Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
File: lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json)
Hash identifier: teEIzGy2ELCOgIzfbUPhXyZwt3J7ZA3QqHXNCEg+zek=
Subject key identifier: 7D:4B:A9:7D:04:4D:6F:6D:A0:91:2E:4E:D4:E6:FC:F0:12:68:DD:BB
Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
Certificate issuer: /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Certificate serial: 019FA3E04F310B2CADBA4F13977E54695909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
Manifest number: 19D2
Signing time: Mon 27 Jul 2026 14:00:14 +0000
Manifest this update: Mon 27 Jul 2026 14:00:14 +0000
Manifest next update: Tue 28 Jul 2026 14:00:14 +0000
Files and hashes: 1: ZF0nGmPtxtkDUZtYeSMT07Pwz_c.roa (hash: q2DrD4GQJdtgGN/2Czf9hDRS5eBg2LiwOsSKK4NE0Ks=)
2: k6BAsgY_7U_KIwQG-JQSaHDxB9c.roa (hash: mykJoSrib037xaFcqg06p/Ay95dFVkUOY6oQwzMXt3Y=)
3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: TwP9+tcmMvX9mhMmxodmezoMqWBOIFsSnq6ETFvK008=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:e0:4f:31:0b:2c:ad:ba:4f:13:97:7e:54:69:59:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Validity
Not Before: Jul 27 14:00:14 2026 GMT
Not After : Jul 28 14:00:14 2026 GMT
Subject: CN=7d4ba97d044d6f6da0912e4ed4e6fcf01268ddbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e7:18:28:70:e2:80:05:b4:4e:0a:1f:5b:98:
dc:e6:cf:40:ec:b1:55:60:76:37:7e:9f:16:2a:35:
c5:9a:a4:e6:67:43:ed:21:25:a9:c9:44:81:9d:e7:
6a:1d:0b:0b:c9:2b:88:9e:dc:63:89:30:90:a1:3e:
10:9c:31:d7:31:45:ad:43:eb:e6:a8:95:33:36:4f:
b4:2a:96:7a:a2:a5:31:72:c0:50:e5:97:e5:da:12:
ab:94:b7:c0:a6:01:02:8b:98:6f:f5:70:ec:64:4a:
8d:ea:da:ac:de:f6:92:df:d4:85:2c:54:43:f0:5b:
d0:79:ea:5f:c0:72:e4:4c:50:3f:9e:b0:a5:79:26:
e8:c5:73:48:bd:2f:12:e1:0e:e1:27:a9:1e:ae:48:
eb:20:49:1e:1a:23:75:29:3e:e0:15:bb:7a:d3:21:
8b:47:33:00:d5:7d:3b:30:8b:fa:82:17:77:fc:a6:
11:54:d7:a2:ce:ba:80:b4:b7:e9:6a:4e:a5:1a:d8:
df:4b:4d:66:b7:54:dc:ba:8d:65:01:cd:70:3d:d1:
26:22:8f:8b:65:c1:09:f4:28:c9:72:cd:b3:c5:d6:
91:54:00:58:5f:62:92:b1:14:a4:f4:53:67:4d:3d:
41:ae:c8:57:35:67:7a:87:97:48:3f:11:18:a3:22:
af:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4B:A9:7D:04:4D:6F:6D:A0:91:2E:4E:D4:E6:FC:F0:12:68:DD:BB
X509v3 Authority Key Identifier:
keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ac:5e:7e:ac:52:f1:d9:61:ef:80:a5:f5:1d:4b:95:69:93:
58:70:a0:67:6f:73:00:12:9d:b6:82:9f:56:da:5e:fa:7a:07:
e0:ba:bc:aa:87:d3:5c:88:f7:d0:23:fa:f3:f8:e1:d8:90:60:
e8:c9:d0:22:75:68:5c:ae:88:d3:60:67:7b:e4:27:3d:97:98:
69:69:f1:6f:ab:85:dd:c3:7c:9c:d6:7b:cb:64:b1:5f:e0:9b:
31:80:2f:b2:90:bb:d7:11:f7:67:d7:67:9c:48:d0:6e:1b:b3:
68:1d:02:1e:1f:fb:f9:4f:c5:91:1f:c8:89:1f:63:48:1c:c2:
4b:21:01:c6:bc:0e:e5:61:06:28:43:a2:b6:36:2f:ce:c6:bd:
04:ff:53:8b:ff:50:0f:96:05:04:35:1d:b2:4d:9c:bc:20:1b:
08:3b:a6:3f:83:be:ec:8b:8f:54:8d:54:70:3e:32:37:6e:9e:
23:7c:5b:42:a5:db:ec:26:6d:da:bd:36:2a:14:00:55:2d:b4:
55:23:89:95:9d:bb:54:1f:ee:d7:0f:6d:44:a2:2e:0e:91:64:
80:ab:6e:90:a6:2e:2a:2e:4d:2e:93:85:15:70:f8:68:60:9c:
19:21:b5:05:30:d6:52:e2:f3:d9:e3:f3:e4:c7:75:29:32:5b:
e1:a0:43:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:51:45 2026 by rpki-client