Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft
File: LXjkrg653KxiXZEGzohcW0mAddc.mft (raw, json)
Hash identifier: 9XgezhUmA1GPjVAGsquQTb8F4j6YXaXA7X86lskF2Y8=
Subject key identifier: CF:64:A1:44:02:92:B2:53:18:D3:56:82:02:DB:9D:50:28:A9:A2:06
Authority key identifier: 2D:78:E4:AE:0E:B9:DC:AC:62:5D:91:06:CE:88:5C:5B:49:80:75:D7
Certificate issuer: /CN=2d78e4ae0eb9dcac625d9106ce885c5b498075d7
Certificate serial: 019D37F7793EF3735D12D45890BCB7C3DDD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft
Manifest number: 01F1
Signing time: Sun 29 Mar 2026 05:00:58 +0000
Manifest this update: Sun 29 Mar 2026 05:00:58 +0000
Manifest next update: Mon 30 Mar 2026 05:00:58 +0000
Files and hashes: 1: 55_ifAwTrqSRB0aOLB49nTVctSI.roa (hash: 4G0y1MW280JpB4GB7lc4Qiad6u1T/uOmjGofSaEn2fo=)
2: LXjkrg653KxiXZEGzohcW0mAddc.crl (hash: jYNj1YSm7wet9XevhipiPRxB3PJYy8IDznOYLoOdk44=)
3: O7uwantDjntNvlRH8RUE6UKocdY.roa (hash: TDMoKyC/SFI/TVzEIonzTVVbB4aesDSgkumTRMLegVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:79:3e:f3:73:5d:12:d4:58:90:bc:b7:c3:dd:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d78e4ae0eb9dcac625d9106ce885c5b498075d7
Validity
Not Before: Mar 29 05:00:58 2026 GMT
Not After : Mar 30 05:00:58 2026 GMT
Subject: CN=cf64a1440292b25318d3568202db9d5028a9a206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:56:ec:ba:77:9c:71:ba:d9:9d:d0:41:a6:d8:
8e:19:85:43:91:05:fd:25:ba:0c:74:db:d6:b3:0e:
bf:5b:81:05:84:3b:84:07:04:91:31:4b:7a:49:90:
8b:7b:5b:c8:d7:a7:c4:7c:36:c3:e5:2e:fd:80:cd:
2f:65:00:07:89:3f:e7:0f:70:1d:d4:77:ce:2f:50:
8b:1f:f5:0f:a6:4c:a1:96:63:b2:d6:fb:41:03:b8:
a9:0c:d4:74:91:67:1a:29:ff:29:e8:7f:44:dd:9d:
15:cd:12:c1:61:8a:e8:f3:10:e6:fa:31:31:a8:f2:
a9:89:54:6a:54:76:8b:00:93:b9:91:37:8a:4c:18:
f3:97:11:41:ad:82:db:49:1f:62:ce:36:39:d4:a8:
b6:e1:96:fb:b5:ee:6b:61:7a:16:e1:5b:cd:36:aa:
55:3a:9c:e7:25:84:a7:8a:10:2b:70:9a:06:fc:26:
f0:48:42:5f:cb:96:6a:66:07:c4:97:e8:99:61:1c:
80:49:5f:5d:9c:44:47:ec:31:e7:88:41:ad:df:07:
39:da:be:a5:58:51:d1:54:ad:71:28:e9:d5:6f:d9:
f6:3e:6b:6c:36:c4:ed:97:ed:9e:dd:cc:9a:c6:94:
9e:95:ce:8a:ff:48:af:26:4c:33:1f:35:fc:68:d5:
5c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:64:A1:44:02:92:B2:53:18:D3:56:82:02:DB:9D:50:28:A9:A2:06
X509v3 Authority Key Identifier:
keyid:2D:78:E4:AE:0E:B9:DC:AC:62:5D:91:06:CE:88:5C:5B:49:80:75:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:53:89:d9:86:77:dc:98:82:94:be:3d:6c:97:4e:aa:f0:62:
0f:f9:72:c3:f0:26:50:b6:0f:5a:cf:41:71:61:f5:62:9a:8a:
e8:f7:0e:61:e8:fd:10:98:61:a0:66:d8:08:f9:2c:af:25:4b:
03:cf:e6:15:96:6f:c2:a7:81:c4:2a:86:91:cd:e8:fa:f8:5d:
41:35:a8:43:fa:6e:e9:09:43:e8:21:1a:e7:93:14:5a:43:fd:
d0:93:4b:b4:83:56:9b:1c:27:69:1a:39:cf:ad:da:fe:60:0c:
f8:22:c7:4d:d1:a3:76:19:0c:80:0a:a5:b2:bf:ff:a0:fe:ba:
a1:15:bf:33:74:f6:5e:6a:dd:21:e7:89:a5:b2:6c:31:43:29:
c4:e5:c9:c8:5e:52:ee:55:b5:ed:f6:f9:d2:3a:ab:e3:84:45:
20:4c:63:e9:4a:14:dd:dd:98:e1:da:e1:93:9f:38:15:02:a4:
23:bb:d4:f7:d1:f3:88:92:1d:0d:c5:11:35:1e:74:c3:2a:27:
4d:4a:cc:de:6f:8d:84:1b:f7:05:78:11:e8:aa:2d:ae:27:64:
ff:04:6b:bc:5d:dc:30:5f:3b:9a:d3:86:be:5c:c5:df:9b:c1:
6c:06:00:ed:c6:bd:0d:31:8b:b0:9e:8a:71:25:44:0e:6d:d2:
e1:4e:bf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:41 2026 by rpki-client