Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
File: LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft (raw, json)
Hash identifier: 19iH/tK/fixq8e4pCZgESPNdNeRdm67qYQEtcDQeC7A=
Subject key identifier: B3:F8:3D:06:84:E7:67:36:0E:0E:B2:CA:2E:26:C8:86:E7:E7:72:91
Authority key identifier: 2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
Certificate issuer: /CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Certificate serial: 019CC89A21306E559E56AAD488909B49A9E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
Manifest number: 16
Signing time: Sat 07 Mar 2026 14:01:09 +0000
Manifest this update: Sat 07 Mar 2026 14:01:09 +0000
Manifest next update: Sun 08 Mar 2026 14:01:09 +0000
Files and hashes: 1: 9yvmVURUkLMHk20MVeDjqLMtnVE.roa (hash: /RYvywBfKnZxdvL0x6U6DMMb9MrbE+OssqTLAfPCxa8=)
2: LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl (hash: v5AgEcxr9G0SjgdjZ+VA0zhYK3eexuTBLvZmkw4GDbg=)
3: Nequ1Lfv45A-4d-1Vk4dCZmbP8I.roa (hash: bLVnDdjoc9G1dickoCoDDOI7CZ2glnUV81dCe9iXEnE=)
4: eFeaVaRSBkGil76pjqqdgdUkbzI.roa (hash: mK68NwlgziX7HL5QUueavEEpH7AmEQ0bjY5gVUd0cuc=)
5: rxqd0Gry-OP0vQizZ8B0iUOlhQk.roa (hash: YqR2/1gTcjcRib7Q7eC6pgNPFlvqofC4cwX5ccdPO5s=)
6: sk6WLXVZEkboXRVPMZBoeqCrxVY.roa (hash: 4xjEoOdVMoXraD+ur+OZrTrLjOFEYcxLVFCWWAfHvz8=)
7: uIxLvhO87cm4uLEN6CRbiRRAprg.roa (hash: /WkNAUA3svepJJ+1z611s33eGYD9olxUjtZpjS5M7lk=)
8: uhrvAuxzS5aftx3VHfde8tRACMk.roa (hash: 8t8x2EpQlFENAHhuFsJA0XsBIYVQrZTRSbhmAKKQQcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:9a:21:30:6e:55:9e:56:aa:d4:88:90:9b:49:a9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Validity
Not Before: Mar 7 14:01:09 2026 GMT
Not After : Mar 8 14:01:09 2026 GMT
Subject: CN=b3f83d0684e767360e0eb2ca2e26c886e7e77291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b2:44:50:99:b2:cf:30:52:f4:b0:50:f1:61:
fa:16:51:f1:42:5b:b5:a0:11:15:b4:c3:f6:31:72:
09:f9:4c:f2:99:bb:21:cb:c9:58:03:ba:fc:2d:51:
01:a2:65:01:27:b3:45:b8:0e:54:ca:94:5b:35:8e:
45:e0:4b:68:b3:5c:ab:31:05:d3:a3:c9:f5:98:c2:
7c:dc:10:86:ed:ad:06:18:2b:ac:64:0f:94:52:aa:
ff:fa:f1:12:a5:eb:24:9b:b5:84:e9:03:8e:90:23:
1b:c5:a2:61:b3:0d:27:ff:bc:94:db:1f:35:a3:21:
b2:01:1f:d8:bb:ac:02:ef:83:87:32:2d:d9:d7:76:
d7:57:ec:db:0d:7a:7d:23:a1:ef:3f:c7:cd:42:b5:
9b:4e:7a:23:27:88:6a:b4:4c:33:61:31:5c:42:06:
e7:94:7e:ca:e1:62:ea:39:79:06:a4:90:db:43:a9:
83:bc:72:eb:d4:5e:01:40:c8:7f:0c:9b:42:7f:4a:
ba:b2:4c:a6:f9:30:4f:07:81:82:cb:af:f2:f8:f4:
ff:9d:e9:bb:bd:dc:18:5c:49:fa:f7:fe:1e:74:4c:
8f:65:47:08:4b:ee:e3:70:e1:2f:8e:20:65:85:41:
f6:49:25:16:23:59:f6:6f:57:37:70:51:f1:b3:e4:
ee:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F8:3D:06:84:E7:67:36:0E:0E:B2:CA:2E:26:C8:86:E7:E7:72:91
X509v3 Authority Key Identifier:
keyid:2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:82:40:5c:64:61:25:7e:b8:99:79:7b:9d:eb:00:33:3f:b1:
0d:4b:4e:7f:9e:9b:cc:e9:26:db:0b:ad:ae:f1:ea:b3:41:5c:
25:dd:91:ca:e5:5f:29:05:8d:d0:44:b4:08:50:53:07:aa:23:
b0:30:38:69:f6:96:ec:fb:10:72:cc:9e:55:a2:f2:46:a8:e6:
ca:6d:ab:8e:87:c8:e6:7d:c7:1f:a9:2d:9f:25:32:e6:d5:ab:
82:2c:bc:ff:bc:af:1d:c0:0a:09:0d:0d:97:2d:06:f8:b8:f2:
17:c0:a3:2f:10:3b:bd:85:00:ff:fe:6d:16:37:99:82:9b:46:
03:2a:b5:57:12:9d:6f:01:ee:29:d3:39:1f:d0:65:0e:27:d2:
43:3a:39:c2:0d:99:79:e7:07:1e:12:bd:02:5a:1f:35:68:d3:
94:73:ec:b2:5b:71:ba:a0:c3:ff:f3:74:cc:9d:5b:22:11:2c:
65:af:a9:14:78:a2:20:d4:56:a7:d5:a4:f7:b6:49:f6:fd:9e:
7e:26:87:96:8c:0d:a4:70:cf:4b:3a:e0:40:b4:cc:ff:37:3c:
17:a2:ff:46:28:f6:f1:69:60:ea:30:25:10:22:92:3d:00:44:
77:3d:75:52:ff:36:e1:2f:6c:d5:2e:57:04:3c:b6:a2:4d:25:
0f:56:50:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 20:02:33 2026 by rpki-client