Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
File: LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft (raw, json)
Hash identifier: FGT3Pt7BNTHqD7Cdkyed3BsPJg+5oQkRA0w6kuowKso=
Subject key identifier: CE:0D:9B:74:0D:F1:5E:97:C3:68:2A:6F:B6:57:C9:E7:EB:4B:75:77
Authority key identifier: 2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
Certificate issuer: /CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Certificate serial: 01A162A10BA061A10FC6995373EAC81CE027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
Manifest number: 0279
Signing time: Thu 22 Oct 2026 08:01:23 +0000
Manifest this update: Thu 22 Oct 2026 08:01:23 +0000
Manifest next update: Fri 23 Oct 2026 08:01:23 +0000
Files and hashes: 1: 0xXbCURhYGAah-ub3QgpVnkd5sc.roa (hash: Q0oF/ybiwcu5gijOk6b+e5zoOovn/M1MtfwaMpdjGcE=)
2: 9yvmVURUkLMHk20MVeDjqLMtnVE.roa (hash: /RYvywBfKnZxdvL0x6U6DMMb9MrbE+OssqTLAfPCxa8=)
3: LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl (hash: Z+GQPUtLUopjuWCQI7JAE8OS7MeRbpHlv2R+mP16LXc=)
4: Nequ1Lfv45A-4d-1Vk4dCZmbP8I.roa (hash: bLVnDdjoc9G1dickoCoDDOI7CZ2glnUV81dCe9iXEnE=)
5: eFeaVaRSBkGil76pjqqdgdUkbzI.roa (hash: mK68NwlgziX7HL5QUueavEEpH7AmEQ0bjY5gVUd0cuc=)
6: rxqd0Gry-OP0vQizZ8B0iUOlhQk.roa (hash: YqR2/1gTcjcRib7Q7eC6pgNPFlvqofC4cwX5ccdPO5s=)
7: sk6WLXVZEkboXRVPMZBoeqCrxVY.roa (hash: 4xjEoOdVMoXraD+ur+OZrTrLjOFEYcxLVFCWWAfHvz8=)
8: uIxLvhO87cm4uLEN6CRbiRRAprg.roa (hash: /WkNAUA3svepJJ+1z611s33eGYD9olxUjtZpjS5M7lk=)
9: uhrvAuxzS5aftx3VHfde8tRACMk.roa (hash: 8t8x2EpQlFENAHhuFsJA0XsBIYVQrZTRSbhmAKKQQcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:a1:0b:a0:61:a1:0f:c6:99:53:73:ea:c8:1c:e0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Validity
Not Before: Oct 22 08:01:23 2026 GMT
Not After : Oct 23 08:01:23 2026 GMT
Subject: CN=ce0d9b740df15e97c3682a6fb657c9e7eb4b7577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7a:e8:74:8b:6d:28:9d:b6:36:a4:61:ad:4f:
72:3e:02:30:a8:82:a8:d8:3a:77:63:97:a9:92:30:
24:0f:6e:01:50:d2:47:f4:fb:00:b7:08:52:64:f1:
56:2e:8f:80:8c:ba:71:13:2a:a1:c4:56:7a:dd:f8:
99:91:d5:f7:25:e9:a6:d0:38:8b:b8:24:17:8f:8d:
1e:1c:ec:9e:f2:05:ca:1e:d1:25:72:20:2b:34:f7:
1e:1e:2e:14:5e:f3:d1:5a:d5:29:43:c7:be:d3:d3:
9f:92:9d:f5:a9:23:8a:6a:02:32:37:a3:8e:d0:45:
98:29:38:60:9d:61:2e:9a:21:6f:c4:04:3a:3e:92:
b1:48:da:e4:90:95:b8:21:47:34:55:d7:4d:dd:cf:
da:00:92:c8:a9:b5:96:f8:00:af:a4:78:12:26:4a:
9c:d9:e9:5c:c9:73:3a:d7:91:2e:20:f3:b9:2c:bb:
f3:7f:ae:85:ea:5b:ed:ec:40:41:ed:e7:e3:6e:ba:
2e:6f:1e:9c:d8:64:22:e5:6d:23:d6:36:0a:09:48:
b1:81:5a:69:43:3d:66:76:e4:a4:6c:b2:bb:ae:db:
f2:27:81:6d:7f:f2:49:b3:ff:7a:7c:6e:0d:12:ce:
80:3b:34:20:c8:6c:e9:5a:fa:44:08:48:b0:a2:db:
b9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0D:9B:74:0D:F1:5E:97:C3:68:2A:6F:B6:57:C9:E7:EB:4B:75:77
X509v3 Authority Key Identifier:
keyid:2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:5a:30:91:47:ab:74:c3:15:7b:61:a0:7d:7b:b5:f4:d4:6c:
8a:83:7b:82:99:98:10:35:c6:49:84:c5:5d:86:a7:ef:0b:12:
8f:7c:72:64:cf:98:df:48:69:7f:0c:1e:62:d0:55:e4:19:ac:
93:bf:23:74:a5:0b:85:88:49:48:b7:40:55:9b:e9:d9:6a:c1:
e6:f3:2a:10:49:6f:15:09:99:99:ea:cf:15:e9:07:62:cb:9c:
58:05:31:f1:c6:39:d4:36:8b:c4:de:19:d0:c2:b7:bc:b3:ea:
98:75:9d:57:0b:4d:dd:45:0e:43:2f:5b:a5:30:67:c6:1e:82:
80:62:1b:70:8b:6d:60:ae:25:6c:1e:fd:c7:b3:2a:bd:1f:8e:
e3:5d:57:f5:c3:ad:4c:57:22:3c:bc:5a:47:42:17:a4:29:1a:
76:43:44:d8:fa:1d:98:9a:5f:0e:b9:c3:bd:b3:80:da:98:d8:
25:73:f3:57:7f:5c:ad:18:83:33:b9:aa:df:35:52:cc:ef:c8:
07:4c:52:cd:80:41:a1:9d:0c:07:82:7e:50:14:67:01:cb:a6:
f2:32:f0:bf:11:ee:b3:90:5d:2b:d3:e2:70:7b:e9:8e:73:73:
bc:9b:36:23:87:b0:3c:d6:32:8f:db:70:5d:c9:25:f2:0f:e7:
60:02:63:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 17:40:35 2026 by rpki-client