Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
File: lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json)
Hash identifier: fuWOsQ+HXag0STlLGWUQM/1AFdEWaEucGGJc73JnrfM=
Subject key identifier: AA:DC:51:0A:64:F0:68:45:51:E5:64:4C:07:24:7A:95:A2:79:56:D4
Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
Certificate issuer: /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Certificate serial: 019DD276935A4673145327D05A4ECA612DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
Manifest number: 18E1
Signing time: Tue 28 Apr 2026 05:01:19 +0000
Manifest this update: Tue 28 Apr 2026 05:01:19 +0000
Manifest next update: Wed 29 Apr 2026 05:01:19 +0000
Files and hashes: 1: ZF0nGmPtxtkDUZtYeSMT07Pwz_c.roa (hash: q2DrD4GQJdtgGN/2Czf9hDRS5eBg2LiwOsSKK4NE0Ks=)
2: k6BAsgY_7U_KIwQG-JQSaHDxB9c.roa (hash: mykJoSrib037xaFcqg06p/Ay95dFVkUOY6oQwzMXt3Y=)
3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: kzYBrjsqlUK8A216VQ9KjAbWC4MlzDz2OOTl1aW/wkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d2:76:93:5a:46:73:14:53:27:d0:5a:4e:ca:61:2d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Validity
Not Before: Apr 28 05:01:19 2026 GMT
Not After : Apr 29 05:01:19 2026 GMT
Subject: CN=aadc510a64f0684551e5644c07247a95a27956d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:77:db:55:45:a5:d9:0b:ed:b1:27:ee:74:b9:
a0:2f:bf:ba:81:be:ab:27:26:a9:70:3a:c6:f7:e6:
f0:68:f3:46:05:45:62:6a:16:3e:20:62:f2:77:a6:
e6:f7:54:b2:9f:d3:51:a5:81:8b:58:7e:01:8a:06:
33:70:b6:02:3b:d7:d8:bf:d0:45:83:55:b4:11:36:
23:ec:53:c1:6c:f1:c2:67:d4:f9:ed:b8:7d:c4:d0:
8b:7f:bd:ac:eb:f7:5d:99:fd:8a:1b:61:5b:2c:b9:
fe:89:8c:70:db:61:5e:08:fd:c7:b7:a7:60:1a:91:
26:ab:28:cf:1a:4e:28:70:2d:00:73:a4:67:e8:76:
92:74:d3:f7:2c:ae:e0:d9:9b:ad:bc:91:3f:fb:29:
b2:b9:4b:ec:d8:dd:5c:a2:a0:07:29:8c:4f:28:3b:
6f:42:81:6e:21:78:93:4f:e9:48:2e:6c:4a:c2:8d:
3c:b4:52:e6:0b:2c:ac:d9:7c:87:82:bd:40:e6:6e:
ef:73:70:6e:9d:2c:41:1d:f2:d3:fe:2b:b1:b3:17:
75:88:9b:8b:78:ef:d1:26:ab:5d:db:19:b9:92:1b:
0b:34:6f:2b:90:1f:f8:1f:02:aa:56:5f:0a:87:96:
95:c9:73:69:f5:d5:8e:45:c4:75:a6:7e:65:66:8b:
ba:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DC:51:0A:64:F0:68:45:51:E5:64:4C:07:24:7A:95:A2:79:56:D4
X509v3 Authority Key Identifier:
keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:22:af:5a:13:dd:ea:40:49:2d:75:72:ea:0d:e7:f0:54:21:
e1:52:9a:21:b9:64:c0:69:94:5c:4a:ad:f7:49:9d:31:9f:ab:
8d:53:9c:9e:4e:e4:77:35:b8:e6:0e:a1:7b:73:d6:7b:ed:81:
62:6b:fa:49:33:a4:0b:59:b5:36:b3:2c:b5:ab:b9:e2:8f:e4:
9d:e5:07:98:a5:07:aa:2e:75:9f:5e:22:5b:95:69:10:30:21:
41:3f:63:8b:5c:68:bc:ac:d1:a2:cc:7e:a7:c9:75:85:6d:fd:
3d:73:d5:a1:f8:1d:7f:e2:36:c3:eb:fb:4e:34:83:44:d9:4f:
e8:2c:37:61:8c:2c:13:4f:40:af:2f:d6:76:73:80:d6:2a:b9:
c9:29:07:b0:0a:cb:e5:d4:a5:2d:18:56:37:ed:f7:a9:97:c2:
25:fd:3f:93:f3:48:de:d7:b0:17:a6:a8:0f:ed:55:1e:cb:ac:
97:09:ba:0e:13:8e:da:76:6c:91:06:57:a3:c1:61:46:5e:14:
76:ea:dd:77:c9:cd:5c:d5:72:e4:ac:71:4a:81:f3:28:52:a3:
6b:5d:ac:54:83:cc:f6:d2:1a:30:42:e5:13:4a:49:29:4d:59:
83:d8:f1:78:f6:e4:c6:ad:11:ae:c8:39:56:56:f1:39:f6:3e:
40:ed:68:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 07:06:44 2026 by rpki-client