Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
File: LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft (raw, json)
Hash identifier: FZOSASAxSG/bTHseT9VEahSSTMeEPd/c/RWjs5Dlhs0=
Subject key identifier: C9:ED:25:30:B0:32:DC:1C:DF:52:A2:F0:2F:FD:19:D1:E3:F5:62:53
Authority key identifier: 2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
Certificate issuer: /CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Certificate serial: 019D382E08800345C78EAEE93CBB72A44ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:00:34 +0000
Manifest this update: Sun 29 Mar 2026 06:00:34 +0000
Manifest next update: Mon 30 Mar 2026 06:00:34 +0000
Files and hashes: 1: LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl (hash: B7/xeyDAxUesYTi4PPR6sK+YqfIDdntxMpEBgASwnqg=)
2: xJrl572dGNTyomn-v8TCuFg7I1A.roa (hash: 2x5cy4pJUQbMIYLAtAfVd42ocgzotDRP+XX1VY3Dv3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:08:80:03:45:c7:8e:ae:e9:3c:bb:72:a4:4e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Validity
Not Before: Mar 29 06:00:34 2026 GMT
Not After : Mar 30 06:00:34 2026 GMT
Subject: CN=c9ed2530b032dc1cdf52a2f02ffd19d1e3f56253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:65:59:9a:5e:d8:d5:75:d6:52:6b:a0:16:
6c:fc:62:6f:12:ac:6c:a9:82:71:9a:2d:1c:13:53:
61:02:0c:a3:5f:ff:57:ec:6a:9b:a3:a7:bd:18:79:
95:8f:fb:8a:10:ca:e5:08:3e:97:97:11:6b:71:1c:
90:22:bc:fa:04:e7:3e:18:5e:c1:0b:65:0d:1d:02:
1e:aa:dd:49:68:bd:a0:ed:4e:51:87:a4:fd:39:95:
76:63:f3:a6:3c:86:ca:7b:40:c3:d1:cd:2a:2e:d5:
2f:97:c2:eb:43:b2:67:1c:f8:14:d4:94:c0:6f:34:
e6:62:a4:06:d2:78:d9:55:53:54:a9:6d:85:6b:57:
e2:af:13:98:51:5f:78:d6:43:a4:55:ef:eb:86:af:
4c:19:17:f3:f7:23:f7:82:b0:40:c8:8e:4b:1c:45:
2a:07:ae:05:06:e6:6d:af:f6:46:2d:8b:f8:22:bf:
f8:a9:5e:3e:74:74:ff:91:97:42:53:61:0f:66:eb:
6c:66:17:db:d9:28:4d:67:76:b5:f1:50:9a:1f:d9:
17:fc:cd:a9:99:4f:3e:f6:75:9a:1f:39:11:31:88:
ad:24:30:9e:9a:6d:5c:2d:66:05:76:91:b1:65:02:
b0:7e:0f:cf:6c:04:81:f7:43:71:fb:65:74:1b:6a:
34:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:ED:25:30:B0:32:DC:1C:DF:52:A2:F0:2F:FD:19:D1:E3:F5:62:53
X509v3 Authority Key Identifier:
keyid:2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0c:7e:7d:c1:fc:5e:dd:d4:c1:b5:a2:79:56:aa:a8:98:ed:
d0:81:71:67:87:5b:4d:c8:7f:c3:d4:66:97:12:d2:92:67:21:
4b:70:4a:bc:5a:d7:5f:63:32:c0:53:5b:fa:09:d6:c0:5b:08:
be:77:c7:3a:a1:e7:27:7b:8f:31:60:61:d6:78:de:55:34:58:
98:1c:72:0a:ec:42:70:6b:14:c0:43:17:eb:65:cc:65:d3:1c:
60:dc:98:96:52:67:70:43:8f:75:06:c1:97:91:77:68:95:06:
ab:61:ac:d5:78:68:e8:37:5a:37:8a:b4:d1:51:e0:d5:52:42:
8f:d6:39:60:4d:1d:70:bd:35:0f:20:25:9d:a4:dd:ab:52:ec:
62:74:8e:dd:66:91:e7:b5:d7:80:a5:7d:c3:fc:6d:2c:83:db:
fe:7f:02:45:ac:c8:8f:89:af:0c:26:62:99:43:5a:85:17:78:
55:b5:41:83:ff:a6:50:c3:92:89:db:e7:74:ae:c2:99:18:23:
06:43:cc:ce:7e:a6:af:b1:6e:ab:06:f2:96:37:c1:4d:d0:c2:
6d:b3:29:95:56:0c:e1:bf:2a:a3:3b:4b:ed:92:20:7e:8d:a2:
06:11:36:e2:10:8e:6e:b1:9c:b2:cc:d2:0b:06:e1:c7:eb:33:
b3:80:2d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:00 2026 by rpki-client