Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
File: LxXXiyVtKEWbhptybyMpSrP_Fz8.mft (raw, json)
Hash identifier: b9M31EIJPzHPnOC7naxelcxH7X5v+rotUhAb4+P6VOg=
Subject key identifier: E9:E1:69:AF:DE:1C:02:16:C1:0E:BF:D9:83:CA:B4:35:93:D9:F0:E6
Authority key identifier: 2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F
Certificate issuer: /CN=2f15d78b256d28459b869b726f23294ab3ff173f
Certificate serial: 019D37C0F194E4C5A1E55A3BB80A5EBC3B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
Manifest number: 08B4
Signing time: Sun 29 Mar 2026 04:01:24 +0000
Manifest this update: Sun 29 Mar 2026 04:01:24 +0000
Manifest next update: Mon 30 Mar 2026 04:01:24 +0000
Files and hashes: 1: LxXXiyVtKEWbhptybyMpSrP_Fz8.crl (hash: dRWcAR3IKnYlhXHaUBN7qUllhWSgNK+Cd26BGaMYWRU=)
2: rOf-HDDDWUjLrbyMntCj7Zxr5hQ.roa (hash: nH33C7dbdrbXUnx2qhd+AcU6xtieasJAwf4EGexUyEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f1:94:e4:c5:a1:e5:5a:3b:b8:0a:5e:bc:3b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f15d78b256d28459b869b726f23294ab3ff173f
Validity
Not Before: Mar 29 04:01:24 2026 GMT
Not After : Mar 30 04:01:24 2026 GMT
Subject: CN=e9e169afde1c0216c10ebfd983cab43593d9f0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:86:1a:2b:48:dd:8c:fa:06:f3:83:f5:14:
0a:f6:2b:9c:30:a5:65:f7:fb:28:2f:09:f0:a0:18:
92:ed:98:68:5f:f3:c3:94:31:06:c4:a7:c6:04:c6:
cf:80:c5:15:3d:b9:a5:e6:4a:eb:f2:7b:93:c5:26:
aa:fe:64:09:80:2a:76:95:f0:b1:00:e8:de:0b:42:
39:d2:60:ba:9a:76:1c:b7:fc:d1:71:b6:85:b6:88:
12:c0:b6:b4:08:f9:83:d1:d9:a3:10:d3:81:e6:ad:
a9:11:d6:fe:79:7f:91:e4:37:42:60:1d:26:a0:f3:
e6:43:ba:b3:1d:8d:6e:e9:87:c8:91:c0:5e:96:46:
dc:16:dd:e9:ae:fb:14:06:36:fc:15:ef:c4:43:fb:
4f:3c:0c:bf:fc:6a:95:ce:bf:5f:68:21:95:46:36:
5e:ec:46:82:1b:d8:d7:ab:50:f7:e6:97:ec:65:59:
df:07:43:15:33:33:33:ab:55:0e:ee:b2:af:e8:7b:
2c:32:8c:ad:ca:7d:7b:ed:96:06:91:c7:6e:9c:6c:
f2:96:00:1c:00:35:9b:ec:27:e0:e9:31:81:88:04:
b7:70:1f:7a:9c:5b:2d:2c:25:1a:c4:52:1b:f8:da:
86:16:84:73:8b:64:d4:18:f2:ce:d4:4a:53:5b:bc:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E1:69:AF:DE:1C:02:16:C1:0E:BF:D9:83:CA:B4:35:93:D9:F0:E6
X509v3 Authority Key Identifier:
keyid:2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7c:34:e5:5f:0c:3a:94:ff:48:20:b2:bd:d1:e3:5c:67:c6:
9d:f5:78:d7:17:54:11:53:3b:be:e8:8e:c4:66:c3:72:b8:f7:
f9:ea:c1:2a:8f:f9:2e:04:40:26:4f:bd:94:7f:03:08:12:49:
55:23:a8:e2:70:33:61:c2:9e:64:b8:b4:7a:01:c6:8a:b6:a9:
d2:ca:03:87:7b:ee:5f:8a:bf:e0:27:a2:cd:50:0c:b1:c1:de:
e2:29:2c:a6:27:bf:41:1b:b3:9e:4b:a4:73:9f:54:3d:20:93:
de:2d:ba:e9:1e:7b:22:c3:a4:7a:bd:3c:79:4f:08:84:f8:46:
db:b3:ae:1c:e2:d5:42:6d:66:d6:ca:18:ae:25:3f:5f:ae:7c:
3c:6b:9b:8b:26:af:42:97:3b:ad:03:04:f7:fa:eb:26:f5:bd:
1c:35:99:67:a1:e8:52:59:d1:cc:78:91:bd:c5:66:49:8a:9e:
27:1e:ad:0f:e2:50:94:d4:64:45:08:e6:d9:a1:d9:54:5b:55:
01:f6:f8:ca:9e:90:ed:7c:98:d3:60:c7:b2:db:5f:b0:b0:16:
63:6e:b8:bb:ae:27:13:c5:00:d1:4d:82:1f:7d:71:ad:f4:14:
c0:d7:16:7c:ab:2a:50:d4:13:fb:9f:b7:3b:37:b8:98:5e:9d:
ba:c8:01:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:41 2026 by rpki-client