Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
File: lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json)
Hash identifier: A8bA/L6M1v3Na37dse6gZcA1noh1eRgowPS+t1l7YaE=
Subject key identifier: 2E:95:8F:82:9E:C1:DA:34:DE:68:50:0E:2E:89:1B:2B:C4:92:7B:C7
Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
Certificate issuer: /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Certificate serial: 019EBA34B249CBFE931F9BD1E507E9E50EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
Manifest number: 1959
Signing time: Fri 12 Jun 2026 05:01:16 +0000
Manifest this update: Fri 12 Jun 2026 05:01:16 +0000
Manifest next update: Sat 13 Jun 2026 05:01:16 +0000
Files and hashes: 1: ZF0nGmPtxtkDUZtYeSMT07Pwz_c.roa (hash: q2DrD4GQJdtgGN/2Czf9hDRS5eBg2LiwOsSKK4NE0Ks=)
2: k6BAsgY_7U_KIwQG-JQSaHDxB9c.roa (hash: mykJoSrib037xaFcqg06p/Ay95dFVkUOY6oQwzMXt3Y=)
3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: AQ17et5VchqQdKjRX4X1YqEef0m73OT2bcyO37Ivwkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:34:b2:49:cb:fe:93:1f:9b:d1:e5:07:e9:e5:0e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Validity
Not Before: Jun 12 05:01:16 2026 GMT
Not After : Jun 13 05:01:16 2026 GMT
Subject: CN=2e958f829ec1da34de68500e2e891b2bc4927bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:20:fc:8e:4f:bb:2c:d9:de:f9:b1:3b:83:b0:
48:39:70:d5:98:ab:3c:c3:c3:a0:25:ae:20:a0:c4:
cd:93:2e:69:eb:87:e1:e8:f8:0c:6a:57:e9:35:e4:
3b:ed:6f:26:21:0b:c8:d7:19:93:a6:f1:15:93:cd:
20:e1:a8:b0:f5:9d:e1:2c:f6:03:36:7f:fe:ea:88:
25:b5:1b:95:e0:07:ec:3e:6e:fb:9d:10:3d:ab:ef:
cc:e2:c7:33:df:ad:ba:f3:82:3e:5f:71:20:6e:70:
9a:7a:91:b2:d0:ba:a9:87:a5:64:86:4e:a9:88:a9:
b4:6d:b3:56:01:dd:e3:09:2e:79:54:42:9c:9b:bd:
53:b5:4f:b3:4f:39:53:34:a8:1d:90:b5:70:56:2f:
ef:03:be:50:1f:af:17:71:84:28:fb:5e:a9:e2:cf:
92:fc:4f:32:6e:9c:6d:67:dd:0d:3c:04:13:27:83:
9a:13:f1:96:e3:60:a4:1e:21:29:1f:67:a3:8e:a5:
4a:1c:4b:be:c9:4d:b5:cc:54:95:06:5c:4a:f2:49:
ef:ed:17:19:0c:86:3f:fd:f4:ff:5d:bf:4e:b7:e0:
48:05:d1:75:bf:97:d3:2d:d8:39:3d:a6:5e:c0:16:
13:81:08:b8:b2:db:1f:f6:d3:21:99:01:4d:b2:66:
a7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:95:8F:82:9E:C1:DA:34:DE:68:50:0E:2E:89:1B:2B:C4:92:7B:C7
X509v3 Authority Key Identifier:
keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c0:9a:39:87:39:e9:8e:44:30:49:1c:17:49:89:f8:ed:ea:
72:2e:4c:ad:0f:93:57:ce:b0:39:5e:8e:46:66:23:c1:f7:70:
6e:73:8b:62:a2:b2:d7:e3:7b:4a:88:91:df:c8:57:69:1b:20:
3a:11:37:27:d5:2e:c1:05:06:d1:ca:1c:2c:4b:df:36:e2:f4:
4b:9c:71:b3:5c:0c:4c:cb:aa:0f:f8:f9:f7:76:02:69:c0:7e:
2d:8d:56:07:6e:b3:70:ad:96:6e:15:ed:b8:6e:42:19:ee:bf:
29:89:9e:98:fc:dc:b6:7c:cb:52:9f:7c:be:3d:d6:84:54:71:
6e:f1:4c:43:ea:fe:6b:0a:3a:11:18:62:13:71:c1:b3:4a:69:
fa:92:b1:8d:d5:13:6e:ed:b2:67:bc:26:52:79:2c:71:69:20:
3d:80:bf:ba:72:b1:54:38:b6:bf:32:9e:a8:bd:2e:4e:ec:19:
c7:2a:b5:03:e9:4a:36:8d:b9:37:9b:94:0f:61:80:8a:51:6e:
7f:dc:07:d6:0e:95:3b:03:5f:5e:70:cc:07:0d:07:cb:49:98:
6e:7e:40:14:ef:37:ea:c1:08:ea:12:50:57:e0:61:f5:8d:cb:
05:7c:91:58:29:2e:a6:b7:8b:41:cc:7c:67:f9:9c:fc:29:09:
4d:6b:38:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ66NLJJy/6TH5vR5Qfp5Q7EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MWE2Y2JiMmRmNmU3ZmFjY2M1ODUzYmE1NDAwZjFmNDcw
ZWFiMTYwHhcNMjYwNjEyMDUwMTE2WhcNMjYwNjEzMDUwMTE2WjAzMTEwLwYDVQQD
EygyZTk1OGY4MjllYzFkYTM0ZGU2ODUwMGUyZTg5MWIyYmM0OTI3YmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSD8jk+7LNne+bE7g7BIOXDVmKs8
w8OgJa4goMTNky5p64fh6PgMalfpNeQ77W8mIQvI1xmTpvEVk80g4aiw9Z3hLPYD
Nn/+6ogltRuV4AfsPm77nRA9q+/M4scz362684I+X3EgbnCaepGy0Lqph6Vkhk6p
iKm0bbNWAd3jCS55VEKcm71TtU+zTzlTNKgdkLVwVi/vA75QH68XcYQo+16p4s+S
/E8ybpxtZ90NPAQTJ4OaE/GW42CkHiEpH2ejjqVKHEu+yU21zFSVBlxK8knv7RcZ
DIY//fT/Xb9Ot+BIBdF1v5fTLdg5PaZewBYTgQi4stsf9tMhmQFNsmanQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6Vj4Kewdo03mhQDi6JGyvEknvHMB8GA1UdIwQY
MBaAFJcabLst9uf6zMWFO6VADx9HDqsWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83ZDNmMDAtZDQ4Yy00MTZmLTkxOWUt
ZGMwMzg5ZjkxNjdkLzEvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS83ZDNmMDAtZDQ4Yy00MTZmLTkxOWUtZGMwMzg5ZjkxNjdk
LzEvbHhwc3V5MzI1X3JNeFlVN3BVQVBIMGNPcXhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcsCaOYc5
6Y5EMEkcF0mJ+O3qci5MrQ+TV86wOV6ORmYjwfdwbnOLYqKy1+N7SoiR38hXaRsg
OhE3J9UuwQUG0cocLEvfNuL0S5xxs1wMTMuqD/j593YCacB+LY1WB26zcK2WbhXt
uG5CGe6/KYmemPzctnzLUp98vj3WhFRxbvFMQ+r+awo6ERhiE3HBs0pp+pKxjdUT
bu2yZ7wmUnkscWkgPYC/unKxVDi2vzKeqL0uTuwZxyq1A+lKNo25N5uUD2GAilFu
f9wH1g6VOwNfXnDMBw0Hy0mYbn5AFO836sEI6hJQV+Bh9Y3LBXyRWCkupreLQcx8
Z/mc/CkJTWs4KQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 14:13:57 2026 by rpki-client