0e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Validity
Not Before: Mar 13 11:00:35 2026 GMT
Not After : Mar 14 11:00:35 2026 GMT
Subject: CN=31166703da3aeac92260aa8e922c0a02f0af1dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:94:d5:d6:c6:d4:70:95:47:98:ba:ac:19:af:
27:9a:9e:02:b8:b0:8c:70:70:d9:d6:6b:67:5a:d8:
84:3b:15:1c:d2:03:fe:32:f6:06:4d:b0:11:b5:7f:
27:b8:e9:61:10:0c:64:a0:e4:ee:d1:28:f5:e6:12:
85:85:a5:33:e5:1e:3b:97:cf:4e:5e:64:04:cf:3d:
55:54:96:7d:95:78:32:13:71:bd:f5:dc:b3:76:77:
ff:02:57:3b:10:92:90:8d:ae:64:0e:49:c9:5f:aa:
8c:fc:ee:93:de:ab:88:e6:88:4b:0f:40:2e:7f:69:
d6:93:37:41:56:20:b9:10:79:d1:da:31:e7:db:2d:
b8:6c:c9:86:33:fc:69:2d:aa:bb:3a:96:1f:8e:20:
e6:b6:e7:40:e5:de:52:df:f4:38:1c:f9:f4:6b:fc:
06:67:e1:e6:1d:0c:81:c8:99:54:2c:58:f4:ea:73:
2f:e1:28:c2:97:ee:47:7b:ba:b0:4c:e9:ca:3d:13:
23:d6:e3:b6:8c:aa:4a:21:19:f2:16:71:ae:50:c4:
1b:62:14:e9:1b:53:c7:e6:44:e0:7e:0a:07:64:ee:
a2:56:2e:43:60:65:6d:16:a5:ab:73:21:73:1f:4a:
7c:5e:c3:41:36:4e:b8:26:fc:0e:f7:11:d6:27:43:
19:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:16:67:03:DA:3A:EA:C9:22:60:AA:8E:92:2C:0A:02:F0:AF:1D:D3
X509v3 Authority Key Identifier:
keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b6:77:16:fa:a7:f6:f5:2a:4e:cc:79:c6:e9:0c:7c:64:f6:
3d:ed:fa:71:2b:24:f2:04:24:5e:59:ed:50:05:77:4c:c7:23:
4c:e9:78:3d:c1:bc:84:31:e0:e6:ae:fe:f9:29:1a:30:46:2d:
6f:80:32:1d:b8:40:f2:11:3b:d6:be:7f:be:d8:ef:19:b5:66:
df:25:39:cb:b2:9f:1c:0c:88:6d:9d:3b:9d:56:3b:07:86:ef:
cc:17:36:c8:2c:fd:1d:bd:dc:89:68:db:14:b1:54:57:5a:6c:
9c:f6:76:35:7f:dd:1e:06:1a:97:c0:1e:62:ab:fd:c8:8a:19:
55:d3:f6:aa:dd:b8:98:a0:4e:49:35:b9:59:1c:06:d3:6f:b7:
0f:f4:f2:15:b7:50:93:bc:2e:76:80:a3:a2:6d:50:6f:b5:e1:
e3:62:09:ea:11:63:42:89:b0:54:23:1b:99:f5:c0:17:80:5b:
4b:83:5e:a3:05:49:35:b5:73:61:c5:ed:c5:6a:c0:33:36:44:
70:4e:c2:42:f9:96:a4:65:fd:18:c0:fe:17:58:52:fd:04:1f:
d5:a3:48:58:e5:65:b2:ee:db:4f:99:db:b6:17:40:a3:f7:16:
30:37:97:a7:dc:21:6a:fd:88:ea:24:8c:52:9f:db:2c:b7:25:
c0:c0:b5:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzm2vXvjj1dQjX9iDSKww5cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MWE2Y2JiMmRmNmU3ZmFjY2M1ODUzYmE1NDAwZjFmNDcw
ZWFiMTYwHhcNMjYwMzEzMTEwMDM1WhcNMjYwMzE0MTEwMDM1WjAzMTEwLwYDVQQD
EygzMTE2NjcwM2RhM2FlYWM5MjI2MGFhOGU5MjJjMGEwMmYwYWYxZGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5TV1sbUcJVHmLqsGa8nmp4CuLCM
cHDZ1mtnWtiEOxUc0gP+MvYGTbARtX8nuOlhEAxkoOTu0Sj15hKFhaUz5R47l89O
XmQEzz1VVJZ9lXgyE3G99dyzdnf/Alc7EJKQja5kDknJX6qM/O6T3quI5ohLD0Au
f2nWkzdBViC5EHnR2jHn2y24bMmGM/xpLaq7OpYfjiDmtudA5d5S3/Q4HPn0a/wG
Z+HmHQyByJlULFj06nMv4SjCl+5He7qwTOnKPRMj1uO2jKpKIRnyFnGuUMQbYhTp
G1PH5kTgfgoHZO6iVi5DYGVtFqWrcyFzH0p8XsNBNk64JvwO9xHWJ0MZmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEWZwPaOurJImCqjpIsCgLwrx3TMB8GA1UdIwQY
MBaAFJcabLst9uf6zMWFO6VADx9HDqsWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83ZDNmMDAtZDQ4Yy00MTZmLTkxOWUt
ZGMwMzg5ZjkxNjdkLzEvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS83ZDNmMDAtZDQ4Yy00MTZmLTkxOWUtZGMwMzg5ZjkxNjdk
LzEvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErZ3Fvqn
9vUqTsx5xukMfGT2Pe36cSsk8gQkXlntUAV3TMcjTOl4PcG8hDHg5q7++SkaMEYt
b4AyHbhA8hE71r5/vtjvGbVm3yU5y7KfHAyIbZ07nVY7B4bvzBc2yCz9Hb3ciWjb
FLFUV1psnPZ2NX/dHgYal8AeYqv9yIoZVdP2qt24mKBOSTW5WRwG02+3D/TyFbdQ
k7wudoCjom1Qb7Xh42IJ6hFjQomwVCMbmfXAF4BbS4NeowVJNbVzYcXtxWrAMzZE
cE7CQvmWpGX9GMD+F1hS/QQf1aNIWOVlsu7bT5nbthdAo/cWMDeXp9whav2I6iSM
Up/bLLclwMC1fg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 15:58:38 2026 by rpki-client