Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
File: lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json)
Hash identifier: jXUj5bbMCX0Z9txNJbewPn3vpn1h4ViRgTPT0FHcLGk=
Subject key identifier: 94:2E:FA:FC:4E:2F:67:73:EE:7B:C5:A5:2A:10:C5:9F:BE:52:BE:F1
Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
Certificate issuer: /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Certificate serial: 019DD087998631F799C584A244754C016A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
Manifest number: 18E0
Signing time: Mon 27 Apr 2026 20:00:40 +0000
Manifest this update: Mon 27 Apr 2026 20:00:40 +0000
Manifest next update: Tue 28 Apr 2026 20:00:40 +0000
Files and hashes: 1: ZF0nGmPtxtkDUZtYeSMT07Pwz_c.roa (hash: q2DrD4GQJdtgGN/2Czf9hDRS5eBg2LiwOsSKK4NE0Ks=)
2: k6BAsgY_7U_KIwQG-JQSaHDxB9c.roa (hash: mykJoSrib037xaFcqg06p/Ay95dFVkUOY6oQwzMXt3Y=)
3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: D4mjS6JZbUhf9jxVCZcMa71oV4i+XxUS5oxxSedkz/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:99:86:31:f7:99:c5:84:a2:44:75:4c:01:6a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Validity
Not Before: Apr 27 20:00:40 2026 GMT
Not After : Apr 28 20:00:40 2026 GMT
Subject: CN=942efafc4e2f6773ee7bc5a52a10c59fbe52bef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:34:5b:75:35:aa:89:c1:88:1e:c0:1d:ac:92:
36:a6:28:49:2b:f8:fd:ff:01:cd:dd:94:0a:98:17:
d4:95:ff:e3:3d:d9:96:c1:d4:49:70:61:b0:0c:14:
cf:3e:43:54:d6:73:89:e5:cf:34:8a:69:e3:5a:ae:
73:dd:1e:ed:67:42:c7:3d:06:2f:84:4b:45:cc:a7:
e5:a0:45:20:ee:95:42:c2:0a:80:03:f5:e2:3c:36:
b8:fb:ba:54:b0:7a:be:36:2d:73:5d:d3:53:0c:5d:
98:30:ba:d9:29:ad:b1:9e:00:2f:a9:ec:a6:0a:39:
ce:02:c0:62:5d:d7:ab:1c:a0:02:8f:66:db:ba:a2:
4e:72:2d:e2:d4:b5:b2:c5:0d:da:ad:43:22:c7:c0:
29:a2:bd:4a:6d:55:c0:15:73:58:bb:1c:4e:f7:19:
23:22:29:c0:87:5e:a6:1c:03:b5:aa:97:6b:16:8b:
ef:9f:6e:e2:c6:2e:b2:ed:a6:73:0e:f6:70:08:5c:
e2:ee:90:cc:5f:c1:67:41:63:b5:ab:85:85:4f:da:
ba:6a:86:e7:5c:3b:ae:68:33:f3:fc:80:07:dd:6c:
9d:49:85:86:21:56:a6:ea:08:70:b8:70:0e:07:1a:
f8:57:f8:84:c1:50:00:92:86:23:0c:97:1b:e8:61:
92:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2E:FA:FC:4E:2F:67:73:EE:7B:C5:A5:2A:10:C5:9F:BE:52:BE:F1
X509v3 Authority Key Identifier:
keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ed:27:ca:bb:3a:6f:e6:57:e4:67:22:93:34:6e:f6:5d:5d:
1e:a5:19:cd:99:f2:f0:86:cc:d7:0b:f8:22:09:50:7a:71:e1:
74:5e:bf:5b:00:75:a4:3d:25:29:0b:0c:74:7f:2b:eb:13:36:
1c:e5:b5:6d:bf:fc:eb:62:70:a9:65:12:3e:75:79:e4:9b:d4:
52:fd:16:1a:04:e7:07:70:cd:91:94:3f:ac:84:74:79:fb:8f:
13:80:f2:e6:63:62:78:8a:4f:88:16:d8:1d:b2:de:31:75:d1:
51:18:e3:0f:07:b1:76:4c:f3:c0:05:3d:d2:44:77:eb:53:4b:
03:b4:6a:d1:91:19:f1:d5:44:09:75:8a:30:63:54:53:8a:a3:
19:88:06:a6:5d:85:71:cd:9d:56:44:1e:f5:33:76:13:7b:60:
0c:1b:00:5f:9a:bd:0c:ac:94:36:3a:33:4e:93:e7:23:5a:24:
d2:35:7c:d1:43:f5:c0:92:f8:a5:96:e7:e5:63:32:29:45:55:
0c:ad:51:7a:b4:60:e7:a9:67:ee:9a:e1:7e:c3:f7:53:86:2f:
77:c0:77:2b:37:6c:9b:c8:64:f0:2c:7d:53:18:e5:a1:fc:c0:
3f:73:20:25:f3:e7:42:89:5e:89:f7:16:a9:57:e9:2e:47:b6:
13:aa:2e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 05:48:12 2026 by rpki-client