Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
File: lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json)
Hash identifier: QiST2J8FttiKK/BYxEwfhtvOjxet/KU3tVGCLCHpQLs=
Subject key identifier: 8B:D7:8A:2B:C6:86:12:4E:F6:6D:09:C8:0D:F6:AF:AA:8E:2E:EA:CA
Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
Certificate issuer: /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Certificate serial: 01A08B9EE44A8EE07F6CFEF0B51B2082DEB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 14:00:40 +0000
Manifest this update: Thu 10 Sep 2026 14:00:40 +0000
Manifest next update: Fri 11 Sep 2026 14:00:40 +0000
Files and hashes: 1: ZF0nGmPtxtkDUZtYeSMT07Pwz_c.roa (hash: q2DrD4GQJdtgGN/2Czf9hDRS5eBg2LiwOsSKK4NE0Ks=)
2: k6BAsgY_7U_KIwQG-JQSaHDxB9c.roa (hash: mykJoSrib037xaFcqg06p/Ay95dFVkUOY6oQwzMXt3Y=)
3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: HAUMVnsweMhvowqIR1+OlHofIA/AJEMgERBG4aW6h9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9e:e4:4a:8e:e0:7f:6c:fe:f0:b5:1b:20:82:de:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Validity
Not Before: Sep 10 14:00:40 2026 GMT
Not After : Sep 11 14:00:40 2026 GMT
Subject: CN=8bd78a2bc686124ef66d09c80df6afaa8e2eeaca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:28:01:f8:84:95:6a:b1:bd:36:a9:12:8d:c4:
53:84:f7:1b:22:e0:06:eb:42:db:0c:14:61:53:68:
27:44:68:9a:a7:e2:a6:f0:e7:f3:02:ee:7e:4e:06:
ea:72:40:bd:49:79:e9:c4:0a:4a:e2:a9:d3:f0:b0:
f9:1a:ab:bf:69:53:ed:34:53:76:bb:5b:98:d3:ee:
0d:53:a6:1c:2f:e1:c1:c4:85:88:ee:fd:db:43:f2:
a6:46:b3:3a:40:bb:d5:42:6f:7f:ac:0d:c7:b4:7d:
9a:48:7e:6d:3b:4e:55:ae:9c:c6:3b:eb:b1:57:13:
24:e5:1a:42:22:ef:2c:05:4e:c5:44:fe:80:8c:e9:
74:2a:ee:e6:ac:2f:97:74:66:ef:a5:84:c6:90:5e:
7c:dc:9c:6e:a2:52:e9:4f:fe:2f:1d:c3:e7:27:43:
e0:9e:79:a8:93:2e:05:14:d8:5b:db:8b:21:c4:b0:
a4:1e:af:7b:d4:b4:01:02:1d:ce:1f:1a:52:b3:17:
95:b9:1f:65:16:1f:aa:7f:f9:b9:34:c1:15:3a:dc:
19:f2:3c:8a:2a:26:99:bd:e0:90:19:56:49:08:b7:
9a:dc:ac:05:60:8e:4b:1c:11:03:9b:fd:74:bc:34:
04:60:3d:88:e9:f5:ab:4b:68:92:99:5c:22:1c:07:
a1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D7:8A:2B:C6:86:12:4E:F6:6D:09:C8:0D:F6:AF:AA:8E:2E:EA:CA
X509v3 Authority Key Identifier:
keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4d:cc:34:14:a9:c6:b1:c1:97:b1:c2:15:c8:18:19:eb:f3:
52:f5:4c:2e:c4:40:23:fa:44:e1:ff:9b:cd:6a:85:a0:2b:af:
19:50:13:17:cb:b4:91:a9:3e:d0:08:5a:9d:1c:42:95:88:b4:
2d:0e:7a:33:fe:12:75:dd:70:c1:b7:1a:18:de:94:54:f6:45:
54:42:09:7a:0b:6a:75:e1:19:54:17:bf:f0:3e:82:47:3d:f8:
d4:71:85:c5:9a:72:59:fc:e6:c8:d4:ec:f2:01:eb:38:0c:83:
63:71:4c:77:48:b5:a1:10:2d:c4:62:d1:65:02:7e:5a:ea:ee:
8d:6a:b8:b6:1b:3a:35:97:0e:ea:1d:21:78:a5:3a:73:88:30:
ae:e9:37:ea:7b:a8:98:cb:e5:1e:c5:b0:94:09:51:35:d9:53:
72:b4:32:d0:5f:5d:ee:46:e7:0a:6e:a7:2a:f3:6f:be:e0:3b:
40:d6:4a:b1:c6:9f:27:a3:49:04:bf:aa:54:6f:8b:ad:df:cd:
b1:c6:d5:79:e8:f2:14:95:6b:32:db:d6:f6:5e:b4:18:bc:f6:
09:9c:0c:ba:fa:f9:7d:8d:13:5f:7f:57:b6:7c:df:58:35:10:
62:99:d3:1f:bc:9f:79:cd:0f:41:5c:51:ca:9c:d5:13:08:26:
40:82:e4:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLnuRKjuB/bP7wtRsggt63MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MWE2Y2JiMmRmNmU3ZmFjY2M1ODUzYmE1NDAwZjFmNDcw
ZWFiMTYwHhcNMjYwOTEwMTQwMDQwWhcNMjYwOTExMTQwMDQwWjAzMTEwLwYDVQQD
Eyg4YmQ3OGEyYmM2ODYxMjRlZjY2ZDA5YzgwZGY2YWZhYThlMmVlYWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoigB+ISVarG9NqkSjcRThPcbIuAG
60LbDBRhU2gnRGiap+Km8OfzAu5+TgbqckC9SXnpxApK4qnT8LD5Gqu/aVPtNFN2
u1uY0+4NU6YcL+HBxIWI7v3bQ/KmRrM6QLvVQm9/rA3HtH2aSH5tO05VrpzGO+ux
VxMk5RpCIu8sBU7FRP6AjOl0Ku7mrC+XdGbvpYTGkF583JxuolLpT/4vHcPnJ0Pg
nnmoky4FFNhb24shxLCkHq971LQBAh3OHxpSsxeVuR9lFh+qf/m5NMEVOtwZ8jyK
KiaZveCQGVZJCLea3KwFYI5LHBEDm/10vDQEYD2I6fWrS2iSmVwiHAeh9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvXiivGhhJO9m0JyA32r6qOLurKMB8GA1UdIwQY
MBaAFJcabLst9uf6zMWFO6VADx9HDqsWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83ZDNmMDAtZDQ4Yy00MTZmLTkxOWUt
ZGMwMzg5ZjkxNjdkLzEvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS83ZDNmMDAtZDQ4Yy00MTZmLTkxOWUtZGMwMzg5ZjkxNjdk
LzEvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiU3MNBSp
xrHBl7HCFcgYGevzUvVMLsRAI/pE4f+bzWqFoCuvGVATF8u0kak+0AhanRxClYi0
LQ56M/4Sdd1wwbcaGN6UVPZFVEIJegtqdeEZVBe/8D6CRz341HGFxZpyWfzmyNTs
8gHrOAyDY3FMd0i1oRAtxGLRZQJ+WurujWq4ths6NZcO6h0heKU6c4gwruk36nuo
mMvlHsWwlAlRNdlTcrQy0F9d7kbnCm6nKvNvvuA7QNZKscafJ6NJBL+qVG+Lrd/N
scbVeejyFJVrMtvW9l60GLz2CZwMuvr5fY0TX39XtnzfWDUQYpnTH7yfec0PQVxR
ypzVEwgmQILkOg==
-----END CERTIFICATE-----
Generated at Fri Sep 11 01:18:35 2026 by rpki-client